{"url":"https://pypi.sbomify.com/package/webshart/0.6.0","markdown_url":"https://pypi.sbomify.com/package/webshart/0.6.0.md","name":"webshart","version":"0.6.0","purl":"pkg:pypi/webshart@0.6.0","summary":"Fast and memory-efficient webdataset shard reader","author":null,"project_urls":{"Homepage":"https://github.com/bghira/webshart","Issues":"https://github.com/bghira/webshart/issues","Repository":"https://github.com/bghira/webshart"},"requires_python":">=3.12","license":null,"classifiers":["Development Status :: 3 - Alpha","Intended Audience :: Developers","Programming Language :: Python :: 3","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Rust","Topic :: Software Development :: Libraries :: Python Modules"],"wheels":[{"filename":"webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/1c/d0/d2263eb419a832465e0a3503c14672fc090eb6b7e50b78f3486ffaf805ef/webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"f354bb39-97bb-5c86-87a6-5934dc3f822c","path":"webshart-0.6.0.dist-info/sboms/webshart.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f354bb39-97bb-5c86-87a6-5934dc3f822c/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","url":"https://files.pythonhosted.org/packages/ab/13/15c95f56639af0dc41b6cbd434d11497c81c9b9e752f86022895e188cfa0/webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","sboms":[{"artifact_uuid":"a1477ac0-286c-5116-9723-82c7f5ec1918","path":"webshart-0.6.0.dist-info/sboms/webshart.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a1477ac0-286c-5116-9723-82c7f5ec1918/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","url":"https://files.pythonhosted.org/packages/d1/d4/6e0629ba094fe1fef3e4c47372d2f12910004e223d5c54a917cb18519360/webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","sboms":[{"artifact_uuid":"97f16651-e064-50c6-862c-eed56dafd8a9","path":"webshart-0.6.0.dist-info/sboms/webshart.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/97f16651-e064-50c6-862c-eed56dafd8a9/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","url":"https://files.pythonhosted.org/packages/35/fd/a44fb2025cdb46748544981d36adf5bf10de126f0391ed7805d20a527858/webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","sboms":[{"artifact_uuid":"5b84dad0-ca6a-5f96-9a59-829432b3419c","path":"webshart-0.6.0.dist-info/sboms/webshart.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5b84dad0-ca6a-5f96-9a59-829432b3419c/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"webshart-0.6.0-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/97/5a/48d373a517ec393267bad4e00eaa0e7208514756f9137e5b634a75a27d60/webshart-0.6.0-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"f3ad0abd-f746-5b25-940b-4b1dfd87b6f5","path":"webshart-0.6.0.dist-info/sboms/webshart.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f3ad0abd-f746-5b25-940b-4b1dfd87b6f5/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","webshart-0.6.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","webshart-0.6.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","webshart-0.6.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","webshart-0.6.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","webshart-0.6.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["webshart-0.6.0-cp312-abi3-macosx_11_0_arm64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_35_x86_64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_aarch64.whl","webshart-0.6.0-cp312-abi3-manylinux_2_39_x86_64.whl","webshart-0.6.0-cp312-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"medium":1,"low":3,"unknown":2}}}