SBOM for beancount-lsp 0.0.17

Beancount LSP packaged for Python environments

CycloneDX 4 known vulnerabilities

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

beancount-lsp-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

beancount-lsp-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

beancount-lsp-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

beancount-lsp-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

beancount-lsp-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

beancount-lsp-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0253 Potential use-after-free due to lack of panic safety in `LruCache::pop()`	Unknown	lru 0.18.0 crates.io	0.18.2
RUSTSEC-2026-0173 proc-macro-error2 is unmaintained	Unknown	proc-macro-error2 2.0.1 crates.io	—
RUSTSEC-2026-0235 Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc	Unknown	rkyv 0.7.46 crates.io	0.8.17
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.52.3 crates.io	1.53.3

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]