# SBOM for faery 0.7.1 > Ferries event-based data from A to B The Python package faery 0.7.1 ships 68 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/faery@0.7.1` - PyPI: https://pypi.org/project/faery/0.7.1/ - Requires Python: \>=3.9 - documentation: - homepage: - repository: ## SBOMs ### faery-0.7.1-cp310-cp310-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/636a1b03-737e-5b8c-9272-c8c6e0b8d128/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp310-cp310-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/40df6130-7a43-575d-a1f7-b56ce18b9d18/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp310-cp310-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/0f5e084a-4c85-5007-b728-a887f38fc294/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp310-cp310-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/0a1ec514-204c-5218-9932-8f6059d901a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1e9b1da7-c9c9-52c3-9000-8c506370694b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/5245bd28-7d0c-5f68-ae31-14a5c5c8b713/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b23bd092-f7e1-5b8c-9ce7-61b8abb554fc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/014e9c53-91aa-5a9f-b261-b7dd50935c26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp310-cp310-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/b7e7d974-7b53-5b43-a19a-66b895508d37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/a73efb8a-d032-5c95-bc88-f4ec4579af17/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/51f6fcc0-8f17-53af-80b4-70c0b75fa8e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/847f4075-b09f-53c9-b409-35bb931e9b9e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/425350bd-8dc6-5a0e-91c6-401c5dba5fbe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d06f085c-a1a8-5f3f-9984-8a9ad41dc1c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/cedf3f32-65d5-5985-92d7-43c7817eb507/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d551e2df-8c20-57a0-b344-4ba32d596e44/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/f400f34e-0f2e-5292-ba84-cbfb1bc1f8b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/0dc99d30-fd5e-5733-9bf4-655530b60f2f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp311-cp311-win\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/a6ab0d5d-c574-5638-a6db-19e37f2a950f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/09446bfd-3709-5cad-88c9-8b6a7d8f30e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/085ef3a8-c476-5d01-8280-f4acac6b3c5b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/7dc990ff-3b36-5c9c-bac5-5c598ddf5240/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/f8620ff5-7765-56e9-ae91-bbc5a9cc2c4d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/154a8c05-2c28-58fa-b1bb-3466e173b859/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/1052611d-a366-53f9-bc77-76e1e783dc79/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75f4579f-86c5-5383-92e4-969cfb9e18e4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/3036d5a0-c36d-534f-baab-5fc5ed914dd0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/e3fb2f85-c53f-5c81-81cc-723b13578a52/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp312-cp312-win\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/91ebe4b1-16d4-50ab-bdb7-503d6e9b74dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/16da4f49-b231-5396-aac8-39023fb2c3d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/902431a6-21e8-5ed7-a0cf-161af2fc61dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/0cf2972d-c70d-58c5-92ec-035adf2144ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/2dd5d27b-f6b5-5461-8642-7b8d6ee1170a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7d87f95a-044f-58da-9c3f-4984693d00c0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/74525601-b6ee-52e3-95e8-c56246174be9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/459e035e-fe17-5875-9b99-a71d85e883b7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/93d641ee-8ef9-5546-8829-a27836f53c13/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/b65f595a-7149-5a2b-a63c-29a21ea395b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp313-cp313-win\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/efd41117-768b-5dd7-a9bb-74551e43dc98/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/66bc35eb-5090-541b-90cf-781d00a05f67/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/637a38b7-2256-548e-9588-f9f1648a48e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/560ecb17-f41b-5dc7-8f03-4a3f94c63e50/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/8a689fd8-6087-5581-a211-ffd2e7ba22a6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/09219ddf-5dbb-56d9-822a-a59a24a5946b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/d33900f2-9666-5c9e-b9a9-c0a8aac9610f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d85ea847-d71d-553d-84e4-fd252a29ec45/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/cdcbc480-f75a-52d4-85af-5c4004f11640/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/a2d68dfb-3adc-559f-82ab-a77fdd1086bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314-win\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/b68769ff-876d-5945-8844-7db1b0869d26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/9bb968ff-9a38-5806-aee2-db736c1c7384/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/99c70425-7da9-5ad9-bbd7-ef39281871b7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/e886bdb8-9bf3-5a53-b577-d67e539077c1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/82e9d575-8c51-52d3-9578-710e71393ffd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39e2d24d-b8b7-53af-9f02-0264e937431f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/9051606f-bdac-54ef-9fdc-0e32e9888d41/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b34dd71c-2afc-51b4-95c3-1a276ae79b8a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/95249f2b-c943-5287-bc0c-7f6423d057ba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/7821ac71-c99d-5dce-a1f0-03e5099bbded/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp314-cp314t-win\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/0da519cd-0795-56a0-b9c5-53914d6b0b68/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-macosx\_15\_0\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/5c37a6d6-d6ce-59fe-9ef5-80b08c5b995f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-macosx\_26\_0\_arm64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/768c4973-5197-5169-a340-a5625cb0cf14/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-manylinux\_2\_28\_aarch64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/53bc582e-51f4-57dc-88e1-3a30b3fd4e92/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-manylinux\_2\_28\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/a9f31b39-b6c1-526d-ad0d-bd2a31d0a3fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-musllinux\_1\_2\_aarch64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1adcb8b3-1b9f-52dd-a813-d8b2338d610d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/78badf5f-3e95-551c-807c-ff8e521f06f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [faery-0.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5b9413bd-8011-5191-86d2-ff0061d864ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/c0d250d0-c71e-5673-85dc-7a607a83bbe8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ### faery-0.7.1-cp39-cp39-win\_amd64.whl - [faery-0.7.1.dist-info/sboms/python.cyclonedx.json](https://pypi.sbomify.com/artifact/799095e9-04a1-52ff-9c6b-6501befca034/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 26 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2025-4574](https://insights.sbomify.com/CVE-2025-4574/) | medium (6.3) | crossbeam-channel 0.5.14 (crates.io) | 0.5.15 | crossbeam-channel: double free on Drop | | [CVE-2026-25541](https://insights.sbomify.com/CVE-2026-25541/) | medium (5.5) | bytes 1.10.0 (crates.io) | 1.11.1 | Integer overflow in \`BytesMut::reserve\` | | [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 2.0.1 (crates.io) | none listed | Bincode is unmaintained | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0221](https://osv.dev/vulnerability/RUSTSEC-2026-0221) | unknown | event-listener 5.4.0 (crates.io) | 5.4.2 | \`event-listener\` allows \`!Send\` tags to cross thread boundaries via \`StackSlot\` | | [RUSTSEC-2026-0253](https://osv.dev/vulnerability/RUSTSEC-2026-0253) | unknown | lru 0.16.4 (crates.io) | 0.18.2 | Potential use-after-free due to lack of panic safety in \`LruCache::pop()\` | | [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained | | [RUSTSEC-2026-0206](https://osv.dev/vulnerability/RUSTSEC-2026-0206) | unknown | rustybuzz 0.20.1 (crates.io) | none listed | \`rustybuzz\` is unmaintained | | [RUSTSEC-2026-0192](https://osv.dev/vulnerability/RUSTSEC-2026-0192) | unknown | ttf-parser 0.25.1 (crates.io) | none listed | \`ttf-parser\` is unmaintained | | [RUSTSEC-2026-0371](https://osv.dev/vulnerability/RUSTSEC-2026-0371) | unknown | zbus\_names 4.3.4 (crates.io) | none listed | \`zbus\_names\` is unmaintained | | [RUSTSEC-2026-0391](https://osv.dev/vulnerability/RUSTSEC-2026-0391) | unknown | zstd 0.14.0 (crates.io) | 0.13.4, 0.14.3 | Data from an abandoned stream leaks into the next stream on a reused context | | [RUSTSEC-2026-0395](https://osv.dev/vulnerability/RUSTSEC-2026-0395) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Use-after-free with \`CParameter::StableInBuffer\` | | [RUSTSEC-2026-0396](https://osv.dev/vulnerability/RUSTSEC-2026-0396) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | \`Seekable\` reads a NULL or out-of-bounds seek table | | [RUSTSEC-2026-0397](https://osv.dev/vulnerability/RUSTSEC-2026-0397) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | \`OutBuffer::around\_pos\` exposes uninitialized memory | | [RUSTSEC-2026-0398](https://osv.dev/vulnerability/RUSTSEC-2026-0398) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | \`Seekable::decompress\` sets a \`Vec\` length beyond its capacity for offsets past the end | | [RUSTSEC-2026-0399](https://osv.dev/vulnerability/RUSTSEC-2026-0399) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Use-after-free through \`init\_using\_cdict\` and \`init\_using\_ddict\` | | [RUSTSEC-2026-0400](https://osv.dev/vulnerability/RUSTSEC-2026-0400) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Use-after-free of a dictionary after a one-shot call on a context with an open stream | | [RUSTSEC-2026-0401](https://osv.dev/vulnerability/RUSTSEC-2026-0401) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Out-of-bounds read in \`train\_from\_buffer\` when sample sizes overflow | | [RUSTSEC-2026-0402](https://osv.dev/vulnerability/RUSTSEC-2026-0402) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Heap buffer overflow in \`CCtx::try\_clone\` on a multithreaded context | | [RUSTSEC-2026-0403](https://osv.dev/vulnerability/RUSTSEC-2026-0403) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Uninitialized memory exposed when streaming decompression of a legacy frame fails | | [RUSTSEC-2026-0404](https://osv.dev/vulnerability/RUSTSEC-2026-0404) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Double free in \`DCtx::try\_clone\` | | [RUSTSEC-2026-0405](https://osv.dev/vulnerability/RUSTSEC-2026-0405) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Out-of-bounds read with an out-of-range \`InBuffer::pos\` | | [RUSTSEC-2026-0406](https://osv.dev/vulnerability/RUSTSEC-2026-0406) | unknown | zstd-safe 8.0.0 (crates.io) | 7.4.0, 8.2.0 | Use-after-free when changing a multithreaded context with an unfinished frame | | [RUSTSEC-2026-0410](https://osv.dev/vulnerability/RUSTSEC-2026-0410) | unknown | zstd-sys 2.1.0+zstd.1.5.7 (crates.io) | 2.1.2 | WebAssembly allocator shim corrupts memory on allocation failure | | [RUSTSEC-2026-0370](https://osv.dev/vulnerability/RUSTSEC-2026-0370) | unknown | zvariant 5.15.0 (crates.io) | none listed | \`zvariant\` is unmaintained | | [RUSTSEC-2026-0372](https://osv.dev/vulnerability/RUSTSEC-2026-0372) | unknown | zvariant\_derive 5.15.0 (crates.io) | none listed | \`zvariant\_derive\` is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/faery@0.7.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/faery/0.7.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/faery/0.7.1