# SBOM for kcl-lib 0.13.2 > KCL Programming Language Python Lib The Python package kcl-lib 0.13.2 ships 29 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/kcl-lib@0.13.2` - PyPI: https://pypi.org/project/kcl-lib/0.13.2/ - License: Apache-2.0 - Requires Python: \>=3.10 - Documentation: - Homepage: - Repository: ## SBOMs ### kcl\_lib-0.13.2-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/4a835d6b-d890-5fb6-bb61-c9034a474884/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/c948c6dc-1ea0-5dc4-827b-e17a55048048/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp310-cp310-win\_amd64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/97db0529-1eff-562a-b61f-995a77de2db4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp311-cp311-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/461ad497-42df-5f48-9337-ccff9e7561c0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/267dc54e-3556-5c61-862a-05819ae44b44/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/42bd1863-a26e-53a7-a091-3613cd324371/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp311-cp311-win\_amd64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/36c33091-b545-54ac-b8b4-30283232c5d3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp312-cp312-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/fcad69f2-9016-5323-81b7-3f33dceb53d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/01bcdc68-6f73-5812-af5d-f1a5787bf445/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/4dbfc617-738b-5244-bb3a-a4c10d34b394/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp312-cp312-win\_amd64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/49f3cdd0-9913-5be2-ac56-c24a555b74cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp313-cp313-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/a21ae740-2cf4-5872-8a43-abc6c384e906/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/07a01990-322e-5935-a36b-7e8ba7613e34/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/820a0294-4442-5b49-bfee-6e6b008bd651/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp313-cp313-win\_amd64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/45f88fd4-744d-5d57-a5da-251cac65601b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp314-cp314-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/b17ca310-8cd6-5527-b2a0-427ab0d98b99/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/4a3f3be6-2c2a-51e5-a00b-54cf461701e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/5a501fed-19f8-582e-8fd5-237e024e45c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp314-cp314-win\_amd64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/2c6ad871-fe9b-5967-8a9c-d4173a8d0df4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/23a2ff4a-856a-5b1a-bbbc-ea3f889cfcdd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/5f25edd5-b126-54c9-b3ff-b625c76a501f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp315-cp315-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/cf7c76ed-9c79-5cc7-8914-955f3978e46f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp315-cp315-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/08c1a056-0039-52cb-b3c0-dad560bb3c71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/213f501e-9ed2-5150-b98a-f8cdf8a3587e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp315-cp315-win\_amd64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/268ad64e-848a-5bfa-8822-169684f4abd0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp315-cp315t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/51fcb456-fcf4-56bd-8b32-6e7e40bf0c78/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/45be11af-ccb3-57b3-b55e-551778ff4729/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/603213c8-5513-565f-a99a-e7fa7ad4e772/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ### kcl\_lib-0.13.2-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [kcl\_lib-0.13.2.dist-info/sboms/kcl-python-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/79e86742-6102-5817-ab6c-789ff548f8d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-115567](https://insights.sbomify.com/CVE-2026-115567/) | medium (5.8) | tokio 1.54.0 (crates.io) | 1.54.1 | Race condition in \`tokio::time::Interval\` on Tokio v1.54.0 | | [RUSTSEC-2026-0247](https://osv.dev/vulnerability/RUSTSEC-2026-0247) | unknown | bitmaps 2.1.0 (crates.io) | none listed | bitmaps is unmaintained | | [RUSTSEC-2024-0014](https://osv.dev/vulnerability/RUSTSEC-2024-0014) | unknown | generational-arena 0.2.9 (crates.io) | none listed | \`generational-arena\` is unmaintained | | [RUSTSEC-2026-0250](https://osv.dev/vulnerability/RUSTSEC-2026-0250) | unknown | im-rc 15.1.0 (crates.io) | none listed | im-rc is unmaintained | | [RUSTSEC-2024-0384](https://osv.dev/vulnerability/RUSTSEC-2024-0384) | unknown | instant 0.1.13 (crates.io) | none listed | \`instant\` is unmaintained | | [RUSTSEC-2016-0007](https://osv.dev/vulnerability/RUSTSEC-2016-0007) | unknown | jwt 0.16.0 (crates.io) | none listed | jwt appears to be unmaintained | | [RUSTSEC-2026-0186](https://osv.dev/vulnerability/RUSTSEC-2026-0186) | unknown | memmap2 0.2.3 (crates.io) | 0.9.11 | Unchecked pointer offset in crate \`memmap2\` | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.103.15 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates | | [RUSTSEC-2026-0251](https://osv.dev/vulnerability/RUSTSEC-2026-0251) | unknown | sized-chunks 0.6.5 (crates.io) | none listed | sized-chunks is unmaintained | | [RUSTSEC-2026-0255](https://osv.dev/vulnerability/RUSTSEC-2026-0255) | unknown | sized-chunks 0.6.5 (crates.io) | none listed | Panic-safety unsoundness in \`Chunk\`, \`RingBuffer\`, and \`InlineArray\` (use-after-free / double-free) | | [RUSTSEC-2025-0081](https://osv.dev/vulnerability/RUSTSEC-2025-0081) | unknown | unic-char-property 0.9.0 (crates.io) | none listed | \`unic-char-property\` is unmaintained | | [RUSTSEC-2025-0075](https://osv.dev/vulnerability/RUSTSEC-2025-0075) | unknown | unic-char-range 0.9.0 (crates.io) | none listed | \`unic-char-range\` is unmaintained | | [RUSTSEC-2025-0080](https://osv.dev/vulnerability/RUSTSEC-2025-0080) | unknown | unic-common 0.9.0 (crates.io) | none listed | \`unic-common\` is unmaintained | | [RUSTSEC-2025-0090](https://osv.dev/vulnerability/RUSTSEC-2025-0090) | unknown | unic-emoji-char 0.9.0 (crates.io) | none listed | \`unic-emoji-char\` is unmaintained | | [RUSTSEC-2025-0083](https://osv.dev/vulnerability/RUSTSEC-2025-0083) | unknown | unic-ucd-bidi 0.9.0 (crates.io) | none listed | \`unic-ucd-bidi\` is unmaintained | | [RUSTSEC-2025-0094](https://osv.dev/vulnerability/RUSTSEC-2025-0094) | unknown | unic-ucd-category 0.9.0 (crates.io) | none listed | \`unic-ucd-category\` is unmaintained | | [RUSTSEC-2025-0098](https://osv.dev/vulnerability/RUSTSEC-2025-0098) | unknown | unic-ucd-version 0.9.0 (crates.io) | none listed | \`unic-ucd-version\` is unmaintained | | [RUSTSEC-2024-0449](https://osv.dev/vulnerability/RUSTSEC-2024-0449) | unknown | unsafe-libyaml 0.2.11 (crates.io) | none listed | unsafe-libyaml is unmaintained | | [RUSTSEC-2024-0320](https://osv.dev/vulnerability/RUSTSEC-2024-0320) | unknown | yaml-rust 0.4.5 (crates.io) | none listed | yaml-rust is unmaintained. | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/kcl-lib@0.13.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/kcl-lib/0.13.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/kcl-lib/0.13.2