# SBOM for keygen-py 0.2.1 > Unofficial Keygen SDK for Python. Integrate license activation and offline licensing. Wrapper around keygen-rs rust crate The Python package keygen-py 0.2.1 ships 58 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/keygen-py@0.2.1` - PyPI: https://pypi.org/project/keygen-py/0.2.1/ - Requires Python: \>=3.11 ## SBOMs ### keygen\_py-0.2.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8e8e0274-6f65-5e47-8cc0-bbe2df81313e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/7c499031-4484-5158-bbb7-d55f8bd0f172/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f09fbaea-d542-5eff-9d60-3dd0d1439a91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-manylinux\_2\_28\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8ada8515-1039-55b3-8156-d38c268b27a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/095ff63e-b1b2-5dfb-a5d6-561852a266ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/94b77377-de01-55d8-a661-ba930eab5a5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-musllinux\_1\_2\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c8d4099e-f5d2-5a47-8fa3-00f3ae72948d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-musllinux\_1\_2\_i686.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f0283a24-e070-55b9-a8a7-762aa2de8b77/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2de4aab7-f115-5158-8542-241c34fdf6ae/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-win32.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/dfffbb84-cfb3-5ec7-819c-46f1bc7ba83b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp311-cp311-win\_amd64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/877e6c8e-b5cd-5ee8-b99b-27a143e23b21/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4fceb9cf-3778-5b9d-8478-5acc3e666bbe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/928a38fd-4af9-559b-bf7b-9d3ffc0fb682/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/77a4c0da-0fd5-5342-8176-29c2934b7cbf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-manylinux\_2\_28\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/85e45447-732e-590a-a42e-1652d61ece0c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/16e70233-ce53-560c-9d56-c0af0cdd5ad4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f765b836-ff4b-5362-ade2-548889c2777e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-musllinux\_1\_2\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b1ec4e3c-a5ef-58e6-98a6-16dc818e2313/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-musllinux\_1\_2\_i686.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/914e4d8a-178c-53b3-8181-0d682b203d7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/bc4efcdf-17b9-5d8e-8bfd-b300b5c22469/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-win32.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/dd8f927d-83cb-5c53-a2d5-9c7b09d41826/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp312-cp312-win\_amd64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/292e178e-2639-5ab5-ae46-ee84a0ecf5e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/cdf06ef1-2318-5ea2-a6d1-72b9d66df94a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/42ec500a-d278-55ac-902f-2a773558239e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2d88bc11-d0a9-5d97-aa00-fd63179e2208/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-manylinux\_2\_28\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/83c5b230-53b9-5f55-a60e-68d6155de537/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3e82196e-3b2d-5734-8974-711f26eea858/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/20c27f2a-daac-59eb-921d-87c6728d5c58/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-musllinux\_1\_2\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0038ef92-71eb-530c-b0f0-90d5ee1d2a6d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-musllinux\_1\_2\_i686.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e4d77da3-8716-5861-913a-485c74265ac0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/7fd74bea-d634-569f-acfd-e2e0fb95cfb8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-win32.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0ba70a74-a7e1-56d8-a715-c9cd21250586/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp313-cp313-win\_amd64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8e666961-4c3f-5c4b-992c-29357bf9ded6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e04ada4a-d088-51fb-99c1-a5e0b76b4c95/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-macosx\_11\_0\_arm64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8b3793e5-e07c-51e8-bf11-80d4bc612d20/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/392a0b2b-aa49-58dc-b092-1838f5dd625d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-manylinux\_2\_28\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4df5f471-3ca1-5df4-a5d7-4ac7909cc476/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/028a90cd-4e77-5fd9-b9d6-06ef731568a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d45407c0-36e7-5b30-9179-6c384cfdf959/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-musllinux\_1\_2\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/7b82387f-ace4-5f43-93ea-88c95b351ac8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-musllinux\_1\_2\_i686.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ab35fa62-eb0a-59ff-928c-aca66506ce2d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/833a6db5-dd33-5b32-a825-a8a815412bfc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-win32.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6ae7b036-6c05-5ffa-b2f5-380bfb8e10b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314-win\_amd64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/9785bd44-e44d-58cc-b20b-8bab8c1abd4e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-manylinux\_2\_28\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/00a8289c-35c9-5d86-85ed-afc83e357f13/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-manylinux\_2\_28\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0aba09c1-d6fb-5304-a2c3-dff2f595866c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8833a600-8d63-5abc-ac81-9e37fccdcc6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2debbb75-11dd-57d8-86dc-34044d90764a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0dd97ec4-a9cd-5ff3-849d-61bb9c358367/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-musllinux\_1\_2\_i686.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4b8c16a9-cf84-59d7-bb5e-493896a21fb8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d5ec4a82-4518-5ece-9a56-5be4d9ccb633/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-manylinux\_2\_28\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f1acb3ca-2f4c-5d23-8b5a-a3782476a7fb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-manylinux\_2\_28\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/be2104ad-f262-54f6-a72c-aace4fc01bf3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-manylinux\_2\_28\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6eb8e286-fdea-5b48-bfba-b189f8e0a58f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a89be0f2-2015-5c09-ab8b-c22931a9c8ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-musllinux\_1\_2\_armv7l.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/50b868e9-dbed-5c0d-841b-6eb6e09442d3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b20ca25c-4151-54c2-b146-baf6e15b5acb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ### keygen\_py-0.2.1-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl - [keygen\_py-0.2.1.dist-info/sboms/keygen-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8aa05abf-752a-5d10-a12c-cb74e7407ab5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 33 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2024-0402](https://osv.dev/vulnerability/RUSTSEC-2024-0402) | high (8.9) | hashbrown 0.15.0 (crates.io) | 0.15.1 | Borsh serialization of HashMap is non-canonical | | [CVE-2026-42327](https://insights.sbomify.com/CVE-2026-42327/) | high (8.7) | openssl 0.10.68 (crates.io) | 0.10.79 | rust-openssl has undefined behavior in X509Ref::ocsp\_responders for certificates with non-UTF-8 OCSP URLs | | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.26.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-41898](https://insights.sbomify.com/CVE-2026-41898/) | high (8.3) | openssl 0.10.68 (crates.io) | 0.10.78 | rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer | | [CVE-2026-41681](https://insights.sbomify.com/CVE-2026-41681/) | high (8.1) | openssl 0.10.68 (crates.io) | 0.10.78 | rust-openssl: rustMdCtxRef::digest\_final() writes past caller buffer with no length check | | [CVE-2026-93599](https://insights.sbomify.com/CVE-2026-93599/) | high (7.5) | rustls-webpki 0.101.7 (crates.io) | 0.103.13 | Reachable panic in certificate revocation list parsing | | [CVE-2026-41676](https://insights.sbomify.com/CVE-2026-41676/) | high (7.2) | openssl 0.10.68 (crates.io) | 0.10.78 | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 | | [CVE-2026-41678](https://insights.sbomify.com/CVE-2026-41678/) | high (7.2) | openssl 0.10.68 (crates.io) | 0.10.78 | rust-openssl has incorrect bounds assertion in aes key wrap | | [CVE-2024-12224](https://insights.sbomify.com/CVE-2024-12224/) | medium (6.3) | idna 0.5.0 (crates.io) | 1.0.0 | \`idna\` accepts Punycode labels that do not produce any non-ASCII when decoded | | [CVE-2025-24898](https://insights.sbomify.com/CVE-2025-24898/) | medium (6.3) | openssl 0.10.68 (crates.io) | 0.10.70 | ssl::select\_next\_proto use after free | | [RUSTSEC-2025-0022](https://osv.dev/vulnerability/RUSTSEC-2025-0022) | medium (6.3) | openssl 0.10.68 (crates.io) | 0.10.72 | Use-After-Free in \`Md::fetch\` and \`Cipher::fetch\` | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.26.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [CVE-2022-50237](https://insights.sbomify.com/CVE-2022-50237/) | medium (5.9) | ed25519-dalek 1.0.1 (crates.io) | 2.0.0 | Double Public Key Signing Function Oracle Attack on \`ed25519-dalek\` | | [CVE-2026-25541](https://insights.sbomify.com/CVE-2026-25541/) | medium (5.5) | bytes 1.8.0 (crates.io) | 1.11.1 | Integer overflow in \`BytesMut::reserve\` | | [CVE-2026-44662](https://insights.sbomify.com/CVE-2026-44662/) | medium (5.1) | openssl 0.10.68 (crates.io) | 0.10.79 | rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding | | [CVE-2026-45784](https://insights.sbomify.com/CVE-2026-45784/) | medium (5.1) | openssl 0.10.68 (crates.io) | 0.10.80 | rust-openssl: Potential out-of-bounds write in \`CipherCtxRef::cipher\_update\_inplace\` for AES-KW-PAD ciphers | | [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.21.12 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets | | [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. | | [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange | | [CVE-2024-58262](https://insights.sbomify.com/CVE-2024-58262/) | low (2.9) | curve25519-dalek 3.2.1 (crates.io) | 4.1.3 | Timing variability in \`curve25519-dalek\`'s \`Scalar29::sub\`/\`Scalar52::sub\` | | [RUSTSEC-2025-0023](https://osv.dev/vulnerability/RUSTSEC-2025-0023) | low (2.7) | tokio 1.41.0 (crates.io) | 1.42.1, 1.43.1 | Broadcast channel calls clone in parallel, but does not require \`Sync\` | | [CVE-2026-93600](https://insights.sbomify.com/CVE-2026-93600/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints for URI names were incorrectly accepted | | [CVE-2026-93601](https://insights.sbomify.com/CVE-2026-93601/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints were accepted for certificates asserting a wildcard name | | [CVE-2026-41677](https://insights.sbomify.com/CVE-2026-41677/) | low (1.7) | openssl 0.10.68 (crates.io) | 0.10.78 | rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length | | [RUSTSEC-2021-0141](https://osv.dev/vulnerability/RUSTSEC-2021-0141) | unknown | dotenv 0.15.0 (crates.io) | none listed | dotenv is Unmaintained | | [RUSTSEC-2026-0258](https://osv.dev/vulnerability/RUSTSEC-2026-0258) | unknown | h2 0.3.26 (crates.io) | 0.4.16 | h2 unbounded empty DATA frames | | [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.7.3 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2025-0134](https://osv.dev/vulnerability/RUSTSEC-2025-0134) | unknown | rustls-pemfile 1.0.4 (crates.io) | none listed | rustls-pemfile is unmaintained | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.101.7 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.41.0 (crates.io) | 1.51.6 | \`AsyncFd::new\` and related constructors violate I/O safety | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-roots 0.25.4 (crates.io) | 0.26.11 | Bundled root certificates allow trust in distrusted emSign intermediates | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/keygen-py@0.2.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/keygen-py/0.2.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/keygen-py/0.2.1