# SBOM for hussh 0.3.3 > SSH for Humans The Python package hussh 0.3.3 ships 65 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/hussh@0.3.3` - PyPI: https://pypi.org/project/hussh/0.3.3/ - Requires Python: \>=3.10 ## SBOMs ### hussh-0.3.3-cp310-cp310-macosx\_11\_0\_arm64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/8a5bbe88-c32f-5ea0-a44f-1bc3a3d8f339/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/05c96c39-e523-579f-8427-e6905db96a48/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/e212a034-5fe8-5d18-8531-2742bb65fd10/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/5ae607a3-2dfb-5e31-8c54-d2e122d6b911/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/33290ee6-14d2-54ed-8cfe-1517dd604777/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/ed65791a-86d4-5893-a06f-12ca0d6ad440/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/a7226211-ac2c-524e-99fd-3573523ebce6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-musllinux\_1\_2\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/38a6aef6-086c-511f-a59d-d255e30070a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-musllinux\_1\_2\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/3853822b-b8b2-5b1f-b3da-904208ee1588/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/2619885b-d810-59d5-bdf1-ca0c44ca30c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp310-cp310-win\_amd64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/a1e8e40e-ad25-512c-a15e-130ffb903126/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp311-cp311-macosx\_11\_0\_arm64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/a1f6f1b0-656a-54ed-a9b8-150a9a64723c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/7eca24ea-41f3-57ac-818f-8a39d856b620/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/09e79127-ac0d-5dc9-8ac2-d0c1ddb01067/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/b65638c9-adf5-5c9b-8e12-311072470df6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/6c203b0d-6791-5053-8007-85cc7d280ea4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/a36fd2a3-aac5-504e-a706-d3ecbe18dc5a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/d900c261-8d50-573b-a8b0-946ebe5a66df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-musllinux\_1\_2\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/b3fb0487-f6c2-574a-9241-84c080920156/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-musllinux\_1\_2\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/dd3ebdda-f5f2-5bfb-bc3a-6840fc542893/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/0fbb331c-eaf3-5495-bac6-5b75baf89def/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp311-cp311-win\_amd64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/376264d8-7b1a-5497-a105-618491823b09/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp312-cp312-macosx\_11\_0\_arm64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/ec5483d0-8daf-59a6-a62b-7f8d4a5d77ac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/d8f6dc3c-4de7-5177-9e36-3614ffb44820/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/140165ae-f95e-5e40-a5a8-ba2d6f28737a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/27bca938-3b5b-5411-8861-4d984540908c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/91dc19ef-a75e-5cbf-b6ff-220aee8cc401/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/a2581c18-0c0f-5fe6-8f30-c3df9c8078ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/ac423598-6c91-5301-8e60-b2cb3b4ec380/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-musllinux\_1\_2\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/7e333674-6720-5c07-b12a-c0f2f87bb0d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-musllinux\_1\_2\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/102896be-885e-5c79-a69e-1aaf390ad3ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/066bd753-8c3f-56ba-9420-f901680d260f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp312-cp312-win\_amd64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/268b8219-80c9-54ef-8994-7ecbd276cf52/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp313-cp313-macosx\_11\_0\_arm64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/fa182c74-9503-5800-a35b-c47f936bf90d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/bad24eef-d980-5ca8-9cbb-6504e9f49342/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/6c7c1fa1-ed9f-5810-b0b7-dfa13ccddadf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/aee589ec-d84b-51b9-a676-34e1d53e36aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/1993fc59-5483-5b91-a6f6-55cd247ede43/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/d10f1020-a486-568c-8688-c8f57f07df17/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/b6b636c0-b9fa-55a4-8a92-1edbfd648a13/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-musllinux\_1\_2\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/75b5c223-c3e2-58b1-b2d5-166cda17967a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-musllinux\_1\_2\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/d3339237-213f-56c4-8444-6d90fb11dde6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/31b65570-b991-584a-a4d5-e8b142c105e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp313-cp313-win\_amd64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/ac28ccaf-447d-5124-a215-83a8df33d470/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp314-cp314-macosx\_11\_0\_arm64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/e2130946-dba3-5a7e-81d7-76107b1c23b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/71411b98-8eb0-55af-8434-0c50af3e64ba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/40ab719b-ad2a-59bb-849a-2e9781a58a7c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/dcacd2fc-cd7b-5eed-bc9a-117a02ff7c83/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/05568c63-21fa-56af-a1e7-d06c2094ee17/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/0565947f-7d5a-51ec-b974-537642afd32d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/b15ac6f6-5da6-54fe-93e5-e26482c7d30a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-musllinux\_1\_2\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/5042f312-9f00-546e-a14a-17e9625186cf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-musllinux\_1\_2\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/1027081c-fe90-5b2d-b4e6-540e1ff4cfa2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/d08b7cef-4559-5fa6-91e1-8e531d551a37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-cp314-cp314-win\_amd64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/37495a05-7a46-568f-bf3e-417befdd62f8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-macosx\_11\_0\_arm64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/0cce4e8d-39cc-50a4-88ab-69eed02696ac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 12 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/9297f23a-6d5e-5f63-b6a7-02266df6646e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/7a1de5ec-8492-59d4-9253-0c042464ba1a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/dc52bcb4-8fda-5fae-a354-5391c1ac7352/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/f00da98f-6eb3-5719-9091-99a9f6b8e7a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/34d21b03-a7dc-5d11-963d-81f03c3a40f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/816068dc-24b8-51ee-900c-d2fe959503ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-musllinux\_1\_2\_armv7l.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/469db2e4-1983-5f44-8193-b07a8d45448c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/a4cfd4e8-9286-5e89-9ed0-6b3992eae700/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### hussh-0.3.3-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl - [hussh-0.3.3.dist-info/sboms/hussh.cyclonedx.json](https://pypi.sbomify.com/artifact/dd2e69bf-4392-59f6-9780-1ce9fa671d0f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-116794](https://insights.sbomify.com/CVE-2026-116794/) | high (8.3) | russh 0.63.3 (crates.io) | 0.65 | russh: Agent server never calls \`Agent::confirm\`, so keys added with the confirm constraint (\`ssh-add -c\`) sign without confirmation | | [CVE-2023-49092](https://insights.sbomify.com/CVE-2023-49092/) | medium (5.9) | rsa 0.10.0-rc.18 (crates.io) | 0.10.0 | Marvin Attack: potential key recovery through timing sidechannels | | [CVE-2026-111061](https://insights.sbomify.com/CVE-2026-111061/) | medium (4.3) | russh 0.63.3 (crates.io) | 0.64.1 | russh: Unbounded memory allocation in agent protocol server via crafted constraint records | | [CVE-2026-116773](https://insights.sbomify.com/CVE-2026-116773/) | medium (4.3) | russh 0.63.3 (crates.io) | 0.65 | russh's SSH client is susceptible to unbounded allocations via EXT\_INFO packets | | [CVE-2026-116774](https://insights.sbomify.com/CVE-2026-116774/) | medium (4.3) | russh 0.63.3 (crates.io) | 0.65 | russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) | | [CVE-2026-116696](https://insights.sbomify.com/CVE-2026-116696/) | low (3.3) | russh 0.63.3 (crates.io) | 0.65.0 | russh's SSH agent server is susceptible to unbound allocations via repeated SSH\_AGENT\_CONSTRAIN\_CONFIRM messages | | [CVE-2026-116775](https://insights.sbomify.com/CVE-2026-116775/) | low (2.3) | pageant 0.2.3 (crates.io) | 0.2.5 | pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) | | [CVE-2026-111062](https://insights.sbomify.com/CVE-2026-111062/) | low (2.3) | russh 0.63.3 (crates.io) | 0.64.0 | A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request | | [RUSTSEC-2026-0387](https://osv.dev/vulnerability/RUSTSEC-2026-0387) | unknown | crypto-bigint 0.7.5 (crates.io) | 0.7.6 | Multiple timing variability issues in operations intended to be constant-time | | [RUSTSEC-2026-0385](https://osv.dev/vulnerability/RUSTSEC-2026-0385) | unknown | ctutils 0.4.2 (crates.io) | 0.4.4 | Non-constant-time mask generation and \`u128\` comparisons | | [RUSTSEC-2026-0418](https://osv.dev/vulnerability/RUSTSEC-2026-0418) | unknown | libz-sys 1.1.29 (crates.io) | 1.1.31 | libz-sys build script leaks environment variables in the build directory | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/hussh@0.3.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/hussh/0.3.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/hussh/0.3.3