# SBOM for gps-data-codec 1.8.2

The Python package gps-data-codec 1.8.2 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/gps-data-codec@1.8.2`
- PyPI: https://pypi.org/project/gps-data-codec/1.8.2/
- Author: Raphael Stefanini \<raphael@routechoices.com\>
- License: MIT
- Homepage: <https://github.com/routechoices/gps-data-codec>
- Source Code: <https://github.com/routechoices/gps-data-codec.git>

## SBOMs

### gps\_data\_codec-1.8.2-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [gps\_data\_codec-1.8.2.dist-info/sboms/gps-data-codec.cyclonedx.json](https://pypi.sbomify.com/artifact/1548a168-8c9c-52b4-91cd-1c05fb5e90a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### gps\_data\_codec-1.8.2-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [gps\_data\_codec-1.8.2.dist-info/sboms/gps-data-codec.cyclonedx.json](https://pypi.sbomify.com/artifact/83d7458d-124e-579c-8c38-fdd39ee90658/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### gps\_data\_codec-1.8.2-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [gps\_data\_codec-1.8.2.dist-info/sboms/gps-data-codec.cyclonedx.json](https://pypi.sbomify.com/artifact/670e3357-3dfb-50d3-b9ea-171b62aab610/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### gps\_data\_codec-1.8.2-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [gps\_data\_codec-1.8.2.dist-info/sboms/gps-data-codec.cyclonedx.json](https://pypi.sbomify.com/artifact/dde2a5b8-ca4b-5492-b17e-9866dc3eb8e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### gps\_data\_codec-1.8.2-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [gps\_data\_codec-1.8.2.dist-info/sboms/gps-data-codec.cyclonedx.json](https://pypi.sbomify.com/artifact/81e559b1-7804-5265-8dba-a90929590d3f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/gps-data-codec@1.8.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/gps-data-codec/1.8.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/gps-data-codec/1.8.2