Skip to content

SBOM for django-bolt 0.13.0

The fastest Python web framework, built on Django: Rust (Actix Web) HTTP server, async typed handlers, msgspec validation - with the full Django ORM, Admin, middleware and auth. 300k+ req/s, no gunicorn or uvicorn needed.

CycloneDX 9 known vulnerabilities

License: MIT
Requires Python: >=3.12
PyPI: django-bolt 0.13.0
Bug Tracker: https://github.com/dj-bolt/django-bolt/issues
Documentation: https://bolt.farhana.li/
Homepage: https://github.com/dj-bolt/django-bolt
Repository: https://github.com/dj-bolt/django-bolt

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp312-abi3-win_amd64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

django_bolt-0.13.0-cp314-cp314t-win_amd64.whl

django-bolt.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0461 Unbounded tool schema cache in Streamable HTTP server transport	High 7.5	rmcp 3.5.1 crates.io	3.6.0
RUSTSEC-2026-0462 Unbounded response body buffering in Streamable HTTP clients	Medium 6.5	rmcp 3.5.1 crates.io	3.9.0
RUSTSEC-2026-0443 Hidden file disclosure through Windows short names	Unknown	actix-files 0.7.1 crates.io	0.7.4
RUSTSEC-2026-0446 Request smuggling through malformed chunked request trailers	Unknown	actix-http 3.19.0 crates.io	3.20.2
RUSTSEC-2026-0448 Unbounded decompression can exhaust memory and CPU resources	Unknown	actix-http 3.19.0 crates.io	3.20.1
RUSTSEC-2026-0455 Large-window Brotli bodies bypass decompression memory limits	Unknown	actix-http 3.19.0 crates.io	3.20.3
RUSTSEC-2026-0447 Compressed request bodies can exhaust memory before extractor limits apply	Unknown	actix-web 4.17.0 crates.io	4.18.2
RUSTSEC-2026-0258 h2 unbounded empty DATA frames	Unknown	h2 0.3.27 crates.io	0.4.16
RUSTSEC-2026-0457 OAuth client SSRF filter checks host strings, not resolved addresses	Unknown	rmcp 3.5.1 crates.io	3.7.0

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]