# SBOM for bittensor-wallet 4.1.1 The Python package bittensor-wallet 4.1.1 ships 35 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/bittensor-wallet@4.1.1` - PyPI: https://pypi.org/project/bittensor-wallet/4.1.1/ - Requires Python: \>=3.10 - Documentation: - Homepage: - Repository: - Superseded-by: ## SBOMs ### bittensor\_wallet-4.1.1-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/17162827-90df-5bce-8e9d-3f50014da63b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp310-cp310-macosx\_11\_0\_arm64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/2efaffdd-76b5-5e95-87b9-01610510db6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp310-cp310-manylinux\_2\_28\_aarch64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/060ea53d-6fa6-5d82-912e-74aedb624b78/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp310-cp310-manylinux\_2\_28\_i686.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6c42f5a9-47d2-50a2-8a31-bd08ab8e5c93/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/6a295727-8a81-5691-8899-e92a652e79df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp310-cp310-manylinux\_2\_28\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/951b8a0b-a234-56a1-9c49-68012a171613/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/bbc25fea-e168-52b5-bf7d-271591a34460/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/629b6b2f-a591-5dcd-910e-c72a6214b6fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/edab2485-ea94-5a31-8bb3-b001ab21e2c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/d6e4806c-2fbd-50fe-aedb-48781697b4d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp311-cp311-manylinux\_2\_28\_i686.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e1e28751-6881-5bbf-800f-c280b10f227a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/e0195b86-b9ee-51db-8586-37ed4a48c084/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/32dac23a-1c08-5a7a-b2a8-ce12f30016c1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/068ee794-1b71-5a84-9589-4238f40c610d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/50ad5b78-a60d-5189-be94-8841a2da308d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/4a1d7986-7cb1-5561-83f9-5702375c6034/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/ffe1aa4a-e0a3-59df-a059-a03365484dbb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp312-cp312-manylinux\_2\_28\_i686.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/885017df-6289-54af-b351-b73789e2d60c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/23f7e6d7-42a8-5271-96da-065f4e4a05f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6730117a-3872-5dce-88e4-005a84b21e10/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/e23986c4-98bb-5e53-ae62-e7fa5f3c1812/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/37927651-c6ec-531e-ac78-253bc132590e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/3848b497-816f-566f-82c0-94c1dd48b257/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/09c450c4-022e-5344-8cb2-16f9e11f556d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp313-cp313-manylinux\_2\_28\_i686.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f56ca0f3-8cfc-5fec-9c8e-3b0811430860/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/b2b22d9b-6f1e-55bb-9632-180b20e4e14d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b964ef6b-029b-5c34-824a-f29219ac3b91/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/d72c7001-685a-5dbd-b932-f20ae17f93b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/8007138d-24af-5d92-b081-105869363df5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp314-cp314-macosx\_11\_0\_arm64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/ce8bf08b-da7c-50b2-8849-89510a38975a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/06607c5d-2222-5f9d-ac81-6d4f599a83f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp314-cp314-manylinux\_2\_28\_i686.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ecb67e52-9ae6-573f-84c4-4e6f87772749/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/5792904d-bd87-5912-8f86-24bcfeda2171/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ### bittensor\_wallet-4.1.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl - [bittensor\_wallet-4.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/410e9694-8022-5570-b20f-287cbc583961/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [bittensor\_wallet-4.1.1.dist-info/sboms/btwallet.cyclonedx.json](https://pypi.sbomify.com/artifact/9a4a3661-4464-55b0-8ccd-8aefa071151f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 14 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.26.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.26.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [CVE-2026-25541](https://insights.sbomify.com/CVE-2026-25541/) | medium (5.5) | bytes 1.7.2 (crates.io) | 1.11.1 | Integer overflow in \`BytesMut::reserve\` | | [GHSA-2p6r-x3vv-xqm2](https://osv.dev/vulnerability/GHSA-2p6r-x3vv-xqm2) | low (3.8) | rpassword 7.3.1 (crates.io) | 7.5.0 | rpassword affected by partial password reveal when input is interrupted | | [CVE-2025-58160](https://insights.sbomify.com/CVE-2025-58160/) | low (2.3) | tracing-subscriber 0.2.25 (crates.io) | 0.3.20 | Logging user input may result in poisoning logs with ANSI escape sequences | | [RUSTSEC-2021-0061](https://osv.dev/vulnerability/RUSTSEC-2021-0061) | unknown | aes-ctr 0.6.0 (crates.io) | none listed | \`aes-ctr\` has been merged into the \`aes\` crate | | [RUSTSEC-2021-0060](https://osv.dev/vulnerability/RUSTSEC-2021-0060) | unknown | aes-soft 0.6.4 (crates.io) | none listed | \`aes-soft\` has been merged into the \`aes\` crate | | [RUSTSEC-2021-0139](https://osv.dev/vulnerability/RUSTSEC-2021-0139) | unknown | ansi\_term 0.12.1 (crates.io) | none listed | ansi\_term is Unmaintained | | [RUSTSEC-2026-0387](https://osv.dev/vulnerability/RUSTSEC-2026-0387) | unknown | crypto-bigint 0.5.5 (crates.io) | 0.7.6 | Multiple timing variability issues in operations intended to be constant-time | | [RUSTSEC-2024-0388](https://osv.dev/vulnerability/RUSTSEC-2024-0388) | unknown | derivative 2.2.0 (crates.io) | none listed | \`derivative\` is unmaintained; consider using an alternative | | [RUSTSEC-2025-0161](https://osv.dev/vulnerability/RUSTSEC-2025-0161) | unknown | libsecp256k1 0.7.1 (crates.io) | none listed | libsecp256k1 is unmaintained | | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2021-0137](https://osv.dev/vulnerability/RUSTSEC-2021-0137) | unknown | sodiumoxide 0.2.7 (crates.io) | none listed | sodiumoxide is deprecated | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bittensor-wallet@4.1.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bittensor-wallet/4.1.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bittensor-wallet/4.1.1