Skip to content

SBOM for c-two 0.10.1

C-Two is a resource-RPC framework that enables resource-oriented classes to be remotely invoked across different processes or machines.

CycloneDX PEP 740 attested 9 known vulnerabilities

Requires Python: >=3.10
PyPI: c-two 0.10.1

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

c_two-0.10.1-cp310-cp310-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp310-cp310-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp310-cp310-win_amd64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp311-cp311-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp311-cp311-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp311-cp311-win_amd64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp311-cp311-win_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp312-cp312-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp312-cp312-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp312-cp312-win_amd64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp312-cp312-win_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp313-cp313-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp313-cp313-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp313-cp313-win_amd64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp313-cp313-win_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314-win_amd64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314-win_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314t-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314t-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314t-win_amd64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

c_two-0.10.1-cp314-cp314t-win_arm64.whl

Attested

Publisher: GitHub Source: world-in-progress/c-two Workflow: python-package-release.yml Environment: pypi

c2-python-native.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0340 Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled	High 7.5	quinn-proto 0.11.16 crates.io	0.11.18
RUSTSEC-2026-0341 Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed	High 7.5	quinn-proto 0.11.16 crates.io	0.11.17
RUSTSEC-2026-0186 Unchecked pointer offset in crate `memmap2`	Unknown	memmap2 0.9.10 crates.io	0.9.11
RUSTSEC-2026-0338 Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads	Unknown	quinn-proto 0.11.16 crates.io	0.11.18
RUSTSEC-2026-0339 Unbounded growth of pending connection ID retirements in quinn-proto	Unknown	quinn-proto 0.11.16 crates.io	0.11.17
RUSTSEC-2026-0342 Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto	Unknown	quinn-proto 0.11.16 crates.io	0.11.17
CVE-2026-111943 Certificate verification may accept distrusted intermediates	Unknown	rustls-webpki 0.103.15 crates.io	0.103.16
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.53.2 crates.io	1.53.3
CVE-2026-111943 Bundled root certificates allow trust in distrusted emSign intermediates	Unknown	webpki-roots 1.0.7 crates.io	1.0.10

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]