# SBOM for alphadia-search-rs 1.9.0 > A next-generation search backend for AlphaDIA. The Python package alphadia-search-rs 1.9.0 ships 34 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/alphadia-search-rs@1.9.0` - PyPI: https://pypi.org/project/alphadia-search-rs/1.9.0/ - Requires Python: \>=3.10 - Mann Labs Homepage: - homepage: ## SBOMs ### alphadia\_search\_rs-1.9.0-cp310-cp310-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1f21517d-3a1a-525d-8bcf-8ad4b69b2759/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6ba08358-26ee-59d0-ac5b-13053012e56a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9cb87750-bd74-581d-99fd-34a1c6f6a5f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp311-cp311-macosx\_11\_0\_arm64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6b76273f-c6df-5197-b57b-5f30316dd55c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp311-cp311-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/dbda3723-dbce-535e-9e3a-86a1430a0e9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7f9af561-e89e-5aef-b16d-7a44aa4e08d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp311-cp311-win\_amd64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/107fcc92-bbef-50cc-90ff-37eb4a3301e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a5f9b4c0-e07a-51ba-bdd7-a1ec60a3eb00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp312-cp312-macosx\_11\_0\_arm64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/56097d00-29ed-5b2e-91ca-cc661bd0ae9a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp312-cp312-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ee970e7d-50e4-5838-973c-206fd8429a88/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fe8f7588-3ab3-504a-bcaa-11bf9bac6ac9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp312-cp312-win\_amd64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9fa8dddb-1c21-59a5-9651-898091f3a067/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1e51b144-35aa-511d-b794-ae42dc8c621a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp313-cp313-macosx\_11\_0\_arm64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/cf23aeb3-824d-5ff7-9601-41a519094ab7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp313-cp313-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4e30050d-4d58-5570-a2a9-d89e9efa45ed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f2087cd0-a270-5f9b-a36d-52909bd78854/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp313-cp313-win\_amd64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ab8394e7-8f76-5ab1-a644-e48a6c3988d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a63b2b1f-0895-50e8-9ca8-ad80c3ec59a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314-macosx\_11\_0\_arm64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e341b29d-d013-567e-b56e-6923cc93eff9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/aac62836-d735-5f0c-bd57-ee4229af32b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/465be075-5d03-55b7-b1ac-d8a74c31db67/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314-win\_amd64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a51ed250-fb91-566b-af8f-5078e17ab155/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314t-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0b3ab8ad-6958-5e7b-83e7-780c08cfe03a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp314-cp314t-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2ec13feb-dc63-536e-97bc-6faad3f39f9f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315-macosx\_10\_12\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/cc2887bd-49f9-56b3-b505-92277295e7d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315-macosx\_11\_0\_arm64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e1b1fdbe-3ebb-53ac-907f-e827a9f19528/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4d45f208-b436-5e44-b6be-36b09309bd99/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9d42b98c-9f1e-5608-96ea-cc9a74521cce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315-win\_amd64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/31f65523-2e1e-5947-8709-0c39ba9fafda/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315t-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/019a34ca-86d0-5f1a-91a6-428917545fad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-cp315-cp315t-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c2ad9aef-6574-51de-8995-585b575b1818/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-pp311-pypy311\_pp73-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/07900497-689d-514e-937e-c093b004d1db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-pp311-pypy311\_pp73-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e7408480-3aac-560f-b52f-3116357bbd94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### alphadia\_search\_rs-1.9.0-pp312-pypy312\_pp80-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl - [alphadia\_search\_rs-1.9.0.dist-info/sboms/alphadia-search-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7dff21d7-e8be-54ab-8a02-183504eb30ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-115905](https://insights.sbomify.com/CVE-2026-115905/) | critical (10.0) | zip 2.6.1 (crates.io) | 9.0.5 | zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE | | [RUSTSEC-2026-0369](https://osv.dev/vulnerability/RUSTSEC-2026-0369) | critical (9.1) | zip 2.6.1 (crates.io) | 9.0.0 | ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target | | [CVE-2026-115909](https://insights.sbomify.com/CVE-2026-115909/) | high (7.5) | zip 2.6.1 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` aborts the process on a symlink entry with a large declared size | | [RUSTSEC-2026-0367](https://osv.dev/vulnerability/RUSTSEC-2026-0367) | high (7.3) | zip 2.6.1 (crates.io) | 9.0.0 | Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation | | [CVE-2026-115906](https://insights.sbomify.com/CVE-2026-115906/) | medium (6.5) | zip 2.6.1 (crates.io) | 9.0.0 | zip: AES Entry HMAC Authentication Bypass on Premature EOF | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.1 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0368](https://osv.dev/vulnerability/RUSTSEC-2026-0368) | unknown | zip 2.6.1 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` creates symbolic links whose attacker-controlled targets are outside the destination directory | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/alphadia-search-rs@1.9.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/alphadia-search-rs/1.9.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/alphadia-search-rs/1.9.0