# SBOM for biliass 2.5.0 > 💬 将 B 站 XML/protobuf 弹幕转换为 ASS 弹幕 The Python package biliass 2.5.0 ships 42 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/biliass@2.5.0` - PyPI: https://pypi.org/project/biliass/2.5.0/ - Requires Python: \>=3.11 - Documentation: - Homepage: - Issues: - Repository: ## SBOMs ### biliass-2.5.0-cp311-abi3-macosx\_10\_12\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/7958d66c-e86b-5704-8c04-f641fe2e0739/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-macosx\_11\_0\_arm64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/7bc59849-8136-5ac2-90c7-6dda1735614a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/61ddf606-6353-5bb9-9732-becc02f86531/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/6c356b7b-09c8-5d7d-8bd2-117d37045ff9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/9205e42e-f7e7-5283-8f88-8d76e98d7fc6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/919b650e-77fa-5f1c-8183-f4e482016465/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/26858da0-d941-5b82-892a-af3a441f1f2d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/89706a39-5af9-5e97-809d-f2de41694991/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-musllinux\_1\_2\_aarch64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/aa6650e4-9407-54e6-a6d8-c7a9f1bbf770/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-musllinux\_1\_2\_armv7l.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/74cfde5e-3714-500d-9a4f-a1d0af725f91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-musllinux\_1\_2\_i686.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b6b5b537-33d9-5e64-9ab0-8aff1bdfdb93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-musllinux\_1\_2\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/03a8d5d6-7e84-5dfa-89ca-dbd53300b83e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-win32.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/f9533ee4-5e53-5b91-b7e0-e3256e0a2f0a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp311-abi3-win\_amd64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ab10065b-c5cd-5b99-9f15-aca1c533aaf4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/1dad2436-2da9-519c-a833-8d2b3d99b924/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-macosx\_11\_0\_arm64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/e71d45d7-c322-5d61-95fb-edb280315d11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ae943b03-28aa-5ca8-96d9-c70e2feb8b2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/8bb0faff-71da-5a98-ac8f-8d3d02e0b6b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/dd3961e1-c3d9-5def-aff2-f3990a4106f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/23b7a3fe-dcb7-5cd7-9a36-1f855f8f132f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/cd619ff3-5ad3-5603-ae4d-9f95ca683768/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/f6143961-b772-54d2-b430-2ad3d4ace8db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4af1d8bd-bd82-5b76-a84f-d897f753a3df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/70063a2c-4616-55cb-be37-339cbde37367/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-musllinux\_1\_2\_i686.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b58cd127-b1fa-572d-951f-5f35f6cf79df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/df9d4771-053a-5bd9-8a77-684321231b5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-win32.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b48bf3f9-4454-5564-95e0-c55ed3a6982e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp314-cp314t-win\_amd64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/9d162dd5-e742-5fd9-a5e6-e5f1a19b5405/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-macosx\_10\_12\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/55880390-6068-5674-bbb2-85aaf7b3df4d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-macosx\_11\_0\_arm64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/435fae59-a07e-5209-935a-3e482e3c1b72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/9cc816c6-16ff-59fd-bd00-84f6a14d5a40/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/60eb26cf-0e4e-56ce-9456-b0fb20bf6d43/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/30524835-850b-5d66-8c9f-a8c2fdbae0cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/33b282b3-d375-5871-bf53-dfb5be2d4736/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b4718977-eba1-5dcb-a63b-69bc454b2bec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/07816496-bfaf-5d11-a65e-96759cc30d65/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-musllinux\_1\_2\_aarch64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ce3e2289-3b16-5945-90d6-0305698c01cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-musllinux\_1\_2\_armv7l.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/689f062d-40af-5b90-958e-1d2b03b1bd5f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-musllinux\_1\_2\_i686.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0344ad53-659b-5577-861a-342a84b5e942/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-musllinux\_1\_2\_x86\_64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/5da594be-34ec-5db7-9a74-f2542e73ce57/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-win32.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/7b81f5c0-e2a2-5bd1-b971-99ea4fe27eba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### biliass-2.5.0-cp315-abi3.abi3t-win\_amd64.whl - [biliass-2.5.0.dist-info/sboms/biliass-core.cyclonedx.json](https://pypi.sbomify.com/artifact/88be70af-6ab8-531d-ae99-29791aa5ad97/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-25541](https://insights.sbomify.com/CVE-2026-25541/) | medium (5.5) | bytes 1.10.1 (crates.io) | 1.11.1 | Integer overflow in \`BytesMut::reserve\` | | [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.89 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/biliass@2.5.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/biliass/2.5.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/biliass/2.5.0