SBOM for fetter 4.0.1

System-wide Python package discovery, validation, and allow-listing.

Package information

Author
Christopher Ariza
Requires Python
>=3.9
PyPI
fetter 4.0.1
Homepage
https://github.com/fetter-io/fetter-py
Issues
https://github.com/fetter-io/fetter-py/issues
Repository
https://github.com/fetter-io/fetter-py.git

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

fetter-4.0.1-cp310-cp310-macosx_10_12_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-macosx_11_0_arm64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-manylinux_2_17_i686.manylinux2014_i686.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-win32.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp310-cp310-win_amd64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-macosx_10_12_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-macosx_11_0_arm64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-manylinux_2_17_i686.manylinux2014_i686.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-win32.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp311-cp311-win_amd64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-macosx_10_12_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-macosx_11_0_arm64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-manylinux_2_17_i686.manylinux2014_i686.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-win32.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp312-cp312-win_amd64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-macosx_10_12_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-macosx_11_0_arm64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-manylinux_2_17_i686.manylinux2014_i686.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-win32.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp313-cp313-win_amd64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-macosx_10_12_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-macosx_11_0_arm64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-manylinux_2_17_i686.manylinux2014_i686.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-manylinux_2_17_s390x.manylinux2014_s390x.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-win32.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

fetter-4.0.1-cp314-cp314-win_amd64.whl

Valid
fetter.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0176
Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
High 8.7 pyo3 0.28.3
crates.io
0.29.0
CVE-2026-93599
Reachable panic in certificate revocation list parsing
High 7.5 rustls-webpki 0.103.1
crates.io
0.103.13
RUSTSEC-2026-0177
Missing `Sync` bound on `PyCFunction::new_closure` closures
Medium 6.3 pyo3 0.28.3
crates.io
0.29.0
CVE-2026-25541
Integer overflow in `BytesMut::reserve`
Medium 5.5 bytes 1.11.0
crates.io
1.11.1
CVE-2026-123613
TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Medium 5.3 rustls 0.23.25
crates.io
0.23.45
CVE-2026-93602
CRLs not considered authoritative by Distribution Point due to faulty matching logic
Medium 4.4 rustls-webpki 0.103.1
crates.io
0.103.10
CVE-2026-123609
`Debug` impls for client session values expose TLS secrets
Medium 4.0 rustls 0.23.25
crates.io
0.23.46
CVE-2026-123610
Brotli certificate decompression can allocate up to 1 GiB before authentication
Low 3.7 rustls 0.23.25
crates.io
0.23.46
CVE-2026-123611
Unauthenticated ServerHello can downgrade later connections to classical key exchange
Low 3.7 rustls 0.23.25
crates.io
0.23.46
CVE-2026-93600
Name constraints for URI names were incorrectly accepted
Low 2.2 rustls-webpki 0.103.1
crates.io
0.103.12
CVE-2026-93601
Name constraints were accepted for certificates asserting a wildcard name
Low 2.2 rustls-webpki 0.103.1
crates.io
0.103.12
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Unknown crossbeam-epoch 0.9.18
crates.io
0.9.20
CVE-2026-111943
Certificate verification may accept distrusted intermediates
Unknown rustls-webpki 0.103.1
crates.io
0.103.16
RUSTSEC-2024-0449
unsafe-libyaml is unmaintained
Unknown unsafe-libyaml 0.2.11
crates.io
—
CVE-2026-111943
Bundled root certificates allow trust in distrusted emSign intermediates
Unknown webpki-roots 1.0.5
crates.io
1.0.10

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]