SBOM for deeptools 4.0.0

Useful tools for exploring deep sequencing data.

CycloneDX 11 known vulnerabilities

Author: Vivek Bhardwaj, Ward Deboutte, Lucille Delisle, Sarah Diehl, Galina Erikson, Friederike Dündar, Björn Grüning, Steffen Heyne, Fabian Kilpert, Wolfgang Maier, Thomas Manke, Saim Momin, Mohit Navander, Juan Perez Caballero, Fidel Ramirez, Adrian Salatino, Andreas S Richter, Devon P Ryan, Pavankumar Videm
Requires Python: >=3.12
PyPI: deeptools 4.0.0
documentation: https://deeptools.readthedocs.io/en/latest/
homepage: https://pypi.python.org/pypi/deepTools/
repository: https://github.com/deeptools/deepTools

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

deeptools-4.0.0-cp312-cp312-macosx_10_12_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp312-cp312-macosx_11_0_arm64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp312-cp312-manylinux_2_28_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp312-cp312-manylinux_2_28_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp312-cp312-musllinux_1_2_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp312-cp312-musllinux_1_2_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp313-cp313-macosx_10_12_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp313-cp313-macosx_11_0_arm64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp313-cp313-manylinux_2_28_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp313-cp313-manylinux_2_28_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp313-cp313-musllinux_1_2_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp313-cp313-musllinux_1_2_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314-macosx_10_12_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314-macosx_11_0_arm64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314-manylinux_2_28_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314-manylinux_2_28_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314-musllinux_1_2_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314-musllinux_1_2_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp315-cp315-manylinux_2_28_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

deeptools-4.0.0-cp315-cp315t-manylinux_2_28_x86_64.whl

hp.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 11 known vulnerabilities

Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
CVE-2026-115905 zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE	Critical 10.0	zip 6.0.0 crates.io	9.0.5
RUSTSEC-2026-0369 ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target	Critical 9.1	zip 6.0.0 crates.io	9.0.0
CVE-2026-115907 zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size	High 7.5	zip 6.0.0 crates.io	9.0.0
CVE-2026-115909 zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size	High 7.5	zip 6.0.0 crates.io	9.0.0
RUSTSEC-2026-0367 Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation	High 7.3	zip 6.0.0 crates.io	9.0.0
CVE-2026-115906 zip: AES Entry HMAC Authentication Bypass on Premature EOF	Medium 6.5	zip 6.0.0 crates.io	9.0.0
RUSTSEC-2025-0141 Bincode is unmaintained	Unknown	bincode 1.3.3 crates.io	—
RUSTSEC-2025-0058 custom_derive crate is unmaintained	Unknown	custom_derive 0.1.7 crates.io	—
RUSTSEC-2026-0418 libz-sys build script leaks environment variables in the build directory	Unknown	libz-sys 1.1.29 crates.io	1.1.31
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.53.1 crates.io	1.53.3
RUSTSEC-2026-0368 zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory	Unknown	zip 6.0.0 crates.io	9.0.0

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]

Package information

Available SBOMs

deeptools-4.0.0-cp312-cp312-macosx_10_12_x86_64.whl

deeptools-4.0.0-cp312-cp312-macosx_11_0_arm64.whl

deeptools-4.0.0-cp312-cp312-manylinux_2_28_aarch64.whl

deeptools-4.0.0-cp312-cp312-manylinux_2_28_x86_64.whl

deeptools-4.0.0-cp312-cp312-musllinux_1_2_aarch64.whl

deeptools-4.0.0-cp312-cp312-musllinux_1_2_x86_64.whl

deeptools-4.0.0-cp313-cp313-macosx_10_12_x86_64.whl

deeptools-4.0.0-cp313-cp313-macosx_11_0_arm64.whl

deeptools-4.0.0-cp313-cp313-manylinux_2_28_aarch64.whl

deeptools-4.0.0-cp313-cp313-manylinux_2_28_x86_64.whl

deeptools-4.0.0-cp313-cp313-musllinux_1_2_aarch64.whl

deeptools-4.0.0-cp313-cp313-musllinux_1_2_x86_64.whl

deeptools-4.0.0-cp314-cp314-macosx_10_12_x86_64.whl

deeptools-4.0.0-cp314-cp314-macosx_11_0_arm64.whl

deeptools-4.0.0-cp314-cp314-manylinux_2_28_aarch64.whl

deeptools-4.0.0-cp314-cp314-manylinux_2_28_x86_64.whl

deeptools-4.0.0-cp314-cp314-musllinux_1_2_aarch64.whl

deeptools-4.0.0-cp314-cp314-musllinux_1_2_x86_64.whl

deeptools-4.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl

deeptools-4.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl

deeptools-4.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl

deeptools-4.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl

deeptools-4.0.0-cp315-cp315-manylinux_2_28_x86_64.whl

deeptools-4.0.0-cp315-cp315t-manylinux_2_28_x86_64.whl

Known vulnerabilities

Access via TEA