# SBOM for couchbase 4.6.4

> Python Client for Couchbase

The Python package couchbase 4.6.4 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/couchbase@4.6.4`
- PyPI: https://pypi.org/project/couchbase/4.6.4/
- Author: Couchbase, Inc.
- License: Apache License 2.0
- Requires Python: \>=3.7
- Homepage: <https://github.com/couchbase/couchbase-python-client>

## SBOMs

### couchbase-4.6.4-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [couchbase-4.6.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7d4ed60e-820d-56a5-bd5c-61ee6900a0e6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### couchbase-4.6.4-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [couchbase-4.6.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d7d7d036-496e-5f43-b25d-b38a9b56ab92/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### couchbase-4.6.4-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [couchbase-4.6.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/68f25998-e58b-5979-8467-297c0891c917/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### couchbase-4.6.4-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [couchbase-4.6.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18be736b-5cc3-5f89-a01e-7f5cb224fdf6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### couchbase-4.6.4-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [couchbase-4.6.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4ab3b0a0-6df4-5f38-827f-752fb09d860a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2023-45875](https://insights.sbomify.com/CVE-2023-45875/) | high (7.5) | couchbase 4.6.4 (PyPI) | none listed |  |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/couchbase@4.6.4
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/couchbase/4.6.4.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/couchbase/4.6.4