# SBOM for html-parsing-tools 0.50.1

The Python package html-parsing-tools 0.50.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/html-parsing-tools@0.50.1`
- PyPI: https://pypi.org/project/html-parsing-tools/0.50.1/
- Requires Python: \>=3.14

## SBOMs

### html\_parsing\_tools-0.50.1-cp314-cp314-macosx\_11\_0\_arm64.whl

- [html\_parsing\_tools-0.50.1.dist-info/sboms/html\_parsing\_tools.cyclonedx.json](https://pypi.sbomify.com/artifact/afc80e16-54dd-568c-91f3-73ba56b26ca9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### html\_parsing\_tools-0.50.1-cp314-cp314-manylinux\_2\_34\_aarch64.whl

- [html\_parsing\_tools-0.50.1.dist-info/sboms/html\_parsing\_tools.cyclonedx.json](https://pypi.sbomify.com/artifact/12b9eb06-e763-5de2-bc61-2be780e14336/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### html\_parsing\_tools-0.50.1-cp314-cp314-manylinux\_2\_34\_x86\_64.whl

- [html\_parsing\_tools-0.50.1.dist-info/sboms/html\_parsing\_tools.cyclonedx.json](https://pypi.sbomify.com/artifact/bf02aa7a-9e9f-502a-af55-be7a1839f51e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### html\_parsing\_tools-0.50.1-cp315-cp315-macosx\_11\_0\_arm64.whl

- [html\_parsing\_tools-0.50.1.dist-info/sboms/html\_parsing\_tools.cyclonedx.json](https://pypi.sbomify.com/artifact/7ac59f37-cec5-5f12-bca7-c0635c3e90d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### html\_parsing\_tools-0.50.1-cp315-cp315-manylinux\_2\_34\_aarch64.whl

- [html\_parsing\_tools-0.50.1.dist-info/sboms/html\_parsing\_tools.cyclonedx.json](https://pypi.sbomify.com/artifact/60c47ad2-e896-5498-a9e6-615eb8175236/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### html\_parsing\_tools-0.50.1-cp315-cp315-manylinux\_2\_34\_x86\_64.whl

- [html\_parsing\_tools-0.50.1.dist-info/sboms/html\_parsing\_tools.cyclonedx.json](https://pypi.sbomify.com/artifact/ea0c71f9-20c0-5a69-9028-985070e94b62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |
| [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained |
| [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.7.3 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` |
| [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/html-parsing-tools@0.50.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/html-parsing-tools/0.50.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/html-parsing-tools/0.50.1