# SBOM for bomiot-message 0.4.6 The Python package bomiot-message 0.4.6 ships 25 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/bomiot-message@0.4.6` - PyPI: https://pypi.org/project/bomiot-message/0.4.6/ - Requires Python: \>=3.8 ## SBOMs ### bomiot\_message-0.4.6-cp310-cp310-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/6a84125c-fbec-59b6-93da-204e014edbda/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/7ad1978c-ccec-5f80-9988-8b8ba4ff24ff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/5b72c634-618a-5699-8f65-70801765707c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/8a3947e2-a85d-510c-9b99-1236c489f66b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp310-cp310-win\_amd64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/244c7a49-d918-594e-835f-6afb23d6fea2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp311-cp311-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/c54ca1a3-218c-57d7-961a-f9f0ef7ceec1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/692189a7-9f6f-526f-9be2-23be4dc652d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/774bd01c-394f-5efd-aae7-6ef74be84ec4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/5ce157ba-1ba7-5100-bd6e-d7203dd413b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp311-cp311-win\_amd64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/fcb6c9ca-9e1e-5b74-b28f-1e18d467ec55/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp312-cp312-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/e45041e2-acd5-5992-82fe-bc159004d392/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/13628630-22b0-5316-9180-7fa1aa3e6b07/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/2fcf1949-2194-5c01-a024-fa7fed6e708d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/93d9600b-653b-5780-a0d8-27f32884e204/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp312-cp312-win\_amd64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/5f9771be-bc47-5bba-bc71-b45cdb3134be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp313-cp313-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/c66402ef-cad4-591f-8170-e5c9331d6bb8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/64f9f70d-1ef4-5678-a539-23aa1a201435/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/832644d2-7cbe-5f18-a5cf-34f6cf8cb46a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/04477385-023c-5bb6-a726-433897de5b8c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp313-cp313-win\_amd64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/43c4417c-579a-5b02-a8df-ce14dea9cf8b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp39-cp39-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/5174399b-c6f2-57d0-8e02-af8c18dbd050/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/bac3180b-1590-57a5-9c89-d67553677775/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp39-cp39-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/a3c28ebb-1edf-5201-90ea-76f012612cf8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/ebe8b187-87d9-5229-a4e5-d4e3a5d64433/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### bomiot\_message-0.4.6-cp39-cp39-win\_amd64.whl - [bomiot\_message-0.4.6.dist-info/sboms/bomiot\_message.cyclonedx.json](https://pypi.sbomify.com/artifact/90748696-1ba3-5cb8-ada3-2c8b05273edf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bomiot-message@0.4.6 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bomiot-message/0.4.6.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bomiot-message/0.4.6