sbomify PyPI TEA Start free

SBOM for images-upload-cli 4.1.0

Upload images via APIs

CycloneDX PEP 740 attested 19 known vulnerabilities
License
MIT
PyPI
images-upload-cli 4.1.0
Source Code
https://github.com/deadnews/imgup

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: deadnews/imgup Workflow: main.yml Environment: pypi
imgup.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 13 known vulnerabilities
Download

images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: deadnews/imgup Workflow: main.yml Environment: pypi
imgup.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 19 known vulnerabilities
Download

images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: deadnews/imgup Workflow: main.yml Environment: pypi
imgup.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 19 known vulnerabilities
Download

images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: deadnews/imgup Workflow: main.yml Environment: pypi
imgup.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 19 known vulnerabilities
Download

images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: deadnews/imgup Workflow: main.yml Environment: pypi
imgup.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 19 known vulnerabilities
Download

images_upload_cli-4.1.0-py3-none-win_amd64.whl

Attested
Publisher: GitHub Source: deadnews/imgup Workflow: main.yml Environment: pypi
imgup.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 13 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0194
Quadratic run time when checking a start tag for duplicate attribute names
 High 7.5 quick-xml 0.39.4
crates.io · 4 of 6 wheels
 0.41.0
RUSTSEC-2026-0195
Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
 High 7.5 quick-xml 0.39.4
crates.io · 4 of 6 wheels
 0.41.0
RUSTSEC-2026-0340
Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
 High 7.5 quinn-proto 0.11.16
crates.io
 0.11.18
RUSTSEC-2026-0341
Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed
 High 7.5 quinn-proto 0.11.16
crates.io
 0.11.17
CVE-2026-123613
TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
 Medium 5.3 rustls 0.23.41
crates.io
 0.23.45
CVE-2026-123609
`Debug` impls for client session values expose TLS secrets
 Medium 4.0 rustls 0.23.41
crates.io
 0.23.46
CVE-2026-123610
Brotli certificate decompression can allocate up to 1 GiB before authentication
 Low 3.7 rustls 0.23.41
crates.io
 0.23.46
CVE-2026-123611
Unauthenticated ServerHello can downgrade later connections to classical key exchange
 Low 3.7 rustls 0.23.41
crates.io
 0.23.46
RUSTSEC-2026-0221
`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`
 Unknown event-listener 5.4.1
crates.io · 4 of 6 wheels
 5.4.2
RUSTSEC-2026-0258
h2 unbounded empty DATA frames
 Unknown h2 0.4.15
crates.io
 0.4.16
RUSTSEC-2026-0338
Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
 Unknown quinn-proto 0.11.16
crates.io
 0.11.18
RUSTSEC-2026-0339
Unbounded growth of pending connection ID retirements in quinn-proto
 Unknown quinn-proto 0.11.16
crates.io
 0.11.17
RUSTSEC-2026-0342
Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto
 Unknown quinn-proto 0.11.16
crates.io
 0.11.17
CVE-2026-111943
Certificate verification may accept distrusted intermediates
 Unknown rustls-webpki 0.103.13
crates.io
 0.103.16
RUSTSEC-2026-0386
`AsyncFd::new` and related constructors violate I/O safety
 Unknown tokio 1.52.3
crates.io
 1.53.3
RUSTSEC-2026-0192
`ttf-parser` is unmaintained
 Unknown ttf-parser 0.21.1
crates.io
 —
RUSTSEC-2026-0371
`zbus_names` is unmaintained
 Unknown zbus_names 4.3.3
crates.io · 4 of 6 wheels
 —
RUSTSEC-2026-0370
`zvariant` is unmaintained
 Unknown zvariant 5.13.0
crates.io · 4 of 6 wheels
 —
RUSTSEC-2026-0372
`zvariant_derive` is unmaintained
 Unknown zvariant_derive 5.13.0
crates.io · 4 of 6 wheels
 —

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]