# SBOM for adjustpy 0.1.2 The Python package adjustpy 0.1.2 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/adjustpy@0.1.2` - PyPI: https://pypi.org/project/adjustpy/0.1.2/ - Requires Python: \>=3.7 - Source: ## SBOMs ### adjustpy-0.1.2-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/ad6e4445-ff9c-5504-966d-c3b64cf65a79/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp310-cp310-win\_amd64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/b28dcfc7-bde3-55f6-8bfd-f82a0a4bc0f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp311-cp311-macosx\_11\_0\_arm64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/63c7ca53-f77e-5c4b-8ad1-4dcf49a7d460/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/cb8c1466-1308-52cc-84a9-0b42b318ff56/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp311-cp311-win\_amd64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/36ba1bef-76ea-50c7-9be7-69d16a298a6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/0d6d8585-4ddc-5ec4-a98e-f1ed29720ce6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/93a53bb2-f1f8-5cbf-ab74-3f06a6224aaa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp312-cp312-win\_amd64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/3b9beefa-bb5c-5d10-9b58-e3ba30f8d58f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/9b803f68-06f2-5bd4-a56c-951e7b1a46a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/43bb9f1d-dc3c-518f-b531-3c7cd17ddde1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp313-cp313-win\_amd64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/18cfc5fb-4977-56b5-8dd1-65cb3dab8b99/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/ead2cf96-4843-5c96-a586-655ca38aff11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/d9316e84-0d4d-5244-afe0-a99f6ecb9a45/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp314-cp314-win\_amd64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/0796084c-493b-57a9-813e-83ebc0c5d5a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/3ea71d8b-d2b8-5c80-ac78-4b6a8bc63a16/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### adjustpy-0.1.2-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [adjustpy-0.1.2.dist-info/sboms/adjustpy.cyclonedx.json](https://pypi.sbomify.com/artifact/159ab073-e0a5-5c80-a463-81a8a30c3bfa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.19.2 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.19.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.19.2 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/adjustpy@0.1.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/adjustpy/0.1.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/adjustpy/0.1.2