{"url":"https://pypi.sbomify.com/package/syside-license/0.4.0","markdown_url":"https://pypi.sbomify.com/package/syside-license/0.4.0.md","name":"syside-license","version":"0.4.0","purl":"pkg:pypi/syside-license@0.4.0","summary":"License checker for the Syside tools.","author":null,"project_urls":{"Homepage":"https://sensmetry.com/syside","Issues":"https://forum.sensmetry.com/c/syside/bug-reports/5"},"requires_python":">=3.8","license":null,"classifiers":["Intended Audience :: Developers","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: 3.9","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust","Topic :: Scientific/Engineering"],"wheels":[{"filename":"syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/b5/7a/f6a49323a0eb533b32f9ca0abdb6f2782b41203151b0dc7919d0a17d97ac/syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"561e6dd8-6750-5fa3-b599-878d69193f96","path":"syside_license-0.4.0.dist-info/sboms/checker-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/561e6dd8-6750-5fa3-b599-878d69193f96/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/d7/2b/fd16c86f707c1d07ac7879891c10a0674d731725bf292b59daed33a031a4/syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"34b1c8fe-3cc1-58cb-ab85-b125570011fe","path":"syside_license-0.4.0.dist-info/sboms/checker-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/34b1c8fe-3cc1-58cb-ab85-b125570011fe/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/bf/d3/ccf54b347a69afe034ccde9164025d59e358e56fa41e8e0116016a46ec59/syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"2fc1bb7e-a73d-549c-8de3-f419a87df499","path":"syside_license-0.4.0.dist-info/sboms/checker-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2fc1bb7e-a73d-549c-8de3-f419a87df499/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"syside_license-0.4.0-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/df/eb/b1b1fc82d697da24129d5173354709ea5f92581cb82675ea11d80020837d/syside_license-0.4.0-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"d220b88b-0ce3-5602-b443-305ff04f97dc","path":"syside_license-0.4.0.dist-info/sboms/checker-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d220b88b-0ce3-5602-b443-305ff04f97dc/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"syside_license-0.4.0-cp312-abi3-win_arm64.whl","url":"https://files.pythonhosted.org/packages/ab/9b/6e74e523bc2d6af021a8df88978c99744edaffd998e52360451f641547cf/syside_license-0.4.0-cp312-abi3-win_arm64.whl","sboms":[{"artifact_uuid":"db42c1d5-375d-5040-ba91-74492e34bb79","path":"syside_license-0.4.0.dist-info/sboms/checker-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/db42c1d5-375d-5040-ba91-74492e34bb79/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-42327","aliases":["GHSA-xp3w-r5p5-63rr"],"summary":"rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs","severity":"high","score":8.7,"package":"openssl","version":"0.10.78","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.78","fixed":["0.10.79"],"url":"https://insights.sbomify.com/CVE-2026-42327/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-44662","aliases":["GHSA-xv59-967r-8726"],"summary":"rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding","severity":"medium","score":5.1,"package":"openssl","version":"0.10.78","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.78","fixed":["0.10.79"],"url":"https://insights.sbomify.com/CVE-2026-44662/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-45784","aliases":["GHSA-phqj-4mhp-q6mq"],"summary":"rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers","severity":"medium","score":5.1,"package":"openssl","version":"0.10.78","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.78","fixed":["0.10.80"],"url":"https://insights.sbomify.com/CVE-2026-45784/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"GHSA-2p6r-x3vv-xqm2","aliases":[],"summary":"rpassword affected by partial password reveal when input is interrupted ","severity":"low","score":3.8,"package":"rpassword","version":"7.4.0","ecosystem":"crates.io","purl":"pkg:cargo/rpassword@7.4.0","fixed":["7.5.0"],"url":"https://osv.dev/vulnerability/GHSA-2p6r-x3vv-xqm2","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.1","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.1","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.28","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.28","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["syside_license-0.4.0-cp312-abi3-macosx_10_12_x86_64.whl","syside_license-0.4.0-cp312-abi3-macosx_11_0_arm64.whl","syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl","syside_license-0.4.0-cp312-abi3-win_amd64.whl","syside_license-0.4.0-cp312-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0371","aliases":[],"summary":"`zbus_names` is unmaintained","severity":"unknown","score":null,"package":"zbus_names","version":"3.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zbus_names@3.0.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0371","wheels":["syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl"]},{"id":"RUSTSEC-2026-0370","aliases":[],"summary":"`zvariant` is unmaintained","severity":"unknown","score":null,"package":"zvariant","version":"4.2.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant@4.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0370","wheels":["syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl"]},{"id":"RUSTSEC-2026-0372","aliases":[],"summary":"`zvariant_derive` is unmaintained","severity":"unknown","score":null,"package":"zvariant_derive","version":"4.2.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant_derive@4.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0372","wheels":["syside_license-0.4.0-cp312-abi3-manylinux_2_31_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":4,"low":4,"unknown":7}}}