sbomify PyPI TEA Start free

SBOM for iroh 1.2.0

CycloneDX PEP 740 attested 5 known vulnerabilities
Requires Python
>=3.7
PyPI
iroh 1.2.0
Homepage
https://iroh.computer

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

iroh-1.2.0-py3-none-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: n0-computer/iroh-ffi Workflow: wheels.yml
iroh-ffi.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities
Download

iroh-1.2.0-py3-none-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: n0-computer/iroh-ffi Workflow: wheels.yml
iroh-ffi.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

iroh-1.2.0-py3-none-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: n0-computer/iroh-ffi Workflow: wheels.yml
iroh-ffi.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

iroh-1.2.0-py3-none-win_amd64.whl

Attested
Publisher: GitHub Source: n0-computer/iroh-ffi Workflow: wheels.yml
iroh-ffi.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
CVE-2026-115567
Race condition in `tokio::time::Interval` on Tokio v1.54.0
 Medium 5.8 tokio 1.54.0
crates.io
 1.54.1
RUSTSEC-2023-0089
atomic-polyfill is unmaintained
 Unknown atomic-polyfill 1.0.3
crates.io · 3 of 4 wheels
 —
RUSTSEC-2026-0374
`basic-toml` is unmaintained
 Unknown basic-toml 0.1.10
crates.io
 —
RUSTSEC-2026-0385
Non-constant-time mask generation and `u128` comparisons
 Unknown ctutils 0.4.3
crates.io
 0.4.4
RUSTSEC-2024-0436
paste - no longer maintained
 Unknown paste 1.0.15
crates.io · 3 of 4 wheels
 —

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]