# SBOM for autopy 4.0.2 The Python package autopy 4.0.2 ships 54 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/autopy@4.0.2` - PyPI: https://pypi.org/project/autopy/4.0.2/ - Requires Python: \>=3.8 ## SBOMs ### autopy-4.0.2-cp310-cp310-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/06acd329-fd9f-5441-b468-bfe3b9072cde/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/08c58267-4500-5c22-a9e8-0deab417b155/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dbd70b40-bd7e-54d8-a40a-5b617eb92e1a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/44884a27-0873-560c-b3ca-0f191528f75f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp310-cp310-win\_amd64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/452bf81e-44c6-5a4c-8b87-1bd41da06921/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/a58e112f-50a4-5ae1-9c4b-f6d90a135ead/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp311-cp311-macosx\_11\_0\_arm64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/c4ce1667-7254-5c34-bc4b-8370a60a01ef/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b3c4ab7d-6e84-5672-800e-077c0ff8a7ad/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/eb4d758a-d08c-55f3-818a-adf1e1e3ad7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/86a69b3a-1700-5986-9640-09d3d2088278/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/27884491-b236-575c-8e20-6be5b79c030b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp311-cp311-win\_amd64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/c41c8ece-8605-524f-9d75-221569b92f6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/35848199-b943-523e-8e93-479aa85a65ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/0f238cb7-982b-5f14-baab-729ff5ec95b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ad2b516-c809-5f8e-b841-f8901bc9f0de/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/3e2b66af-5fdc-5362-9599-f6eec34d5f1c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa19b93d-3f8c-5289-8528-dd73147fa0e0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/5087ad25-88c7-52c0-9b27-8b32f66f1b63/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp312-cp312-win32.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/465cffa6-3c6d-5cd3-9f54-91c3cb3c27c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp312-cp312-win\_amd64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/6461a8c4-5d75-51f4-8536-4205b1b22a0a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/58497778-5164-531e-b419-c4dc420af555/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/5db87305-3a60-54ef-bee3-b83341f9ace7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f926c9c-a332-560a-8921-191374967969/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/a5bd48b9-905d-5d47-abe6-9ad98a7d436a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6e511ab0-e4c4-5f23-9271-da3e6659a167/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/5b17e428-49fd-5a55-8ff7-66ed1f8849f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp313-cp313-win\_amd64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/663251a2-d30f-5f9a-af03-d866603264e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/39d8d0e8-9483-5b75-8925-6ed681a39ca8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/c27610f9-df03-563c-bf1f-6983a0b80b97/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c3c4d505-4078-5842-a267-23fe7e6c2af6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/0354b78c-8367-5b82-a0e2-23e5f4cf72af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fb056eeb-42e2-5c59-af10-46e2d986a4a5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/15d72b2d-daf1-5d7b-8de1-e512866ef703/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314-win\_amd64.whl - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/a92f08b5-b655-592e-8eec-37ad21371b88/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dd6b0bdc-f414-5d34-81e4-94158d6c9cc7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/07be63d1-1997-582c-abf9-65a1b5d912f9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ba03b1b-39bc-5afe-89e4-9ec54e4f4354/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/2ae4976c-1c7b-5b1a-b920-e5cf5376df8d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp315-cp315-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b9718031-5357-5d5f-8dcc-32a61be860cb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/b838e022-38d3-5a3a-8375-f919c3cfb02b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c6935579-fbcc-5593-9806-bafe9c8ba196/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/a7f59f7d-ba10-50a3-a7fc-a7c001ac8a6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp315-cp315t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2db3fa1b-08cb-5a06-9275-426ae6ae339c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/228b6d51-9599-5fc4-968a-96da24599ab5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/42550ca4-6723-5e8a-97a5-c2f15f9f2d7c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/e3221a34-ab29-5b48-9063-dde7503a6ff2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp39-cp39-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/16dda726-db2b-5be6-8350-c0e69a14e2b6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/334fc1ac-0133-5f7a-a848-d7c2978d111e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6e351c68-148c-50b6-8db6-000941fcb537/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/2bb823a8-ae84-5ffb-b0e7-1db0a01b5440/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-pp311-pypy311\_pp73-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dfb1fc13-65ee-567f-bc96-682ea65551f0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/4ef44cc6-36b1-5e0f-9edd-e32dde3c7c54/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### autopy-4.0.2-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [autopy-4.0.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c3c800f7-ed41-5db7-937c-39df8e728c5a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [autopy-4.0.2.dist-info/sboms/autopy.cyclonedx.json](https://pypi.sbomify.com/artifact/61fdfd1b-290a-5607-afd8-6e1f7909a133/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/autopy@4.0.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/autopy/4.0.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/autopy/4.0.2