sbomify PyPI TEA Start free

SBOM for mwpf 0.2.18

Minimum-Weight Parity Factor (MWPF) decoder for QEC

CycloneDX PEP 740 attested 26 known vulnerabilities
Requires Python
>=3.9
PyPI
mwpf 0.2.18
Homepage
https://hyper-mwpf.com

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

mwpf-0.2.18-cp314-cp314t-macosx_10_15_universal2.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp314-cp314t-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp314-cp314t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp314-cp314t-win_amd64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp314-cp314t-win_arm64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp315-abi3.abi3t-macosx_10_15_universal2.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp315-abi3.abi3t-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp315-abi3.abi3t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp315-abi3.abi3t-win_amd64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp315-abi3.abi3t-win_arm64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp39-abi3-macosx_10_12_universal2.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp39-abi3-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp39-abi3-win_amd64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

mwpf-0.2.18-cp39-abi3-win_arm64.whl

Attested
Publisher: GitHub Source: yuewuo/mwpf Workflow: wheels.yml Environment: pypi
mwpf.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 26 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability Severity Component Fixed in
CVE-2026-25727
Denial of Service via Stack Exhaustion
 Medium 6.8 time 0.3.36
crates.io
 0.3.47
CVE-2026-73051
actix-http has HTTP/1.1 CL.TE Request Smuggling
Medium 6.3 actix-http 3.9.0
crates.io
 3.12.1
CVE-2026-25541
Integer overflow in `BytesMut::reserve`
 Medium 5.5 bytes 1.8.0
crates.io
 1.11.1
RUSTSEC-2025-0023
Broadcast channel calls clone in parallel, but does not require `Sync`
 Low 2.7 tokio 1.41.0
crates.io
 1.42.1, 1.43.1
RUSTSEC-2026-0446
Request smuggling through malformed chunked request trailers
 Unknown actix-http 3.9.0
crates.io
 3.20.2
RUSTSEC-2026-0448
Unbounded decompression can exhaust memory and CPU resources
 Unknown actix-http 3.9.0
crates.io
 3.20.1
RUSTSEC-2026-0455
Large-window Brotli bodies bypass decompression memory limits
 Unknown actix-http 3.9.0
crates.io
 3.20.3
RUSTSEC-2026-0447
Compressed request bodies can exhaust memory before extractor limits apply
 Unknown actix-web 4.9.0
crates.io
 4.18.2
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
 Unknown crossbeam-epoch 0.9.18
crates.io
 0.9.20
RUSTSEC-2024-0388
`derivative` is unmaintained; consider using an alternative
 Unknown derivative 2.2.0
crates.io
 —
RUSTSEC-2026-0258
h2 unbounded empty DATA frames
 Unknown h2 0.3.26
crates.io
 0.4.16
RUSTSEC-2024-0436
paste - no longer maintained
 Unknown paste 1.0.15
crates.io
 —
RUSTSEC-2026-0441
`pin-utils` is unmaintained
 Unknown pin-utils 0.1.0
crates.io
 —
RUSTSEC-2026-0097
Rand is unsound with a custom logger using `rand::rng()`
 Unknown rand 0.8.5
crates.io
 0.8.6
RUSTSEC-2026-0386
`AsyncFd::new` and related constructors violate I/O safety
 Unknown tokio 1.41.0
crates.io
 1.51.6
RUSTSEC-2026-0391
Data from an abandoned stream leaks into the next stream on a reused context
 Unknown zstd 0.13.2
crates.io
 0.13.4
RUSTSEC-2026-0395
Use-after-free with `CParameter::StableInBuffer`
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0397
`OutBuffer::around_pos` exposes uninitialized memory
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0399
Use-after-free through `init_using_cdict` and `init_using_ddict`
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0400
Use-after-free of a dictionary after a one-shot call on a context with an open stream
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0401
Out-of-bounds read in `train_from_buffer` when sample sizes overflow
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0402
Heap buffer overflow in `CCtx::try_clone` on a multithreaded context
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0403
Uninitialized memory exposed when streaming decompression of a legacy frame fails
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0404
Double free in `DCtx::try_clone`
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0406
Use-after-free when changing a multithreaded context with an unfinished frame
 Unknown zstd-safe 7.2.1
crates.io
 7.4.0
RUSTSEC-2026-0410
WebAssembly allocator shim corrupts memory on allocation failure
 Unknown zstd-sys 2.0.13+zstd.1.5.6
crates.io
 2.1.2

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]