# SBOM for dk-tee-attestation 0.6.5

> TEE attestation library for AMD SEV-SNP and Intel TDX platforms

The Python package dk-tee-attestation 0.6.5 ships 2 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/dk-tee-attestation@0.6.5`
- PyPI: https://pypi.org/project/dk-tee-attestation/0.6.5/
- Author: DataKrypto
- Requires Python: \>=3.8
- Documentation: <https://docs.datakrypto.ai>
- Homepage: <https://datakrypto.ai>

## SBOMs

### dk\_tee\_attestation-0.6.5-cp38-abi3-manylinux\_2\_34\_x86\_64.whl

- [dk\_tee\_attestation-0.6.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/639f6b52-e50d-5b76-9c3a-6d743814244f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [dk\_tee\_attestation-0.6.5.dist-info/sboms/tee\_rust\_py\_wrap.cyclonedx.json](https://pypi.sbomify.com/artifact/476d89fe-4830-5d76-b595-21f48e6da3d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-42327](https://insights.sbomify.com/CVE-2026-42327/) | high (8.7) | openssl 0.10.76 (crates.io) | 0.10.79 | rust-openssl has undefined behavior in X509Ref::ocsp\_responders for certificates with non-UTF-8 OCSP URLs |
| [CVE-2026-41898](https://insights.sbomify.com/CVE-2026-41898/) | high (8.3) | openssl 0.10.76 (crates.io) | 0.10.78 | rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer |
| [CVE-2026-41681](https://insights.sbomify.com/CVE-2026-41681/) | high (8.1) | openssl 0.10.76 (crates.io) | 0.10.78 | rust-openssl: rustMdCtxRef::digest\_final() writes past caller buffer with no length check |
| [CVE-2026-41676](https://insights.sbomify.com/CVE-2026-41676/) | high (7.2) | openssl 0.10.76 (crates.io) | 0.10.78 | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 |
| [CVE-2026-41678](https://insights.sbomify.com/CVE-2026-41678/) | high (7.2) | openssl 0.10.76 (crates.io) | 0.10.78 | Out-of-bounds write in \`aes::unwrap\_key\` |
| [CVE-2026-44662](https://insights.sbomify.com/CVE-2026-44662/) | medium (5.1) | openssl 0.10.76 (crates.io) | 0.10.79 | rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding |
| [CVE-2026-45784](https://insights.sbomify.com/CVE-2026-45784/) | medium (5.1) | openssl 0.10.76 (crates.io) | 0.10.80 | rust-openssl: Potential out-of-bounds write in \`CipherCtxRef::cipher\_update\_inplace\` for AES-KW-PAD ciphers |
| [CVE-2026-41677](https://insights.sbomify.com/CVE-2026-41677/) | low (1.7) | openssl 0.10.76 (crates.io) | 0.10.78 | rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length |
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/dk-tee-attestation@0.6.5
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/dk-tee-attestation/0.6.5.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/dk-tee-attestation/0.6.5