sbomify PyPI TEA Start free

SBOM for hpke-http 4.0.1

HPKE-protected HTTP requests and checked live response records backed by Rust.

CycloneDX PEP 740 attested 2 known vulnerabilities
Author
Duale AI
Requires Python
>=3.10
PyPI
hpke-http 4.0.1
Changelog
https://github.com/dualeai/hpke-http/releases
Documentation
https://github.com/dualeai/hpke-http#readme
Homepage
https://github.com/dualeai/hpke-http
Issues
https://github.com/dualeai/hpke-http/issues
Repository
https://github.com/dualeai/hpke-http.git

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

hpke_http-4.0.1-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl

Attested
Publisher: GitHub Source: dualeai/hpke-http Workflow: release.yml Environment: pypi
hpke-http-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities
Download

hpke_http-4.0.1-cp310-abi3-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: dualeai/hpke-http Workflow: release.yml Environment: pypi
hpke-http-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities
Download

hpke_http-4.0.1-cp310-abi3-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: dualeai/hpke-http Workflow: release.yml Environment: pypi
hpke-http-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0344
Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)
 High 7.5 ruzstd 0.9.0
crates.io
 0.9.1
RUSTSEC-2026-0385
Non-constant-time mask generation and `u128` comparisons
 Unknown ctutils 0.4.2
crates.io
 0.4.4

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]