# SBOM for loro 1.17.1 > Python bindings for \[Loro\](https://loro.dev) The Python package loro 1.17.1 ships 98 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/loro@1.17.1` - PyPI: https://pypi.org/project/loro/1.17.1/ - Requires Python: \>=3.8 - Homepage: - Repository: ## SBOMs ### loro-1.17.1-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/08f3af10-4571-501f-991f-0b788518910e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/94e33641-3f94-54ca-ab0a-683541fddbdc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/3eedc611-610c-542c-8ceb-af48a3221b22/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8f1e95ae-0190-5c8e-b743-e66a60dcbefa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b1145a1e-13ec-57cb-b544-9efa4bc046b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/982c008d-8196-537f-b8de-504cfd00ea31/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/cf0dde18-2d2c-5efa-97d5-4900caa2d3cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c2bdcb45-d102-5b20-baef-1d670724e251/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8ca93f6a-c7f7-53ca-8b67-806e0ba9d31a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/bc461e5f-bcef-5b70-b480-cb75e9ff222f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/35406626-2aee-5e77-9ff5-c2c200371917/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/d94be14c-8daf-5671-ad7a-e8f3b2dd9351/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/12b52cce-c304-58da-b828-669fb332325e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp310-cp310-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/30f42168-3e3f-583b-9d56-35ee9e13855f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/df28aa50-3fa7-57b8-b651-2a727331187d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/ebefb3d5-d78e-5ef8-9fef-0e16ed382182/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/1c0a7a25-e851-55f1-993a-8dcb8892495a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/585ab64b-07a8-5556-8fc7-8315cb9b625e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/19660265-d30e-555b-bcc1-04df0ca980e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/13809451-21e2-57be-b441-c99f918af7f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/5429b692-7408-5ffa-9fbb-0b8d13c45c60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/aa1f4b2f-a436-5584-8e37-851d8842744b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/386dfc56-6bed-56a7-9cd8-b796251a05ec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/250abb0f-15f7-527f-8a6d-4c0d6e41b70f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/a961c7dd-e44d-5906-ab21-70669bbf1c1c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/88ff10bd-72df-51df-a23e-cc04daa7ea60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/206808c1-5a32-5fe0-b8ab-c7f43b3f74e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp311-cp311-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/7a4dc6b7-aa1a-5266-a612-201532ad20fb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/e48bb273-39b1-5ee4-afd6-4fc9d709a4c8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c33cb9f6-99ff-5c2c-ab7b-64c418c3326a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/4347a5b9-dbbe-579d-a745-c73d7cc3ebac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/3af044de-e4e2-593f-815d-770141920723/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/41893419-c9ae-58fd-96fb-14c1182c466b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/da3e8b66-151d-5ca7-b1b8-cbe9a07429f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/a29990ae-92dd-50b3-b2d0-4329871f91df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8beb0e2c-59e3-500a-99ce-62d1441c248b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/d9f29bb0-b2b6-5a19-a7c8-ddfb207c9961/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/6809b393-a596-5cd3-aa5d-c15078b2d403/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/cf180eda-325a-5406-abc8-b6351e61729c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/e19cea2c-afa6-526a-8fb5-e09befca6a1f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/1e219f38-98c1-5a4a-97a8-a23430e4e237/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp312-cp312-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/61aa1347-f90a-599c-91d4-06b4b5c28a25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/3a49d92a-3fe5-51e4-8d25-bf6431adfd3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/8bc1eb5e-326c-5c2b-90c2-98a9d46aa4e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/81b345f2-5ba1-5b67-b24f-762b36d1e689/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/64232f49-19f3-5b83-b219-f37b1ddb7624/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/6e446517-fa3e-5fc5-a36c-fd2b7ee14597/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/fd6ae27b-f4d3-5c3b-b837-168bf9cb4807/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/dfeb9a9d-0b96-5cbe-bf6b-cc56ec98bf6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/7c3e0e8f-1dd6-534a-ad57-50603b105756/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/0c2398b9-d26c-51c6-919d-ca9734ee4e6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/5b20e148-d4b5-56d6-8093-a90ce43a79e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/5d359ede-7e0a-5983-8f73-f7aff62e7401/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/4f39d7d3-b5af-5b2a-a75f-20e874ea52c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/9fce92b8-2abe-579d-903a-57cdf6f5589e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp313-cp313-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b3dbe662-6c8c-5fe7-9b35-960c45339510/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/db174e51-cada-5094-aa7e-51eb8364839f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/d9072c94-e676-5a9f-8e26-b253c0ca02d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/45c03f68-e79a-5c10-b0f8-4de5e63f1bc6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/a576f6a7-353d-5e25-9eac-ba5d7e41ba1e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b6922079-077a-5f04-9895-e1cd8b4765cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/62698c1b-9a35-5338-917b-7f3883534c98/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/e5515825-b0a7-5379-9208-8633cc595345/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b65c5df0-d6eb-5561-b383-9d9bf6c1507d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/2f1a6c11-f73f-508f-8579-2e1b77c30e3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/61871266-04e4-5fbc-bf94-38abfbec4fc1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/543a45b0-9943-5759-8fb5-a4d7fa8b070f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/80ae6c7a-10aa-5b0a-9d31-3236ce46dcc5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/7bd16737-a70b-5c63-92cc-b07d4a8f517d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp314-cp314-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/a8a0b964-1ae6-54cc-ae72-028a7a8a70a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/3937818d-7688-53cd-8c7d-dc6c761778f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/ca056982-1566-53fa-b595-2e17f4aacb76/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/46cdb6d1-18cf-543e-9a05-b41557efdcbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/21b3197d-400e-5007-8c96-75b93f0a9957/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c0b637e5-145c-5ed3-9495-35e93dd4adee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/889d32e0-1b37-5f7e-a4af-ad34a8873929/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/40e80190-f9d8-5722-b6c4-8f0162ad2537/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/60710316-c1e6-573e-b71b-328d35f16a2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/95b359c7-8894-510b-855d-ca3639d07c18/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c0ad18b9-4628-5f25-88b6-e806458669ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/1bba7775-a975-54ec-a30e-2d654480bd57/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b5273b8b-723c-5ed6-9742-8c453747adae/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/0a1a6cb2-3a30-5783-8d5b-bc2a01f68182/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp38-cp38-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/79d37484-91cc-5cdf-994c-26a71b3e2526/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-macosx\_10\_12\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/625f2b2b-82fc-5eed-94f4-936942b0e3e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-macosx\_11\_0\_arm64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/354420c7-5ccd-5158-829c-e4db3d61239b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/ea9e9f0f-980e-5e91-ad0c-3a9fb45686ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/9b329a75-411a-562e-8fd9-1b4a3e7a46a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c5ca4822-7030-58ba-ae81-f9d286fef393/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/10835192-a59d-527f-acb5-0ecfef0ae451/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/1329e253-1378-5043-8c99-d60b3b9ca887/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/e82851c0-42df-5b40-b43b-cc9dd8239a02/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-musllinux\_1\_2\_aarch64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/9bd69f2b-6d7d-5eae-adff-dc55e1b403c9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-musllinux\_1\_2\_armv7l.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/d186b54d-1bc9-596d-8233-3e1414925c3e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-musllinux\_1\_2\_i686.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/11789911-91aa-5f02-866d-6a4f0c029efc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/319fb6d4-cf61-5457-925f-5195e0eb3783/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-win32.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/dcd42c21-dfd6-56f2-87b2-8307bc28f717/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### loro-1.17.1-cp39-cp39-win\_amd64.whl - [loro-1.17.1.dist-info/sboms/loro\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/52cde190-b16c-5858-9d82-78f100f5757b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.26.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-32829](https://insights.sbomify.com/CVE-2026-32829/) | high (8.2) | lz4\_flex 0.11.3 (crates.io) | 0.11.6 | Decompressing invalid data can leak information from uninitialized memory or reused output buffer | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.26.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [CVE-2026-25541](https://insights.sbomify.com/CVE-2026-25541/) | medium (5.5) | bytes 1.9.0 (crates.io) | 1.11.1 | Integer overflow in \`BytesMut::reserve\` | | [GHSA-6g2r-675j-hx59](https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59) | low (2.3) | xxhash-rust 0.8.15 (crates.io) | 0.8.16 | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | | [RUSTSEC-2026-0247](https://osv.dev/vulnerability/RUSTSEC-2026-0247) | unknown | bitmaps 2.1.0 (crates.io) | none listed | bitmaps is unmaintained | | [RUSTSEC-2023-0126](https://osv.dev/vulnerability/RUSTSEC-2023-0126) | unknown | im 15.1.0 (crates.io) | none listed | Aliasing violation in \`OrdSet\` insertion | | [RUSTSEC-2026-0248](https://osv.dev/vulnerability/RUSTSEC-2026-0248) | unknown | im 15.1.0 (crates.io) | none listed | im is unmaintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0251](https://osv.dev/vulnerability/RUSTSEC-2026-0251) | unknown | sized-chunks 0.6.5 (crates.io) | none listed | sized-chunks is unmaintained | | [RUSTSEC-2026-0255](https://osv.dev/vulnerability/RUSTSEC-2026-0255) | unknown | sized-chunks 0.6.5 (crates.io) | none listed | Panic-safety unsoundness in \`Chunk\`, \`RingBuffer\`, and \`InlineArray\` (use-after-free / double-free) | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/loro@1.17.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/loro/1.17.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/loro/1.17.1