sbomify PyPI TEA Start free

SBOM for keyringrs 0.4.1

Python bindings for the Rust keyring crate

CycloneDX 15 known vulnerabilities
Author
The keyringrs developers
License
Apache-2.0 OR MIT
Requires Python
>=3.9
PyPI
keyringrs 0.4.1
Homepage
https://github.com/aiidateam/keyringrs
Repository
https://github.com/aiidateam/keyringrs

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

keyringrs-0.4.1-cp39-abi3-macosx_10_12_x86_64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-macosx_11_0_arm64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-manylinux_2_5_i686.manylinux1_i686.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-musllinux_1_2_aarch64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-musllinux_1_2_armv7l.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-musllinux_1_2_i686.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-musllinux_1_2_x86_64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-win32.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

keyringrs-0.4.1-cp39-abi3-win_amd64.whl

keyringrs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability Severity Component Fixed in
CVE-2026-42327
rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
 High 8.7 openssl 0.10.71
crates.io
 0.10.79
CVE-2026-41898
rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer
 High 8.3 openssl 0.10.71
crates.io
 0.10.78
CVE-2026-41681
rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check
 High 8.1 openssl 0.10.71
crates.io
 0.10.78
CVE-2026-41676
rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1
 High 7.2 openssl 0.10.71
crates.io
 0.10.78
CVE-2026-41678
rust-openssl has incorrect bounds assertion in aes key wrap
 High 7.2 openssl 0.10.71
crates.io
 0.10.78
RUSTSEC-2025-0022
Use-After-Free in `Md::fetch` and `Cipher::fetch`
 Medium 6.3 openssl 0.10.71
crates.io
 0.10.72
CVE-2026-44662
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding
 Medium 5.1 openssl 0.10.71
crates.io
 0.10.79
CVE-2026-45784
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers
 Medium 5.1 openssl 0.10.71
crates.io
 0.10.80
CVE-2026-41677
rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length
 Low 1.7 openssl 0.10.71
crates.io
 0.10.78
RUSTSEC-2026-0221
`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`
 Unknown event-listener 5.3.1
crates.io · 10 of 14 wheels
 5.4.2
RUSTSEC-2026-0441
`pin-utils` is unmaintained
 Unknown pin-utils 0.1.0
crates.io · 10 of 14 wheels
 —
RUSTSEC-2026-0097
Rand is unsound with a custom logger using `rand::rng()`
 Unknown rand 0.8.5
crates.io · 10 of 14 wheels
 0.8.6
RUSTSEC-2026-0371
`zbus_names` is unmaintained
 Unknown zbus_names 3.0.0
crates.io · 10 of 14 wheels
 —
RUSTSEC-2026-0370
`zvariant` is unmaintained
 Unknown zvariant 4.2.0
crates.io · 10 of 14 wheels
 —
RUSTSEC-2026-0372
`zvariant_derive` is unmaintained
 Unknown zvariant_derive 4.2.0
crates.io · 10 of 14 wheels
 —

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]