SBOM for bluerobotics-navigator 0.2.1

This package serves as the entry point for embedded applications using Python on Blue Robotics's Navigator

CycloneDX PEP 740 attested 6 known vulnerabilities

Requires Python: >=3.7
PyPI: bluerobotics-navigator 0.2.1
Documentation: https://docs.bluerobotics.com/navigator-lib/python
Homepage: https://bluerobotics.com/store/comm-control-power/control/navigator/
Repository: https://github.com/bluerobotics/navigator-lib

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

Attested

Publisher: GitHub Source: bluerobotics/navigator-lib Workflow: action.yml

bluerobotics_navigator.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

Attested

Publisher: GitHub Source: bluerobotics/navigator-lib Workflow: action.yml

bluerobotics_navigator.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
GHSA-36hh-v3qg-5jq4 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators	High 8.7	pyo3 0.18.3 crates.io	0.29.0
RUSTSEC-2026-0177 Missing `Sync` bound on `PyCFunction::new_closure` closures	Medium 6.3	pyo3 0.18.3 crates.io	0.29.0
RUSTSEC-2025-0020 Risk of buffer overflow in `PyString::from_object`	Low 2.9	pyo3 0.18.3 crates.io	0.24.1
RUSTSEC-2021-0145 Potential unaligned read	Unknown	atty 0.2.14 crates.io	—
RUSTSEC-2024-0375 `atty` is unmaintained	Unknown	atty 0.2.14 crates.io	—
RUSTSEC-2026-0110 bare-metal is deprecated	Unknown	bare-metal 0.2.5 crates.io	—

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]