{"url":"https://pypi.sbomify.com/package/tosnativeclient/1.1.20","markdown_url":"https://pypi.sbomify.com/package/tosnativeclient/1.1.20.md","name":"tosnativeclient","version":"1.1.20","purl":"pkg:pypi/tosnativeclient@1.1.20","summary":"python native client for tos","author":null,"project_urls":{},"requires_python":">=3.8","license":null,"classifiers":["License :: OSI Approved :: Apache Software License","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/bf/8f/0176f9887db584185c773a8cc0f5b4a8e4785d1e676c5b008c09746b95ed/tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"cbf5d9c8-fa17-5f65-9da9-ec865d08e6b9","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cbf5d9c8-fa17-5f65-9da9-ec865d08e6b9/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/68/f1/a821e98451975cb5623712b278ee0f56c34e2d5512cf4b52d8c5d95d0784/tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"a9c64547-dd1d-598d-944e-bc51266faac3","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a9c64547-dd1d-598d-944e-bc51266faac3/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/27/2c/dbcb81a4e63d06adb321e895b418e1088a940decbe716386489a49f51a7d/tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"2bfb4c5f-ca60-5cb2-a44a-ccb80166657a","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2bfb4c5f-ca60-5cb2-a44a-ccb80166657a/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/e6/c0/1de6651d2baed2c6570685f881a712a634ae020e242415dec2be6a94d1ac/tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"8ddee19c-fe76-55cb-b6fb-3ab27553969a","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8ddee19c-fe76-55cb-b6fb-3ab27553969a/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/f0/d1/3bdf72e4f0b64f665c8da8329470495fa262ec2015e3446569600d151813/tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"5d53fe2a-38a5-5742-a6d1-11c33b329214","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5d53fe2a-38a5-5742-a6d1-11c33b329214/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/42/55/32108a0013880bf3b37b1d1391549760eaaea17a464f27195efeedd5114a/tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"2211d66d-c822-546d-aafc-e46eff1354be","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2211d66d-c822-546d-aafc-e46eff1354be/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/3c/d5/74f35bd89fab000f2d28c57e20d5b30638dc30417f97c4f2e0e1813f0cb4/tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"1d3ee231-9e06-57fc-af5a-fa5aaf5416b8","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1d3ee231-9e06-57fc-af5a-fa5aaf5416b8/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/d7/47/fee205a242c8cc012683974d7d9f1b2806782dea50e6403f9b7185902a28/tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"3c2fb124-9797-50bc-ab7d-fa4d078205a7","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3c2fb124-9797-50bc-ab7d-fa4d078205a7/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/7f/e7/9906af321e808da321d201aae8887a35276bc894380ef38799644bf7cdf7/tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"d86bbc36-0cea-5341-9c47-951d8a638d20","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d86bbc36-0cea-5341-9c47-951d8a638d20/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/34/6f/842412c87c5a6cc20102e0942e0a4afac938f4e3dfeff48563407bad3fd0/tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"e6d82102-7a1f-519a-a60d-6f8197b638ec","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e6d82102-7a1f-519a-a60d-6f8197b638ec/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","url":"https://files.pythonhosted.org/packages/60/d0/0f37b0955d08633f42a119a588e2636ffdb5e79a0a9256d113d9487deeab/tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","sboms":[{"artifact_uuid":"321a479e-674e-5ad7-a4af-cfc36e9a35fb","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/321a479e-674e-5ad7-a4af-cfc36e9a35fb/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/ec/23/df4bf918e123a259f96a23b6048752a96903f7e060ba8abb842cdfea2795/tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"ec0f7959-2c17-5194-870a-3c87d4066933","path":"tosnativeclient-1.1.20.dist-info/sboms/tosnativeclient.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ec0f7959-2c17-5194-870a-3c87d4066933/download","vulnerability_count":48,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-123607","aliases":["GHSA-3v94-mw7p-v465","RUSTSEC-2026-0118","RUSTSEC-2026-0120"],"summary":"NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses","severity":"high","score":8.7,"package":"hickory-proto","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto@0.25.2","fixed":["0.26.0-beta.1"],"url":"https://insights.sbomify.com/CVE-2026-123607/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.25.0","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.0","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93657","aliases":["GHSA-5j98-2g5x-46v6"],"summary":"hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures","severity":"high","score":7.5,"package":"hickory-resolver","version":"0.24.4","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.24.4","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-93657/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93657","aliases":["GHSA-5j98-2g5x-46v6"],"summary":"hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures","severity":"high","score":7.5,"package":"hickory-resolver","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.25.2","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-93657/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.26.0","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.26.0","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.26.0","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.26.0","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-25800","aliases":["GHSA-4w2j-m93h-cj5j","RUSTSEC-2026-0185"],"summary":" Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.15"],"url":"https://insights.sbomify.com/CVE-2026-25800/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93599","aliases":["GHSA-82j2-j2ch-gfr8","RUSTSEC-2026-0104"],"summary":"Reachable panic in certificate revocation list parsing","severity":"high","score":7.5,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.13"],"url":"https://insights.sbomify.com/CVE-2026-93599/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93599","aliases":["GHSA-82j2-j2ch-gfr8","RUSTSEC-2026-0104"],"summary":"Reachable panic in certificate revocation list parsing","severity":"high","score":7.5,"package":"rustls-webpki","version":"0.103.11","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.11","fixed":["0.103.13"],"url":"https://insights.sbomify.com/CVE-2026-93599/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123608","aliases":["GHSA-q2qq-hmj6-3wpp","RUSTSEC-2026-0119"],"summary":"CPU exhaustion during message encoding due to O(n²) name compression","severity":"medium","score":6.9,"package":"hickory-proto","version":"0.24.4","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto@0.24.4","fixed":["0.26.1"],"url":"https://insights.sbomify.com/CVE-2026-123608/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123608","aliases":["GHSA-q2qq-hmj6-3wpp","RUSTSEC-2026-0119"],"summary":"CPU exhaustion during message encoding due to O(n²) name compression","severity":"medium","score":6.9,"package":"hickory-proto","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto@0.25.2","fixed":["0.26.1"],"url":"https://insights.sbomify.com/CVE-2026-123608/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123585","aliases":["GHSA-6f2x-v7q7-m7m5"],"summary":"hickory-resolver follows irrelevant CNAME records","severity":"medium","score":6.9,"package":"hickory-resolver","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.25.2","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-123585/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.41","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.41","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.25.0","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.0","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.38","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.38","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.38","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.38","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.","severity":"low","score":3.7,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.38","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.38","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.38","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.38","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2025-58160","aliases":["GHSA-xwfj-jgwm-7wp5","RUSTSEC-2025-0055"],"summary":"Logging user input may result in poisoning logs with ANSI escape sequences","severity":"low","score":2.3,"package":"tracing-subscriber","version":"0.3.19","ecosystem":"crates.io","purl":"pkg:cargo/tracing-subscriber@0.3.19","fixed":["0.3.20"],"url":"https://insights.sbomify.com/CVE-2025-58160/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93600","aliases":["GHSA-965h-392x-2mh5","RUSTSEC-2026-0098"],"summary":"Name constraints for URI names were incorrectly accepted","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93600/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93600","aliases":["GHSA-965h-392x-2mh5","RUSTSEC-2026-0098"],"summary":"Name constraints for URI names were incorrectly accepted","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.103.11","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.11","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93600/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93601","aliases":["GHSA-xgp8-3hg3-c2mh","RUSTSEC-2026-0099"],"summary":"Name constraints were accepted for certificates asserting a wildcard name","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93601/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93601","aliases":["GHSA-xgp8-3hg3-c2mh","RUSTSEC-2026-0099"],"summary":"Name constraints were accepted for certificates asserting a wildcard name","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.103.11","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.11","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93601/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.0","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.0","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.3.26","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.3.26","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.3","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.3","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.9","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.9","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.9.2","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.9.2","fixed":["0.9.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0233","aliases":[],"summary":"Crafted archives can cause a use-after-free during deserialization","severity":"unknown","score":null,"package":"rkyv","version":"0.8.16","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.8.16","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0233","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0234","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing hash tables","severity":"unknown","score":null,"package":"rkyv","version":"0.8.16","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.8.16","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0234","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0235","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc","severity":"unknown","score":null,"package":"rkyv","version":"0.8.16","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.8.16","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0235","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"1.0.4","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@1.0.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.11","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.11","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.45.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.45.1","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"0.25.4","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@0.25.4","fixed":["0.26.11"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.6","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.6","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["tosnativeclient-1.1.20-cp310-cp310-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp310-cp310-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp311-cp311-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp312-cp312-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp313-cp313-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp38-cp38-manylinux_2_34_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_31_x86_64.whl","tosnativeclient-1.1.20-cp39-cp39-manylinux_2_34_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":10,"medium":8,"low":9,"unknown":21}}}