{"url":"https://pypi.sbomify.com/package/treesearch-ud/0.3.1","markdown_url":"https://pypi.sbomify.com/package/treesearch-ud/0.3.1.md","name":"treesearch-ud","version":"0.3.1","purl":"pkg:pypi/treesearch-ud@0.3.1","summary":"High-performance toolkit for querying linguistic dependency parses","author":null,"project_urls":{"Documentation":"https://rmalouf.github.io/treesearch/","Homepage":"https://github.com/rmalouf/treesearch","Issues":"https://github.com/rmalouf/treesearch/issues","Repository":"https://github.com/rmalouf/treesearch"},"requires_python":">=3.12","license":null,"classifiers":["Development Status :: 3 - Alpha","Intended Audience :: Science/Research","License :: OSI Approved :: MIT License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: Text Processing :: Linguistic","Typing :: Typed"],"wheels":[{"filename":"treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/2a/01/b61785108726cf02d6d69f4a95d4f0ed93e7069520802c25fc74e0d480b8/treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"560aee8c-ef1b-53af-8f66-5fc2b2d5cd18","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/560aee8c-ef1b-53af-8f66-5fc2b2d5cd18/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/b0/96/a12ec2dda05c155dea8abe452688eeabe21f4818deddeb62f32fcb2f7634/treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"2a37634a-2100-54ce-a8f0-61b1219b4dad","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2a37634a-2100-54ce-a8f0-61b1219b4dad/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/75/ae/337f6cd27e70fd641f2a03c5ef53a8c1bf4c5a1f27c1310e22fe9f4dbf9c/treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"09a54fad-6021-5bbb-b4b3-cce6f9589912","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/09a54fad-6021-5bbb-b4b3-cce6f9589912/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/13/7e/eae92fa27813632c7e34021b6473d7f706b859960f88083e12284063d900/treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"d3c54600-b31c-5e27-b534-33b224d441c5","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d3c54600-b31c-5e27-b534-33b224d441c5/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/a6/10/0c65a271bb3caba9ac7f39c93b1b6400ca80463634b5007ae89ff772ddd8/treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"79013d76-295c-5799-81d7-742ce6d23460","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/79013d76-295c-5799-81d7-742ce6d23460/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/09/39/e29d4be05da38f5e1a67d9036c2ef6a8fc7dc0b19e132c851077918400b2/treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"d8b5ad93-3a15-54e7-a9a4-a773cda4f1d2","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d8b5ad93-3a15-54e7-a9a4-a773cda4f1d2/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/ed/7d/4da7778545dc45b10b6026188783dc5b7f3969d74765a4248e699c526792/treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"7930628a-53a5-55f7-ac18-d832c8120f63","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7930628a-53a5-55f7-ac18-d832c8120f63/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/72/0c/a4347f61b047e5336cca857dd2790754752e157b52e35ccdf8ef50d4c890/treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"6ef049eb-e7f5-50de-afa8-e66d7f378733","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6ef049eb-e7f5-50de-afa8-e66d7f378733/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/23/df/5b994becf8ce8931c4de756f66e291649e135b98e9ede6754862fccff2d8/treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"727e0c37-9c7c-52ac-8e4e-9df148d0d388","path":"treesearch_ud-0.3.1.dist-info/sboms/treesearch-ud.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/727e0c37-9c7c-52ac-8e4e-9df148d0d388/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"rmalouf/treesearch","workflow":"pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.10":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/rmalouf/treesearch","1.3.6.1.4.1.57264.1.13":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.15":"1109455039","1.3.6.1.4.1.57264.1.16":"https://github.com/rmalouf","1.3.6.1.4.1.57264.1.17":"657077","1.3.6.1.4.1.57264.1.18":"https://github.com/rmalouf/treesearch/.github/workflows/pypi.yml@refs/tags/v0.3.1","1.3.6.1.4.1.57264.1.19":"0de219f0b920b6526c829c823f9d55e5b368e1a2","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/rmalouf/treesearch/actions/runs/37831684630/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":9,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.14.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.14.0","fixed":["0.13.4","0.14.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.1.0+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.1.0%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["treesearch_ud-0.3.1-cp312-abi3-macosx_10_12_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","treesearch_ud-0.3.1-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","treesearch_ud-0.3.1-cp312-abi3-win_amd64.whl","treesearch_ud-0.3.1-cp313-cp313t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp313-cp313t-manylinux_2_34_x86_64.whl","treesearch_ud-0.3.1-cp314-cp314t-macosx_11_0_arm64.whl","treesearch_ud-0.3.1-cp314-cp314t-manylinux_2_34_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":9,"total_sboms":9,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":14}}}