{"url":"https://pypi.sbomify.com/package/django-bolt/0.13.0","markdown_url":"https://pypi.sbomify.com/package/django-bolt/0.13.0.md","name":"django-bolt","version":"0.13.0","purl":"pkg:pypi/django-bolt@0.13.0","summary":"The fastest Python web framework, built on Django: Rust (Actix Web) HTTP server, async typed handlers, msgspec validation - with the full Django ORM, Admin, middleware and auth. 300k+ req/s, no gunicorn or uvicorn needed.","author":null,"project_urls":{"Bug Tracker":"https://github.com/dj-bolt/django-bolt/issues","Documentation":"https://bolt.farhana.li/","Homepage":"https://github.com/dj-bolt/django-bolt","Repository":"https://github.com/dj-bolt/django-bolt"},"requires_python":">=3.12","license":"MIT","classifiers":["Development Status :: 3 - Alpha","Framework :: Django","Framework :: Django :: 5.2","Framework :: Django :: 6.0","Framework :: Django :: 6.1","Intended Audience :: Developers","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Free Threading :: 2 - Beta","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust","Topic :: Internet :: WWW/HTTP","Topic :: Internet :: WWW/HTTP :: HTTP Servers","Topic :: Software Development :: Libraries :: Application Frameworks"],"wheels":[{"filename":"django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/a7/4f/2d16e6c96b2f2eb027526cc149ddf28f48d12404e9a491f91e8f0add4ed4/django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"860f940f-a7a3-5659-94c3-dc3d16aa932e","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/860f940f-a7a3-5659-94c3-dc3d16aa932e/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/41/b1/4928755001e20ae84a7428e4b86a101312fa0fd295715f4435bd4cb0c7c2/django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"b6d477f4-80fa-595d-ba63-8b676c491651","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b6d477f4-80fa-595d-ba63-8b676c491651/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/15/a5/18f5a724e7421d0f1a108a0aad8b8d4d3a28259ab5966ae1591acaf5b0fc/django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"ba6feec0-2359-5a51-b554-1dbbd19c61c3","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ba6feec0-2359-5a51-b554-1dbbd19c61c3/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/e6/f1/67254b759e88d257e76ae435a0bbd9f72ae0bd3790d072f83618a453ede0/django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"e3461b9b-28c8-5e24-8a5d-ceea8ed25c05","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e3461b9b-28c8-5e24-8a5d-ceea8ed25c05/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/58/70/7dcc119f51971c54d8192c2c6ed23c1de917fb676019a6a97355fbbb91e3/django_bolt-0.13.0-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"e9ed5304-18bb-5f42-87f3-7b0aa468d6eb","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e9ed5304-18bb-5f42-87f3-7b0aa468d6eb/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/0e/a4/516806cf3ee3c57b1aff057c5210e4bd4b81c2e956044c15bf950540e84b/django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"cbf01b18-15aa-5024-9970-de0cfc91eea2","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cbf01b18-15aa-5024-9970-de0cfc91eea2/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/b7/22/fc1af26f8061fa30005dbea87833a7a8e7a54eb19002de5c07a616814514/django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"77c6b75f-5804-56ee-bbef-aa3824f30b48","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/77c6b75f-5804-56ee-bbef-aa3824f30b48/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/09/8b/4e031f692d5a516c11040878449bc7360073701d30eb80b8767489a89f36/django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"59f3ae9f-4fd0-5d75-ae4b-850cecd58b88","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/59f3ae9f-4fd0-5d75-ae4b-850cecd58b88/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/cc/98/ad343c0e79a9736e7f0d07b3230061e7ac8e7c27f8337cfb67bbe3af8fb8/django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"15896a3a-a27c-5715-bb53-7deb8d546ffe","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/15896a3a-a27c-5715-bb53-7deb8d546ffe/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_bolt-0.13.0-cp314-cp314t-win_amd64.whl","url":"https://files.pythonhosted.org/packages/86/1b/4e566e808f203cfb8a83ef807aa04af62815304c3bf24333887f7f0e6ca4/django_bolt-0.13.0-cp314-cp314t-win_amd64.whl","sboms":[{"artifact_uuid":"4666627a-7038-5fc4-83ed-9b5f4f70528f","path":"django_bolt-0.13.0.dist-info/sboms/django-bolt.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4666627a-7038-5fc4-83ed-9b5f4f70528f/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":10,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0461","aliases":["GHSA-4432-vg92-fqh6"],"summary":"Unbounded tool schema cache in Streamable HTTP server transport","severity":"high","score":7.5,"package":"rmcp","version":"3.5.1","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.5.1","fixed":["3.6.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0461","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0462","aliases":["GHSA-c9f9-cp8h-jcj5"],"summary":"Unbounded response body buffering in Streamable HTTP clients","severity":"medium","score":6.5,"package":"rmcp","version":"3.5.1","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.5.1","fixed":["3.9.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0462","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0443","aliases":["GHSA-8hcm-m7r7-frwc"],"summary":"Hidden file disclosure through Windows short names","severity":"unknown","score":null,"package":"actix-files","version":"0.7.1","ecosystem":"crates.io","purl":"pkg:cargo/actix-files@0.7.1","fixed":["0.7.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0443","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0446","aliases":["GHSA-2q7f-mf9f-5qhr"],"summary":"Request smuggling through malformed chunked request trailers","severity":"unknown","score":null,"package":"actix-http","version":"3.19.0","ecosystem":"crates.io","purl":"pkg:cargo/actix-http@3.19.0","fixed":["3.20.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0446","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0448","aliases":["GHSA-qph8-7859-gq2f","RUSTSEC-2026-0447"],"summary":"Unbounded decompression can exhaust memory and CPU resources","severity":"unknown","score":null,"package":"actix-http","version":"3.19.0","ecosystem":"crates.io","purl":"pkg:cargo/actix-http@3.19.0","fixed":["3.20.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0448","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0455","aliases":["GHSA-7p9w-p5qm-5gc5"],"summary":"Large-window Brotli bodies bypass decompression memory limits","severity":"unknown","score":null,"package":"actix-http","version":"3.19.0","ecosystem":"crates.io","purl":"pkg:cargo/actix-http@3.19.0","fixed":["3.20.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0455","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0447","aliases":["GHSA-qph8-7859-gq2f","RUSTSEC-2026-0448"],"summary":"Compressed request bodies can exhaust memory before extractor limits apply","severity":"unknown","score":null,"package":"actix-web","version":"4.17.0","ecosystem":"crates.io","purl":"pkg:cargo/actix-web@4.17.0","fixed":["4.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0447","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.3.27","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.3.27","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]},{"id":"RUSTSEC-2026-0457","aliases":["GHSA-5p52-q7pq-9fq2"],"summary":"OAuth client SSRF filter checks host strings, not resolved addresses","severity":"unknown","score":null,"package":"rmcp","version":"3.5.1","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.5.1","fixed":["3.7.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0457","wheels":["django_bolt-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp312-abi3-win_amd64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_10_12_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_bolt-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_bolt-0.13.0-cp314-cp314t-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":10,"total_sboms":10,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":7}}}