{"url":"https://pypi.sbomify.com/package/boreal-python/1.4.0","markdown_url":"https://pypi.sbomify.com/package/boreal-python/1.4.0.md","name":"boreal-python","version":"1.4.0","purl":"pkg:pypi/boreal-python@1.4.0","summary":"Python bindings to the boreal YARA scanner","author":null,"project_urls":{"Homepage":"https://github.com/vthib/boreal/"},"requires_python":">=3.11","license":null,"classifiers":[],"wheels":[{"filename":"boreal_python-1.4.0-cp311-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/61/b7/fca72e443fee7acc418b3267a0904b654705d93bcf087bee895277de6ae7/boreal_python-1.4.0-cp311-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"f53a48e3-49a5-5484-9597-e774b09314f1","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f53a48e3-49a5-5484-9597-e774b09314f1/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/2b/ba/990c1c891bb241783646a1f46e0bb5312c01d5e3b11e38fd7a4e6ad6854f/boreal_python-1.4.0-cp311-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"8a3745f0-233e-5775-b7c2-3d1bcfae17b5","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8a3745f0-233e-5775-b7c2-3d1bcfae17b5/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/db/1a/2926c5c4e37f26f68b2d8388788cefa7b1d8b9a5fff8d5b636411f9bf83b/boreal_python-1.4.0-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"457ed1cd-8614-5579-8a14-0a32f6210223","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/457ed1cd-8614-5579-8a14-0a32f6210223/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-manylinux_2_5_i686.manylinux1_i686.whl","url":"https://files.pythonhosted.org/packages/52/e3/7a8a39b5bb1376746e7b17ec8472531370cddc195c5626ab382297d109df/boreal_python-1.4.0-cp311-abi3-manylinux_2_5_i686.manylinux1_i686.whl","sboms":[{"artifact_uuid":"077a9065-4716-5753-a052-02943787100e","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/077a9065-4716-5753-a052-02943787100e/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-musllinux_1_2_i686.whl","url":"https://files.pythonhosted.org/packages/94/6a/a5f002b515657e597d927b2ec49a0a5f6e7792538be6c6723cddaea5e071/boreal_python-1.4.0-cp311-abi3-musllinux_1_2_i686.whl","sboms":[{"artifact_uuid":"c68cf6b6-a69d-5f4b-be93-61d6bbf16fb9","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c68cf6b6-a69d-5f4b-be93-61d6bbf16fb9/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/a3/28/11c51bb49e86e637fea671127dbc480e6aaf56bc19a7fa8af0a5538cd7d0/boreal_python-1.4.0-cp311-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"0f179fcf-e9f4-5203-ab42-3feb63ef8658","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0f179fcf-e9f4-5203-ab42-3feb63ef8658/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-win32.whl","url":"https://files.pythonhosted.org/packages/d1/68/cdba846ac3f38d26473dee8035a2dd26353abd6dc7acc078a9732446d8a7/boreal_python-1.4.0-cp311-abi3-win32.whl","sboms":[{"artifact_uuid":"ff0ccb63-e541-51f1-ac26-cd11fee8abb5","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ff0ccb63-e541-51f1-ac26-cd11fee8abb5/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"boreal_python-1.4.0-cp311-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/d4/22/c30ffeec71db04436e2eb28e9d2fe778ffc9f2444bde61d2776cb606c75f/boreal_python-1.4.0-cp311-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"457beba0-077b-51d7-b92b-6ef21f21b9a8","path":"boreal_python-1.4.0.dist-info/sboms/boreal-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/457beba0-077b-51d7-b92b-6ef21f21b9a8/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":8,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.9.10","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["boreal_python-1.4.0-cp311-abi3-macosx_10_12_x86_64.whl","boreal_python-1.4.0-cp311-abi3-macosx_11_0_arm64.whl","boreal_python-1.4.0-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","boreal_python-1.4.0-cp311-abi3-manylinux_2_5_i686.manylinux1_i686.whl","boreal_python-1.4.0-cp311-abi3-musllinux_1_2_i686.whl","boreal_python-1.4.0-cp311-abi3-musllinux_1_2_x86_64.whl","boreal_python-1.4.0-cp311-abi3-win32.whl","boreal_python-1.4.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["boreal_python-1.4.0-cp311-abi3-macosx_10_12_x86_64.whl","boreal_python-1.4.0-cp311-abi3-macosx_11_0_arm64.whl","boreal_python-1.4.0-cp311-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","boreal_python-1.4.0-cp311-abi3-manylinux_2_5_i686.manylinux1_i686.whl","boreal_python-1.4.0-cp311-abi3-musllinux_1_2_i686.whl","boreal_python-1.4.0-cp311-abi3-musllinux_1_2_x86_64.whl","boreal_python-1.4.0-cp311-abi3-win32.whl","boreal_python-1.4.0-cp311-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":8,"total_sboms":8,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"medium":1,"unknown":1}}}