SBOM for mitmproxy-rs 0.12.15

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

mitmproxy_rs.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities

mitmproxy_rs.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

mitmproxy_rs.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

mitmproxy_rs.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability	Severity	Component	Fixed in
CVE-2026-123604 hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)	High 8.7	hickory-resolver 0.26.1 crates.io	0.26.2
CVE-2026-93657 hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures	High 7.5	hickory-resolver 0.26.1 crates.io	0.26.2
CVE-2026-123585 hickory-resolver follows irrelevant CNAME records	Medium 6.9	hickory-resolver 0.26.1 crates.io	0.26.2
RUSTSEC-2026-0221 `event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`	Unknown	event-listener 5.4.1 crates.io · 3 of 4 wheels	5.4.2
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.53.1 crates.io	1.53.3
RUSTSEC-2024-0449 unsafe-libyaml is unmaintained	Unknown	unsafe-libyaml 0.2.11 crates.io	—

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]