# SBOM for iam-policy-autopilot 0.4.0

> An open source Model Context Protocol (MCP) server and command-line tool that helps your AI coding assistants quickly create baseline IAM policies that you can refine as your application evolves, so you can build faster. IAM Policy Autopilot analyzes your application code locally to generate identity-based policies for application roles, enabling faster IAM policy creation and reducing access troubleshooting time. IAM Policy Autopilot supports applications built in Python, Go, TypeScript, and J…

The Python package iam-policy-autopilot 0.4.0 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/iam-policy-autopilot@0.4.0`
- PyPI: https://pypi.org/project/iam-policy-autopilot/0.4.0/
- Requires Python: \>=3.8

## SBOMs

### iam\_policy\_autopilot-0.4.0-py3-none-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, awslabs/iam-policy-autopilot, workflow build\_and\_publish.yml).

- [iam\_policy\_autopilot-0.4.0.dist-info/sboms/iam-policy-autopilot-cli.cyclonedx.json](https://pypi.sbomify.com/artifact/041eeff4-178e-5eeb-9ff1-c669fe3bc722/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### iam\_policy\_autopilot-0.4.0-py3-none-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, awslabs/iam-policy-autopilot, workflow build\_and\_publish.yml).

- [iam\_policy\_autopilot-0.4.0.dist-info/sboms/iam-policy-autopilot-cli.cyclonedx.json](https://pypi.sbomify.com/artifact/7730ef27-061b-51cf-b512-75e97ad8ebb2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### iam\_policy\_autopilot-0.4.0-py3-none-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl

PEP 740 attestation verified (GitHub, awslabs/iam-policy-autopilot, workflow build\_and\_publish.yml).

- [iam\_policy\_autopilot-0.4.0.dist-info/sboms/iam-policy-autopilot-cli.cyclonedx.json](https://pypi.sbomify.com/artifact/61a2257d-42bb-5e31-9c99-d13c57c8417c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### iam\_policy\_autopilot-0.4.0-py3-none-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, awslabs/iam-policy-autopilot, workflow build\_and\_publish.yml).

- [iam\_policy\_autopilot-0.4.0.dist-info/sboms/iam-policy-autopilot-cli.cyclonedx.json](https://pypi.sbomify.com/artifact/a4f485cf-af96-5b2b-82b0-db223a45b84f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### iam\_policy\_autopilot-0.4.0-py3-none-win\_amd64.whl

PEP 740 attestation verified (GitHub, awslabs/iam-policy-autopilot, workflow build\_and\_publish.yml).

- [iam\_policy\_autopilot-0.4.0.dist-info/sboms/iam-policy-autopilot-cli.cyclonedx.json](https://pypi.sbomify.com/artifact/48af7157-f61a-5093-93bf-02c4b4305f13/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### iam\_policy\_autopilot-0.4.0-py3-none-win\_arm64.whl

PEP 740 attestation verified (GitHub, awslabs/iam-policy-autopilot, workflow build\_and\_publish.yml).

- [iam\_policy\_autopilot-0.4.0.dist-info/sboms/iam-policy-autopilot-cli.cyclonedx.json](https://pypi.sbomify.com/artifact/75d44d58-fbf3-5daf-9ed4-9dafab66b616/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-18140](https://insights.sbomify.com/CVE-2026-18140/) | high (8.7) | aws-smithy-json 0.62.5 (crates.io) | 0.62.7 | aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers |
| [CVE-2026-63127](https://insights.sbomify.com/CVE-2026-63127/) | high (8.2) | rmcp 1.7.0 (crates.io) | 2.0.0 | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery |
| [RUSTSEC-2026-0340](https://osv.dev/vulnerability/RUSTSEC-2026-0340) | high (7.5) | quinn-proto 0.11.15 (crates.io) | 0.11.18 | Peer minimum ACK delay can panic quinn-proto when ACK\_FREQUENCY transmission is enabled |
| [RUSTSEC-2026-0341](https://osv.dev/vulnerability/RUSTSEC-2026-0341) | high (7.5) | quinn-proto 0.11.15 (crates.io) | 0.11.17 | Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed |
| [CVE-2026-63128](https://insights.sbomify.com/CVE-2026-63128/) | high (7.5) | rmcp 1.7.0 (crates.io) | 2.0.0 | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service |
| [CVE-2026-93599](https://insights.sbomify.com/CVE-2026-93599/) | high (7.5) | rustls-webpki 0.101.7 (crates.io) | 0.103.13 | Reachable panic in certificate revocation list parsing |
| [CVE-2026-64684](https://insights.sbomify.com/CVE-2026-64684/) | medium (6.8) | rmcp 1.7.0 (crates.io) | 2.1.0 | RMCP: Custom HTTP headers leak to cross-origin redirect targets |
| [RUSTSEC-2026-0462](https://osv.dev/vulnerability/RUSTSEC-2026-0462) | medium (6.5) | rmcp 1.7.0 (crates.io) | 3.9.0 | Unbounded response body buffering in Streamable HTTP clients |
| [GHSA-qwgh-2vcv-g2f7](https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7) | medium (6.3) | block-buffer 0.12.0 (crates.io) | none listed | block\_buffer: panic corrupts inline buffer position |
| [GHSA-c9xm-49cp-xcr9](https://osv.dev/vulnerability/GHSA-c9xm-49cp-xcr9) | medium (6.3) | rmcp 1.7.0 (crates.io) | 2.0.0 | rmcp OAuth client fetches server-controlled resource\_metadata URLs |
| [CVE-2026-50185](https://insights.sbomify.com/CVE-2026-50185/) | medium (5.5) | cmov 0.5.3 (crates.io) | 0.5.4 | Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set |
| [CVE-2026-123613](https://insights.sbomify.com/CVE-2026-123613/) | medium (5.3) | rustls 0.23.40 (crates.io) | 0.23.45 | TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries |
| [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.21.12 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets |
| [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.23.40 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets |
| [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. |
| [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.23.40 (crates.io) | 0.23.46 | Brotli certificate decompression can allocate up to 1 GiB before authentication |
| [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange |
| [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.23.40 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange |
| [CVE-2026-93600](https://insights.sbomify.com/CVE-2026-93600/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints for URI names were incorrectly accepted |
| [CVE-2026-93601](https://insights.sbomify.com/CVE-2026-93601/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints were accepted for certificates asserting a wildcard name |
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |
| [RUSTSEC-2026-0387](https://osv.dev/vulnerability/RUSTSEC-2026-0387) | unknown | crypto-bigint 0.4.9 (crates.io) | 0.7.6 | Multiple timing variability issues in operations intended to be constant-time |
| [RUSTSEC-2026-0387](https://osv.dev/vulnerability/RUSTSEC-2026-0387) | unknown | crypto-bigint 0.5.5 (crates.io) | 0.7.6 | Multiple timing variability issues in operations intended to be constant-time |
| [RUSTSEC-2026-0385](https://osv.dev/vulnerability/RUSTSEC-2026-0385) | unknown | ctutils 0.4.2 (crates.io) | 0.4.4 | Non-constant-time mask generation and \`u128\` comparisons |
| [RUSTSEC-2026-0183](https://osv.dev/vulnerability/RUSTSEC-2026-0183) | unknown | git2 0.20.4 (crates.io) | 0.21.0 | Potential undefined behavior when calling Remote::list() |
| [RUSTSEC-2026-0184](https://osv.dev/vulnerability/RUSTSEC-2026-0184) | unknown | git2 0.20.4 (crates.io) | 0.21.0 | Potential undefined behavior with Signature from a buffer-created BlameHunk |
| [RUSTSEC-2026-0258](https://osv.dev/vulnerability/RUSTSEC-2026-0258) | unknown | h2 0.3.27 (crates.io) | 0.4.16 | h2 unbounded empty DATA frames |
| [RUSTSEC-2026-0258](https://osv.dev/vulnerability/RUSTSEC-2026-0258) | unknown | h2 0.4.14 (crates.io) | 0.4.16 | h2 unbounded empty DATA frames |
| [RUSTSEC-2026-0418](https://osv.dev/vulnerability/RUSTSEC-2026-0418) | unknown | libz-sys 1.1.28 (crates.io) | 1.1.31 | libz-sys build script leaks environment variables in the build directory |
| [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained |
| [RUSTSEC-2026-0173](https://osv.dev/vulnerability/RUSTSEC-2026-0173) | unknown | proc-macro-error2 2.0.1 (crates.io) | none listed | proc-macro-error2 is unmaintained |
| [RUSTSEC-2026-0338](https://osv.dev/vulnerability/RUSTSEC-2026-0338) | unknown | quinn-proto 0.11.15 (crates.io) | 0.11.18 | Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads |
| [RUSTSEC-2026-0339](https://osv.dev/vulnerability/RUSTSEC-2026-0339) | unknown | quinn-proto 0.11.15 (crates.io) | 0.11.17 | Unbounded growth of pending connection ID retirements in quinn-proto |
| [RUSTSEC-2026-0342](https://osv.dev/vulnerability/RUSTSEC-2026-0342) | unknown | quinn-proto 0.11.15 (crates.io) | 0.11.17 | Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto |
| [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.101.7 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates |
| [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.103.13 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates |
| [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.52.3 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety |
| [RUSTSEC-2024-0449](https://osv.dev/vulnerability/RUSTSEC-2024-0449) | unknown | unsafe-libyaml 0.2.11 (crates.io) | none listed | unsafe-libyaml is unmaintained |
| [RUSTSEC-2026-0391](https://osv.dev/vulnerability/RUSTSEC-2026-0391) | unknown | zstd 0.13.3 (crates.io) | 0.13.4 | Data from an abandoned stream leaks into the next stream on a reused context |
| [RUSTSEC-2026-0395](https://osv.dev/vulnerability/RUSTSEC-2026-0395) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free with \`CParameter::StableInBuffer\` |
| [RUSTSEC-2026-0396](https://osv.dev/vulnerability/RUSTSEC-2026-0396) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`Seekable\` reads a NULL or out-of-bounds seek table |
| [RUSTSEC-2026-0397](https://osv.dev/vulnerability/RUSTSEC-2026-0397) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`OutBuffer::around\_pos\` exposes uninitialized memory |
| [RUSTSEC-2026-0398](https://osv.dev/vulnerability/RUSTSEC-2026-0398) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`Seekable::decompress\` sets a \`Vec\` length beyond its capacity for offsets past the end |
| [RUSTSEC-2026-0399](https://osv.dev/vulnerability/RUSTSEC-2026-0399) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free through \`init\_using\_cdict\` and \`init\_using\_ddict\` |
| [RUSTSEC-2026-0400](https://osv.dev/vulnerability/RUSTSEC-2026-0400) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free of a dictionary after a one-shot call on a context with an open stream |
| [RUSTSEC-2026-0401](https://osv.dev/vulnerability/RUSTSEC-2026-0401) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Out-of-bounds read in \`train\_from\_buffer\` when sample sizes overflow |
| [RUSTSEC-2026-0402](https://osv.dev/vulnerability/RUSTSEC-2026-0402) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Heap buffer overflow in \`CCtx::try\_clone\` on a multithreaded context |
| [RUSTSEC-2026-0403](https://osv.dev/vulnerability/RUSTSEC-2026-0403) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Uninitialized memory exposed when streaming decompression of a legacy frame fails |
| [RUSTSEC-2026-0404](https://osv.dev/vulnerability/RUSTSEC-2026-0404) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Double free in \`DCtx::try\_clone\` |
| [RUSTSEC-2026-0405](https://osv.dev/vulnerability/RUSTSEC-2026-0405) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Out-of-bounds read with an out-of-range \`InBuffer::pos\` |
| [RUSTSEC-2026-0406](https://osv.dev/vulnerability/RUSTSEC-2026-0406) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free when changing a multithreaded context with an unfinished frame |
| [RUSTSEC-2026-0410](https://osv.dev/vulnerability/RUSTSEC-2026-0410) | unknown | zstd-sys 2.0.16+zstd.1.5.7 (crates.io) | 2.1.2 | WebAssembly allocator shim corrupts memory on allocation failure |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/iam-policy-autopilot@0.4.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/iam-policy-autopilot/0.4.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/iam-policy-autopilot/0.4.0