# SBOM for exiv2 0.19.2 > Python interface to libexiv2 The Python package exiv2 0.19.2 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/exiv2@0.19.2` - PyPI: https://pypi.org/project/exiv2/0.19.2/ - Changelog: - Documentation: - Homepage: ## SBOMs ### exiv2-0.19.2-cp310-cp310-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d2e0ed1a-13a0-5d9b-8203-2a69992fee70/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp310-cp310-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8c57f413-0c48-58ff-9787-15e464bfff88/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp311-cp311-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/982f88ea-8a97-5b7c-990e-13007ec1deb5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp311-cp311-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b07f0780-03db-58d8-9d60-789ba8c59d5b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp312-cp312-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ef39783f-c2ea-5e46-9b5b-3c4c85287786/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp312-cp312-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f8cc2eb6-7f89-54d2-9948-d153e353e7a8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp313-cp313-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a317d0cc-b31a-5952-97a7-caac3f18518b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp313-cp313-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c04a9fd5-f7ef-5863-b434-8b8f006ddd79/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp314-cp314-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7c1ff273-c9da-5d0e-8c2b-82d42af8786e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp314-cp314-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1fedbd2a-7764-573f-ba64-36c3bdf31827/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp314-cp314t-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/82cbe2a9-d220-5862-9c5c-26053e897c21/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp314-cp314t-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/436b60f9-2c6d-5f9b-867a-1a22d29f0a0e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp315-cp315-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6be5480e-a81e-5b5e-86ce-3750a80f7a36/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp315-cp315-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d290cf8d-f0b3-50ea-a1cc-c0fd691a0539/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp315-cp315t-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fdc3eb05-d5a3-52ab-92d6-befc639caf6f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp315-cp315t-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/de6351d8-ccff-5df3-94d4-9a68218688ba/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp39-cp39-manylinux\_2\_27\_aarch64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/049cb075-3064-5b55-a8a6-6738dffc1400/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### exiv2-0.19.2-cp39-cp39-manylinux\_2\_27\_x86\_64.whl - [exiv2-0.19.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c84cbc2-972a-511a-87b2-686f80637989/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2023-44398](https://insights.sbomify.com/CVE-2023-44398/) | high (8.8) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2020-18831](https://insights.sbomify.com/CVE-2020-18831/) | high (7.8) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2021-31292](https://insights.sbomify.com/CVE-2021-31292/) | high (7.5) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2017-9239](https://insights.sbomify.com/CVE-2017-9239/) | medium (6.5) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2018-20096](https://insights.sbomify.com/CVE-2018-20096/) | medium (6.5) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2018-20097](https://insights.sbomify.com/CVE-2018-20097/) | medium (6.5) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2018-20098](https://insights.sbomify.com/CVE-2018-20098/) | medium (6.5) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2018-20099](https://insights.sbomify.com/CVE-2018-20099/) | medium (6.5) | exiv2 0.19.2 (PyPI) | none listed | | | [CVE-2020-18899](https://insights.sbomify.com/CVE-2020-18899/) | medium (6.5) | exiv2 0.19.2 (PyPI) | none listed | | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/exiv2@0.19.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/exiv2/0.19.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/exiv2/0.19.2