# SBOM for jsoncompat 0.5.0 > JSON Schema compatibility checker for evolving schemas The Python package jsoncompat 0.5.0 ships 46 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/jsoncompat@0.5.0` - PyPI: https://pypi.org/project/jsoncompat/0.5.0/ - Requires Python: \>=3.12 ## SBOMs ### jsoncompat-0.5.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8392ccbf-911d-59ea-8a81-00f9f4f55256/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-macosx\_11\_0\_arm64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c11aaaf6-f63c-598a-b83c-cc767843e98d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/91d26076-edd0-5e65-8964-dc58df9813e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/6932c87c-cda9-52bd-85a9-a807059ed5f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/9c1c7793-edcb-5d93-93f0-1aba40416df4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/384204e3-2709-5f0d-9f14-e6a956698465/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-win32.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8c9b83e9-24cf-5692-aa92-14902cf42c37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp312-cp312-win\_amd64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/9938744e-7e30-5f22-8b18-2cbac9e1282e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8e9ee9b7-2713-53ab-a0b3-dbde4080310c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-macosx\_11\_0\_arm64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/fa68e608-ff89-532c-b489-f527a6cf7ea9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/1e7bd5f6-f6d4-5b70-b469-e7961ee02b76/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/37fc5e4f-edfc-548d-9b12-e1f321f4756c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b036ca7a-a78f-5821-8d6d-4638891573bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/943936ed-9a12-51fc-a56b-bf3bcb7ef3d3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-win32.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/972a8388-6d0a-57b9-ab26-d6221f6196ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp313-cp313-win\_amd64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/f29d6a0a-2d34-58c5-9d41-be7f4ca3a7f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/ce8f1a68-f1ad-5f08-b2a3-a6cecd769925/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-macosx\_11\_0\_arm64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c2b1742d-04a8-5ec1-9f89-71a0c9a379eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/f702fe07-1b0f-54a8-ba12-4fa3988b9cf2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/7a139b51-732a-516c-a0d6-4a24c852b99f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b645c679-effb-555c-9f3e-fe5bd4d1689f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b07742b2-28d6-55da-ba7d-508ead2fda86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-win32.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/97009071-1df3-5d6a-b615-c17ad8d84b9d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314-win\_amd64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/fc42cfe7-7089-5cf2-a42c-8a38d2b55e6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/44a951dd-6f09-5362-afe5-0eb916f40997/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-macosx\_11\_0\_arm64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/75cbcf4f-aee3-50a0-8b00-14aa7ab29a5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/fbacd0ab-0ea3-5114-b8fe-c9f2d9297662/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b2d9a2ef-6c8f-53d4-895d-bf854a31a61d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/f885216f-c04d-5457-a53a-a8e71e446d75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/f8f77fda-ab0e-50ee-b1dd-38836e651274/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-win32.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/2021d73b-5092-58a0-810e-6f1654bed244/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp314-cp314t-win\_amd64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b4985382-c03c-53d6-bc69-0e200b3e31a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-macosx\_10\_12\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/e8512e15-fa48-5df6-b808-ba5e9bcac5c7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-macosx\_11\_0\_arm64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/18d99480-e370-5940-b7a2-be09ad3f0d90/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/4bc09e43-c019-5fb4-a53e-d41e57f6d047/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/46f89c4e-96d5-563e-b5c7-f331120c8258/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/7721e8d6-2f11-5632-a3ba-b6821ccf4743/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/290cf091-01fb-5194-9df4-fef3c3e7d765/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-win32.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/4c6c21ed-aa58-5e31-b08a-994dd8f13373/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315-win\_amd64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/235b6718-ed5d-59dd-b6da-4cf167717cc5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315t-macosx\_10\_12\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/09473ca8-6aab-533d-9dc9-44c4f980c35f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315t-macosx\_11\_0\_arm64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/78880f53-5b40-52b3-8493-677aa3cc0595/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/ba0be4fa-d076-5ff2-bab6-bf2e103c23a5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/09adeb01-d86d-5148-bfe7-2601a35ab1db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/d46a1989-2c5c-568e-9464-335b74d34e98/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### jsoncompat-0.5.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl - [jsoncompat-0.5.0.dist-info/sboms/jsoncompat\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/af2d11d4-72fa-52cc-8e5e-11702d7ffe75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/jsoncompat@0.5.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/jsoncompat/0.5.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/jsoncompat/0.5.0