# SBOM for fastobo 0.14.2 > Faultless AST for Open Biomedical Ontologies in Python. The Python package fastobo 0.14.2 ships 25 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/fastobo@0.14.2` - PyPI: https://pypi.org/project/fastobo/0.14.2/ - Requires Python: \>=3.9 - Bug Tracker: - Builds: - Changelog: - Conda: - Documentation: - Homepage: - PiWheels: - PyPI: ## SBOMs ### fastobo-0.14.2-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/41eba069-e700-5243-b877-3d8b33265eec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp310-cp310-macosx\_12\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/31d043f7-232e-5791-a2c7-799fadc90616/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp310-cp310-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/7b74585e-485a-5efa-a087-c837007e200f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a0c06e26-f260-5544-ab5c-463288905f73/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/bd6d684c-60c4-54a1-94de-d210fb0ca20f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b6847815-fa15-5f79-9708-49454f0a0771/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp311-cp311-macosx\_12\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/032bb52e-3df7-580f-9b09-c32363d125bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ab95baf6-9cbc-5bae-b808-473a37fc1289/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/145c15c5-44b8-57a6-9b00-99f10f3c086f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/5662a217-5137-5199-a0ff-991dd4769df2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp312-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/91aa7676-430e-5510-857d-6de9ce6880b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp312-abi3-macosx\_12\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ade5318b-c95b-58dc-b8ec-97ebfd5dc756/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp312-abi3-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/5e634335-6b81-51f0-97fd-4cbc0ffb8b4b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp312-abi3-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3be052b8-58f7-5269-96b6-51a122801754/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp312-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ac55a27b-1dd8-5dd5-a274-5346aa971c6e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d7cc91b8-6807-5d7f-b1b8-6096ef31df66/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp314-cp314t-macosx\_12\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/71f78f87-0c91-511b-90fb-95fa16b3b39d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp314-cp314t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/5cd8d08a-c81a-562b-8bd5-9b9bbead8d4f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0b49a1f5-d0a8-55af-bbff-58b8e9dd8556/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/322edfc8-c2b9-5270-84bf-99a79fce6660/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp39-cp39-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/155fce3e-f54f-5613-ad61-b3fa7fdef7d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp39-cp39-macosx\_12\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/eaf909a9-ebb3-5393-8370-7487c4dbf2dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp39-cp39-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2a472572-6f04-5d2a-ba55-2b2db754c5cf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp39-cp39-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/05537139-b11c-59a4-baf4-4ce7b6013c7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### fastobo-0.14.2-cp39-cp39-win\_amd64.whl PEP 740 attestation verified (GitHub, fastobo/fastobo-py, workflow publish.yml). - [fastobo-0.14.2.dist-info/sboms/fastobo-py.cyclonedx.json](https://pypi.sbomify.com/artifact/739ef989-d363-5085-bbc8-fcda6b43c1cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.31.0 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names | | [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.37.5 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names | | [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.31.0 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service | | [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.37.5 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service | | [RUSTSEC-2026-0249](https://osv.dev/vulnerability/RUSTSEC-2026-0249) | unknown | smartstring 1.0.1 (crates.io) | none listed | smartstring is unmaintained | | [RUSTSEC-2024-0449](https://osv.dev/vulnerability/RUSTSEC-2024-0449) | unknown | unsafe-libyaml 0.2.11 (crates.io) | none listed | unsafe-libyaml is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/fastobo@0.14.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/fastobo/0.14.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/fastobo/0.14.2