# SBOM for cat-agent 0.11.6

> On-premise, sandboxed AI agent platform for regulated sectors.

The Python package cat-agent 0.11.6 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/cat-agent@0.11.6`
- PyPI: https://pypi.org/project/cat-agent/0.11.6/
- License: Apache-2.0
- Requires Python: \>=3.10
- Homepage: <https://github.com/kemalcanbora/cat-agent>
- Issue Tracker: <https://github.com/kemalcanbora/cat-agent/issues>

## SBOMs

### cat\_agent-0.11.6-cp310-abi3-macosx\_11\_0\_arm64.whl

- [cat\_agent-0.11.6.dist-info/sboms/cat-agent-native.cyclonedx.json](https://pypi.sbomify.com/artifact/b0c9874c-a06b-5e61-8fdf-e1a601fc5260/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cat\_agent-0.11.6-cp310-abi3-manylinux\_2\_34\_x86\_64.whl

- [cat\_agent-0.11.6.dist-info/sboms/cat-agent-native.cyclonedx.json](https://pypi.sbomify.com/artifact/eaeb3424-94f2-5aa1-abc5-7c083f3e16a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cat\_agent-0.11.6-cp310-abi3-manylinux\_2\_39\_aarch64.whl

- [cat\_agent-0.11.6.dist-info/sboms/cat-agent-native.cyclonedx.json](https://pypi.sbomify.com/artifact/7790dc25-27f9-5b17-bb46-99d479d96a07/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cat\_agent-0.11.6-cp310-abi3-win\_amd64.whl

- [cat\_agent-0.11.6.dist-info/sboms/cat-agent-native.cyclonedx.json](https://pypi.sbomify.com/artifact/a2fded5f-c9d7-5b15-b517-6ca5751d9643/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0187](https://osv.dev/vulnerability/RUSTSEC-2026-0187) | high (7.5) | lopdf 0.38.0 (crates.io) | 0.42.0 | Stack overflow in lopdf via deeply nested PDF objects |
| [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained |
| [RUSTSEC-2026-0192](https://osv.dev/vulnerability/RUSTSEC-2026-0192) | unknown | ttf-parser 0.25.1 (crates.io) | none listed | \`ttf-parser\` is unmaintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/cat-agent@0.11.6
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/cat-agent/0.11.6.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/cat-agent/0.11.6