# SBOM for bomiot-token 0.7.16 > Bomiot Token validation The Python package bomiot-token 0.7.16 ships 25 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/bomiot-token@0.7.16` - PyPI: https://pypi.org/project/bomiot-token/0.7.16/ - Requires Python: \>=3.9 ## SBOMs ### bomiot\_token-0.7.16-cp310-cp310-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/b9846858-4c83-5957-a53b-20b1dbcf68ed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/df5ea347-5e1d-5387-ab8c-2e8bd9fabd63/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/aca63fbb-5f82-5c12-a4bc-4d5e3739581d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/39905eee-5de2-5b61-a1bd-fedd013e8376/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp310-cp310-win\_amd64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/53f2c702-932e-5450-87c9-122393f9699a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp311-cp311-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/bd86c715-cc0a-5fc7-84c1-40650250c109/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/85591304-86db-5927-9541-78dd34601cec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/6b0aa78f-13ba-5e3f-a126-bb26169b3a59/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/0c3477c4-a712-5fa4-93f2-08bc74a3b948/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp311-cp311-win\_amd64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/6c59c45e-dc3d-582a-8337-8444fcc8174b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp312-cp312-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/36a80a1e-b0f0-51f4-a9cc-00c4c0ecb9d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/31ca58e0-dc7d-5205-a0f0-6e067ad2effb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/4ae6a3cc-d7cf-51a9-94b0-fcc0c7356fe7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/b0b3fea0-bcbe-59e1-9e19-1068365c828b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp312-cp312-win\_amd64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/0df165f6-9545-5267-be8f-a518a581c9ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp313-cp313-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/2059329a-2883-5f56-a766-c559e6676005/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/57eb9840-e9ed-58a4-8a0b-3d464253a74a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/62516aef-56e7-5562-98a4-509ca8f126a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/9eb4358a-633e-541c-b49c-fbe1ebc7d2c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp313-cp313-win\_amd64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/e3df0fb9-8b01-52c7-915e-f1de0521ad2a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp39-cp39-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/2847a0f2-f594-525c-8f8f-3a323c709c31/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/ad18b63a-7e2a-50bf-8e09-939e8ab18145/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp39-cp39-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/92b85fa2-408e-5435-8bb7-4f6805f4266a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/d08782fe-39cb-5870-95b5-6d7df0320424/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bomiot\_token-0.7.16-cp39-cp39-win\_amd64.whl - [bomiot\_token-0.7.16.dist-info/sboms/bomiot\_token.cyclonedx.json](https://pypi.sbomify.com/artifact/f7d0103c-2e11-5052-bd78-fc85d6604219/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.19.2 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.19.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.19.2 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bomiot-token@0.7.16 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bomiot-token/0.7.16.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bomiot-token/0.7.16