{"url":"https://pypi.sbomify.com/package/truss-transfer/0.0.44","markdown_url":"https://pypi.sbomify.com/package/truss-transfer/0.0.44.md","name":"truss-transfer","version":"0.0.44","purl":"pkg:pypi/truss-transfer@0.0.44","summary":"Speed up file transfers with the baseten.co + baseten_fs.","author":null,"project_urls":{"Issues":"https://github.com/basetenlabs/truss/issues","Repository":"https://github.com/basetenlabs/truss.git"},"requires_python":">=3.8","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/7c/c0/9c030b278cccda4d67766839b404493d61f7a05c9556bdb789d52990e42a/truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"d28f96fe-9aa2-5fe0-99bc-f8ad71bcb9b5","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d28f96fe-9aa2-5fe0-99bc-f8ad71bcb9b5/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/12/c7/a573437f5672da8717bc872ecb6b162f671b68998611958c087cf030778c/truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"54b6068a-83c3-5b95-a617-e7b9610bbd1d","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/54b6068a-83c3-5b95-a617-e7b9610bbd1d/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","url":"https://files.pythonhosted.org/packages/d2/a4/ccae0f572775c4ecf38c7afec5e97c799effa263f9f8afe0fff56cd8dddc/truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","sboms":[{"artifact_uuid":"572752f9-63eb-5b60-8627-bbb68cc2c20c","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/572752f9-63eb-5b60-8627-bbb68cc2c20c/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","url":"https://files.pythonhosted.org/packages/e2/8c/632841e4e5609a512cade73196900768489ed065b71f39808ea14920ed74/truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","sboms":[{"artifact_uuid":"69fc1d8d-44b1-52d5-a0a1-a0a9e3f1225d","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/69fc1d8d-44b1-52d5-a0a1-a0a9e3f1225d/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/cf/04/b904d9d3b9a843e760e2c9534e0a6736c75c56b00b34f529d1f73966b6c6/truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"6074cbec-f265-59bc-a105-29df79e6ff14","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6074cbec-f265-59bc-a105-29df79e6ff14/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/6c/ac/f580a74d3d24c4a1f0003f9fbc1ef4566403a25a33645a193e4fc175b8f3/truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"a8a5c71d-253b-5f1c-8603-9c3b695a8ee6","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a8a5c71d-253b-5f1c-8603-9c3b695a8ee6/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","url":"https://files.pythonhosted.org/packages/ca/e5/52f6dc2d25d9dd664e5014395a4ee81118ff0b17b8ca35239eb3cc9bd7c5/truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","sboms":[{"artifact_uuid":"a601b526-0c26-5fa2-87c7-ee0bd5499ec3","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a601b526-0c26-5fa2-87c7-ee0bd5499ec3/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/fa/a5/3563795718c87f458d957ef2377acc71f2540ab7c7c9d07d6b1a63a81e8e/truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"deaf7f5b-3143-5066-8dea-90ca7141a03c","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/deaf7f5b-3143-5066-8dea-90ca7141a03c/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","url":"https://files.pythonhosted.org/packages/8d/10/35e2d842e8fed81541a392cc8c3c97b75cbc7d28dae29c828094df29d6b7/truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","sboms":[{"artifact_uuid":"e191540e-f650-5e38-8e6b-56d5afb2aa05","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e191540e-f650-5e38-8e6b-56d5afb2aa05/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","url":"https://files.pythonhosted.org/packages/ba/91/cd48d9b46b175e2c7230efc87ec3ccd3c34d88965ae0705c3a3ef3a4e7c0/truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","sboms":[{"artifact_uuid":"42a3da19-1264-5a24-b8c2-06c160376669","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/42a3da19-1264-5a24-b8c2-06c160376669/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/60/06/408e30574a78c86fa052cc7be8fdf69a0c3c1219dca7d2bd28bb63141aed/truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"0a906ba1-e8f0-5814-bdd1-bd674240bfca","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0a906ba1-e8f0-5814-bdd1-bd674240bfca/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"truss_transfer-0.0.44-cp38-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/ee/c0/f778e0ad2ee173171c73e4e6d4f022e23d98c25ba5920a4244eae198c3a6/truss_transfer-0.0.44-cp38-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"b6ae01c0-b636-52b5-9e54-11d663ab5036","path":"truss_transfer-0.0.44.dist-info/sboms/truss_transfer.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b6ae01c0-b636-52b5-9e54-11d663ab5036/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.24.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.24.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-31812","aliases":["GHSA-6xvm-j4wr-6v98","RUSTSEC-2026-0037"],"summary":"Denial of service in Quinn endpoints","severity":"high","score":8.7,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.14"],"url":"https://insights.sbomify.com/CVE-2026-31812/","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.0","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.0","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.0","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.0","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-25800","aliases":["GHSA-4w2j-m93h-cj5j","RUSTSEC-2026-0185"],"summary":" Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.15"],"url":"https://insights.sbomify.com/CVE-2026-25800/","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.24.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.24.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.10.0","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.10.0","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.95","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.95","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.7","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.7","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.7","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.7","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0119","aliases":[],"summary":"number_prefix crate is unmaintained","severity":"unknown","score":null,"package":"number_prefix","version":"0.4.0","ecosystem":"crates.io","purl":"pkg:cargo/number_prefix@0.4.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0119","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.9.0","fixed":["0.9.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.47.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.47.1","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["truss_transfer-0.0.44-cp38-abi3-macosx_10_12_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-macosx_11_0_arm64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-manylinux_2_28_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_aarch64.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_armv7l.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_i686.whl","truss_transfer-0.0.44-cp38-abi3-musllinux_1_2_x86_64.whl","truss_transfer-0.0.44-cp38-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":6,"medium":2,"unknown":12}}}