SBOM for kohakuvault 1.1.0

SQLite-backed KV store (Rust+PyO3) with vector search, auto-packing, and efficient array storage

CycloneDX PEP 740 attested 10 known vulnerabilities

Package information

Author
KohakuVault Contributors
License
Apache-2.0
Requires Python
>=3.10
PyPI
kohakuvault 1.1.0

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl

Attested
Publisher: GitHub Source: KohakuBlueleaf/KohakuVault Workflow: release.yml Environment: pypi
Valid
kohakuvault.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl

Attested
Publisher: GitHub Source: KohakuBlueleaf/KohakuVault Workflow: release.yml Environment: pypi
Valid
kohakuvault.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0176
Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
High 8.7 pyo3 0.25.1
crates.io
0.29.0
CVE-2026-119375
`libsqlite3-sys` via C SQLite CVE-2026-119375
Medium 6.8 libsqlite3-sys 0.28.0
crates.io
0.39.0
CVE-2026-25727
Denial of Service via Stack Exhaustion
Medium 6.8 time 0.3.44
crates.io
0.3.47
RUSTSEC-2026-0177
Missing `Sync` bound on `PyCFunction::new_closure` closures
Medium 6.3 pyo3 0.25.1
crates.io
0.29.0
CVE-2026-25541
Integer overflow in `BytesMut::reserve`
Medium 5.5 bytes 1.10.1
crates.io
1.11.1
RUSTSEC-2026-0190
Unsoundness in `Error::downcast_mut()`
Unknown anyhow 1.0.100
crates.io
1.0.103
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Unknown crossbeam-epoch 0.9.18
crates.io
0.9.20
RUSTSEC-2024-0436
paste - no longer maintained
Unknown paste 1.0.15
crates.io
—
RUSTSEC-2026-0441
`pin-utils` is unmaintained
Unknown pin-utils 0.1.0
crates.io
—
RUSTSEC-2026-0386
`AsyncFd::new` and related constructors violate I/O safety
Unknown tokio 1.48.0
crates.io
1.51.6

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]