# SBOM for fortitude-lint 0.10.1 > A Fortran linter, written in Rust and installable with Python The Python package fortitude-lint 0.10.1 ships 15 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/fortitude-lint@0.10.1` - PyPI: https://pypi.org/project/fortitude-lint/0.10.1/ - Requires Python: \>=3.7 - Repository: ## SBOMs ### fortitude\_lint-0.10.1-py3-none-macosx\_10\_12\_x86\_64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/4969612f-641d-5f56-ac49-1326f59f0019/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-macosx\_11\_0\_arm64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/8a6456b9-a160-5e01-8b7f-16025255580e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-manylinux\_2\_28\_aarch64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/9ed5bdb1-ab3d-54a2-a733-7ed8edba55ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-manylinux\_2\_28\_armv7l.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/10ef3ac4-3c02-5661-91c5-6f15fdd8f9fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-manylinux\_2\_28\_i686.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/1b6ab0d5-d54d-5fa5-a09a-123b5c59462e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-manylinux\_2\_28\_ppc64le.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/ac45ed74-a991-5959-9e46-fd703d024b16/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-manylinux\_2\_28\_s390x.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/c4ea15f9-b0f6-5ffe-8023-0ffb1ce60765/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-manylinux\_2\_28\_x86\_64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/f7ec8012-333f-5580-82ec-51dad45cb608/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-musllinux\_1\_2\_aarch64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/497f3dc2-5a88-582f-a3d0-b0ea090471b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-musllinux\_1\_2\_armv7l.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/02979e3a-8c65-5563-98d1-ceb2c6825b75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-musllinux\_1\_2\_i686.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/d1d168f9-3750-590b-9e2f-672f09ee0ef3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-musllinux\_1\_2\_x86\_64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/a462f585-9334-5c83-9e88-ec2b8be09599/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-win32.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/f0e384fb-d180-5b32-855e-a4d416bbbfd0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-win\_amd64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/589540ed-cc9b-5f52-a981-b0df9167e78d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ### fortitude\_lint-0.10.1-py3-none-win\_arm64.whl - [fortitude\_lint-0.10.1.dist-info/sboms/fortitude.cyclonedx.json](https://pypi.sbomify.com/artifact/d4aba1e6-de95-57c9-a619-2c8f9519cc82/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 7 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.37.5 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names | | [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.37.5 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0183](https://osv.dev/vulnerability/RUSTSEC-2026-0183) | unknown | git2 0.20.4 (crates.io) | 0.21.0 | Potential undefined behavior when calling Remote::list() | | [RUSTSEC-2026-0184](https://osv.dev/vulnerability/RUSTSEC-2026-0184) | unknown | git2 0.20.4 (crates.io) | 0.21.0 | Potential undefined behavior with Signature from a buffer-created BlameHunk | | [RUSTSEC-2026-0418](https://osv.dev/vulnerability/RUSTSEC-2026-0418) | unknown | libz-sys 1.1.25 (crates.io) | 1.1.31 | libz-sys build script leaks environment variables in the build directory | | [RUSTSEC-2025-0119](https://osv.dev/vulnerability/RUSTSEC-2025-0119) | unknown | number\_prefix 0.4.0 (crates.io) | none listed | number\_prefix crate is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/fortitude-lint@0.10.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/fortitude-lint/0.10.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/fortitude-lint/0.10.1