sbomify PyPI TEA Start free

SBOM for nono-py 0.16.0

Python bindings for nono capability-based sandboxing

CycloneDX PEP 740 attested 15 known vulnerabilities
License
Apache-2.0
Requires Python
>=3.10
PyPI
nono-py 0.16.0
Changelog
https://github.com/nolabs-ai/nono-py/releases
Documentation
https://docs.nono.sh
Homepage
https://github.com/nolabs-ai/nono-py
Issues
https://github.com/nolabs-ai/nono-py/issues
Repository
https://github.com/nolabs-ai/nono-py

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

nono_py-0.16.0-cp310-cp310-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp310-cp310-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp311-cp311-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp311-cp311-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp312-cp312-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp312-cp312-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp313-cp313-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp313-cp313-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp314-cp314-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp314-cp314-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 12 known vulnerabilities
Download

nono_py-0.16.0-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

nono_py-0.16.0-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nolabs-ai/nono-py Workflow: auto-release.yml Environment: pypi
nono-py.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 15 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0340
Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
 High 7.5 quinn-proto 0.11.17
crates.io
 0.11.18
RUSTSEC-2026-0343
Outgoing datagram buffer accounting can panic the sender in quinn-proto
 High 7.5 quinn-proto 0.11.17
crates.io
 0.11.18
CVE-2026-123613
TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
 Medium 5.3 rustls 0.23.43
crates.io
 0.23.45
CVE-2026-123609
`Debug` impls for client session values expose TLS secrets
 Medium 4.0 rustls 0.23.43
crates.io
 0.23.46
CVE-2026-123610
Brotli certificate decompression can allocate up to 1 GiB before authentication
 Low 3.7 rustls 0.23.43
crates.io
 0.23.46
CVE-2026-123611
Unauthenticated ServerHello can downgrade later connections to classical key exchange
 Low 3.7 rustls 0.23.43
crates.io
 0.23.46
RUSTSEC-2026-0385
Non-constant-time mask generation and `u128` comparisons
 Unknown ctutils 0.4.2
crates.io
 0.4.4
RUSTSEC-2026-0441
`pin-utils` is unmaintained
 Unknown pin-utils 0.1.0
crates.io
 —
RUSTSEC-2026-0338
Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
 Unknown quinn-proto 0.11.17
crates.io
 0.11.18
CVE-2026-111943
Certificate verification may accept distrusted intermediates
 Unknown rustls-webpki 0.103.15
crates.io
 0.103.16
RUSTSEC-2026-0386
`AsyncFd::new` and related constructors violate I/O safety
 Unknown tokio 1.53.1
crates.io
 1.53.3
CVE-2026-111943
Bundled root certificates allow trust in distrusted emSign intermediates
 Unknown webpki-roots 1.0.9
crates.io
 1.0.10
RUSTSEC-2026-0371
`zbus_names` is unmaintained
 Unknown zbus_names 3.0.0
crates.io · 10 of 20 wheels
 —
RUSTSEC-2026-0370
`zvariant` is unmaintained
 Unknown zvariant 4.2.0
crates.io · 10 of 20 wheels
 —
RUSTSEC-2026-0372
`zvariant_derive` is unmaintained
 Unknown zvariant_derive 4.2.0
crates.io · 10 of 20 wheels
 —

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]