# SBOM for avulto 0.5.2 > A Python API for working with BYOND projects. The Python package avulto 0.5.2 ships 45 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/avulto@0.5.2` - PyPI: https://pypi.org/project/avulto/0.5.2/ - Requires Python: \>=3.12 - repository: ## SBOMs ### avulto-0.5.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/b9392db5-0599-59c8-b380-97d8aa21278f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-manylinux\_2\_28\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/1163d3ad-68cf-5a3a-ab48-da3b1ccff040/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-manylinux\_2\_28\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/9c639b49-173c-5bc0-8307-30cb8912fc62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/af766fd1-0795-56d4-b54c-33ce27c9153e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/cc4c697e-738f-5aa8-bec5-f3cc9cfd1d28/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-musllinux\_1\_2\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/8025e339-6394-53d9-8a5e-8d9fcf7e563a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/3445e564-29ab-51d9-b215-b10489f98a6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp312-cp312-win\_amd64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/ce7470ac-659c-58fe-96e2-fc9aedcee70b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/33d2d4f8-215c-5309-96ad-6b2eee2b3a47/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-manylinux\_2\_28\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/42379bf3-bb74-5495-916d-87567ff3a59a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-manylinux\_2\_28\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/4252f429-0425-5a09-adaf-e6b3c5375362/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/3427aa23-e378-5883-90bf-764c941b2210/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/2938b3d6-1834-5589-a98e-5340fe59937e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-musllinux\_1\_2\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/cce5157d-dcd0-5d9d-a338-fd008839b492/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/800aa6ce-ba81-5e76-8240-09e30964aeb5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp313-cp313-win\_amd64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/855026b2-e4ff-59db-85e0-01a16d390869/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/3c7706a1-afdc-5ac7-a4c3-fc3754dc9bc5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-manylinux\_2\_28\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/e60a079e-66c1-57f4-85ce-8dee139e37ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-manylinux\_2\_28\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/91822e5c-ea32-5e6b-9805-d6d9140ba56d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-manylinux\_2\_28\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/eabfa469-9be8-50b3-a980-053dc460eb69/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/aa6c1e81-95b2-5539-80c8-e1229ab2ddfe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-musllinux\_1\_2\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/248bacbc-d114-59f4-ad4f-71298f49a6b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/59a1ba8e-ec46-594d-ae4a-368a5fe3fd45/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314-win\_amd64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/fd8b6c38-a87c-5691-9660-48c6c13cea0e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314t-manylinux\_2\_28\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/6ce76be3-9075-53a3-aa38-1b39cc0cd964/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314t-manylinux\_2\_28\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/ed2c361a-85a9-595d-a378-4868a185a575/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/cd6e829a-d140-5dfa-87d7-d5d79412fa5f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/63ddad97-6e5d-5378-b28b-efe074e8c3e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314t-musllinux\_1\_2\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/ac35b86e-c4bf-517b-a6b3-cf0f0c105035/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/46885cc9-381d-59a6-83ec-d2ce01bd183e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-macosx\_11\_0\_arm64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/e47fe157-7c1b-5dac-9214-235c64042abb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-manylinux\_2\_28\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/43b65382-4379-50a2-bbd5-38e76f2294ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-manylinux\_2\_28\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/10f8b695-cd76-5da2-924f-31548d3a25ac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-manylinux\_2\_28\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/b0a3598c-f49e-5d4d-b36b-6fd12f2e1043/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-musllinux\_1\_2\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/a4992336-6a75-5a2e-a010-6e69277cb4df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-musllinux\_1\_2\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/8dff979c-8425-5825-bbff-a75f1cdc44f9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-musllinux\_1\_2\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/df5d0b22-c4e5-5f17-9feb-2dd0b82043ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-win32.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/e7373aac-fd9f-56f7-bfb7-9502a7fb5186/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315-win\_amd64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/d048ee70-bb6e-5bda-8bf2-c22a0bb8a97f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315t-manylinux\_2\_28\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/f563624d-5d18-5e6a-abae-6978c557d057/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315t-manylinux\_2\_28\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/dadc133d-6877-5251-9f29-dd5f6b1a38c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315t-manylinux\_2\_28\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/718611d4-92b4-51e1-884a-5339c90fb141/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315t-musllinux\_1\_2\_aarch64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/9f005b1d-5b16-5764-8769-ba6c08bab98b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315t-musllinux\_1\_2\_i686.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/6923b5d0-9ce0-5586-80c8-8c130f46e9e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### avulto-0.5.2-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl - [avulto-0.5.2.dist-info/sboms/avulto.cyclonedx.json](https://pypi.sbomify.com/artifact/98b3700e-c29c-54e9-89ee-a097b4ae3612/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2024-0388](https://osv.dev/vulnerability/RUSTSEC-2024-0388) | unknown | derivative 2.2.0 (crates.io) | none listed | \`derivative\` is unmaintained; consider using an alternative | | [RUSTSEC-2024-0425](https://osv.dev/vulnerability/RUSTSEC-2024-0425) | unknown | get-size 0.1.4 (crates.io) | none listed | get-size is unmaintained | | [RUSTSEC-2024-0427](https://osv.dev/vulnerability/RUSTSEC-2024-0427) | unknown | get-size-derive 0.1.3 (crates.io) | none listed | get-size-derive is unmaintained | | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | | [RUSTSEC-2024-0370](https://osv.dev/vulnerability/RUSTSEC-2024-0370) | unknown | proc-macro-error 1.0.4 (crates.io) | none listed | proc-macro-error is unmaintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2025-0081](https://osv.dev/vulnerability/RUSTSEC-2025-0081) | unknown | unic-char-property 0.9.0 (crates.io) | none listed | \`unic-char-property\` is unmaintained | | [RUSTSEC-2025-0075](https://osv.dev/vulnerability/RUSTSEC-2025-0075) | unknown | unic-char-range 0.9.0 (crates.io) | none listed | \`unic-char-range\` is unmaintained | | [RUSTSEC-2025-0080](https://osv.dev/vulnerability/RUSTSEC-2025-0080) | unknown | unic-common 0.9.0 (crates.io) | none listed | \`unic-common\` is unmaintained | | [RUSTSEC-2025-0090](https://osv.dev/vulnerability/RUSTSEC-2025-0090) | unknown | unic-emoji-char 0.9.0 (crates.io) | none listed | \`unic-emoji-char\` is unmaintained | | [RUSTSEC-2025-0100](https://osv.dev/vulnerability/RUSTSEC-2025-0100) | unknown | unic-ucd-ident 0.9.0 (crates.io) | none listed | \`unic-ucd-ident\` is unmaintained | | [RUSTSEC-2025-0098](https://osv.dev/vulnerability/RUSTSEC-2025-0098) | unknown | unic-ucd-version 0.9.0 (crates.io) | none listed | \`unic-ucd-version\` is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/avulto@0.5.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/avulto/0.5.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/avulto/0.5.2