# SBOM for lazynet 0.8.3 > Lazy-evaluated, asynchronous HTTP requests powered by Rust The Python package lazynet 0.8.3 ships 35 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/lazynet@0.8.3` - PyPI: https://pypi.org/project/lazynet/0.8.3/ - License: MIT - Requires Python: \>=3.10 - Changelog: - Homepage: - Issues: - Repository: ## SBOMs ### lazynet-0.8.3-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/b8670dab-6343-5393-b1b9-336c2d4c5f81/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp310-cp310-macosx\_11\_0\_arm64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/cadbaf7a-6233-5631-91e1-0045ee09e989/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/d3a7d620-9260-57fb-a76c-1ebab8650051/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/3f5c6c83-c85d-582c-860f-497fde0b0c86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/e81ba3ba-469b-5eef-9b81-47048f93e122/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/f85aa39e-72c9-5e3c-852a-7f50d7b5780a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp310-cp310-win\_amd64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/85c71bdb-8971-5357-81f2-c6006b32b137/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/2fe9ed08-72f8-5a21-88a1-a292dea044b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-macosx\_11\_0\_arm64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/7c6f5e89-9130-5d12-a27f-7bb706fd81c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/dc3854b0-3469-5f58-951a-ce061b6f3dd9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/79c14546-aae4-5270-87dd-8785cd246067/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/baa0f52e-d717-5e1b-86c6-64873680ef22/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/dfbd0098-aa4c-5453-9e43-a4aac16df6d9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp311-cp311-win\_amd64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/6ce1d221-9122-5091-b7b5-a89763a9b937/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/ab6d07f2-3335-5976-b81a-1269f699ec4d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-macosx\_11\_0\_arm64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/2f5caf7b-b86f-526e-a487-d23992d80362/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/b55caae8-f809-55ba-9248-557e0b214637/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/73088a1b-f9b4-5dca-8ff0-e3755c966d96/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/44faf800-39c0-5a2e-a020-fd50ce709dab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/afcac884-b4ef-5912-84a0-cc51c6a8ef93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp312-cp312-win\_amd64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/173e413b-4a12-5161-91a4-73a681257116/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/984b3591-9414-5f51-b554-18caf366baf6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-macosx\_11\_0\_arm64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/b0d36069-0b94-556b-9688-6cdeb330a891/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/86836e4e-f9b4-5591-87b2-6e1dd807fcf4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/5141509d-1413-5d63-b2ed-f803e3671923/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/b8e098dd-20ae-5ae8-b356-eaa53106ebb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/213bf364-e05c-526b-b8aa-8df13dd65a2b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp313-cp313-win\_amd64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/9536b479-8981-52af-a8bd-0eb620a2c244/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/c2fb88a7-f153-51d6-b618-5277ca1afd15/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-macosx\_11\_0\_arm64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/1c2cef17-3297-5713-80ce-2079f164d167/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/a4334f4b-0712-5285-8496-9d575f39721b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/c93d950e-df7d-5c52-99c1-bc53fc1f5c85/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/bdb7abdf-09ed-54ec-a1d5-ebda75a16c5a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/6a97d65a-dd2b-5417-8528-e0fdc4dfb7d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### lazynet-0.8.3-cp314-cp314-win\_amd64.whl - [lazynet-0.8.3.dist-info/sboms/lazynet.cyclonedx.json](https://pypi.sbomify.com/artifact/a9041a93-74df-56a4-8d83-b27e7aca7714/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-93599](https://insights.sbomify.com/CVE-2026-93599/) | high (7.5) | rustls-webpki 0.101.7 (crates.io) | 0.103.13 | Reachable panic in certificate revocation list parsing | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.21.12 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets | | [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. | | [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange | | [CVE-2026-93600](https://insights.sbomify.com/CVE-2026-93600/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints for URI names were incorrectly accepted | | [CVE-2026-93601](https://insights.sbomify.com/CVE-2026-93601/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints were accepted for certificates asserting a wildcard name | | [RUSTSEC-2026-0258](https://osv.dev/vulnerability/RUSTSEC-2026-0258) | unknown | h2 0.3.27 (crates.io) | 0.4.16 | h2 unbounded empty DATA frames | | [RUSTSEC-2025-0134](https://osv.dev/vulnerability/RUSTSEC-2025-0134) | unknown | rustls-pemfile 1.0.4 (crates.io) | none listed | rustls-pemfile is unmaintained | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.101.7 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.49.0 (crates.io) | 1.51.6 | \`AsyncFd::new\` and related constructors violate I/O safety | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-roots 0.25.4 (crates.io) | 0.26.11 | Bundled root certificates allow trust in distrusted emSign intermediates | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/lazynet@0.8.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/lazynet/0.8.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/lazynet/0.8.3