# SBOM for odin-voice 2.0.1

> Python bindings for the 4Players ODIN Voice SDK

The Python package odin-voice 2.0.1 ships 46 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/odin-voice@2.0.1`
- PyPI: https://pypi.org/project/odin-voice/2.0.1/
- License: MIT
- Requires Python: \>=3.10
- Documentation: <https://docs.4players.io>
- Homepage: <https://odin.4players.io>
- Repository: <https://github.com/4Players/odin-sdk>

## SBOMs

### odin\_voice-2.0.1-cp310-cp310-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/a242ee24-c4a7-5bf3-b9b5-0b4b538d4e50/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-macosx\_10\_12\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/38504f5a-14f7-519f-89cd-c8f3e96b6265/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-macosx\_11\_0\_arm64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/efc8fd0a-fac5-517e-9cb6-3f20e16f0440/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/8d6f152b-d1d6-5e24-8852-f200f92b5480/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/2b165406-8c09-53b2-a230-c3c05224571c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/478ada32-c173-5cf0-9e5d-1ec8d3fd0e39/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/0f3e8e53-145c-53ed-b1bd-ea46866fc1e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities
- [odin\_voice-2.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/281ff628-d5d4-58c7-82ab-4cd7b30be4d1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### odin\_voice-2.0.1-cp310-cp310-win\_amd64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/dcf152df-e10b-57bf-aca6-08d00b36ec38/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/f441829a-3a60-5ad9-b6c7-0a996dc082d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/24ed500d-6a84-5788-b13b-26930f9f516d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-macosx\_11\_0\_arm64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/b9f686c4-4fe4-534e-9cc4-464dc82125a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/9e5268b7-6e19-5909-bc25-29eb0f8f3465/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/4b493036-04a5-5d57-9ded-a9327e57c352/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/1ad3a7a0-f64a-5f24-9707-6e4da34b8176/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/f90f5467-16bf-533a-8a03-ff4ee2c2e08b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities
- [odin\_voice-2.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9109dc81-de69-55b3-9c6d-73d3d8fde270/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### odin\_voice-2.0.1-cp311-cp311-win\_amd64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/89a53cb9-28cc-581a-9e3d-e158e5b8c452/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/b4f621a4-86da-554c-9e9b-44366ae97f25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/0de7f948-38c0-5536-990d-0ee0274ee063/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-macosx\_11\_0\_arm64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/2d94708e-46b8-54a2-8b5a-880e722b2d7b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/240eea3f-9327-5c50-8d1b-99e121dc8783/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/004475fa-2569-5b9a-a599-002ce4704273/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/86596cb2-c81d-5e6e-ace5-78124efb0a6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/178d2d17-fede-50e5-92d6-815858ea3b53/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities
- [odin\_voice-2.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2acc611b-6bd3-58a2-9689-0cb7db05ed92/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### odin\_voice-2.0.1-cp312-cp312-win\_amd64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/f756c0d2-50b6-51c5-8663-b44d7458ac7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/7cfb807f-7458-5bf2-b276-6a1ccf5e7546/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/83eede18-2afb-5470-ac93-def2c960796d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-macosx\_11\_0\_arm64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/2eb40cf6-3a83-5a8d-8528-8d11052bc72c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/48a42d70-05c8-5a85-9418-4cdc7c75348c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/0bacc426-2ce2-5555-b72f-39f83ee93961/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/c82c9651-19ab-5c0d-beb4-813c93fcea9e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/96be4773-6387-5b1f-8359-221d8a9fa8f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities
- [odin\_voice-2.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/30302f18-4b68-5b86-89b6-365949a0fa62/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### odin\_voice-2.0.1-cp313-cp313-win\_amd64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/5f543ab8-fd65-5b3e-a566-a9406bb4684a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/cfafa327-5f21-5af5-baa3-9e1ca1d5313e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/8146908f-fe92-5c80-8742-e9688ea76baf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-macosx\_11\_0\_arm64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/913a620e-e2a1-5767-8be1-a58bc94a689a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/3f597f1e-ec61-55de-9301-733339591417/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/ad69c92b-a40c-5530-89e0-6f34e91f8d11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/4b7728a7-d3fd-5c70-ac3d-13d4ebaccf0c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/159c02a5-69fb-5c7d-b857-7cd0763e9d5d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities
- [odin\_voice-2.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/30f5cf06-a44b-574e-bf95-92a8d56a3bc2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314-win\_amd64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/fbcc088c-62e4-556c-b169-e2206be40dcc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

### odin\_voice-2.0.1-cp314-cp314t-win\_amd64.whl

- [odin\_voice-2.0.1.dist-info/sboms/akip.cyclonedx.json](https://pypi.sbomify.com/artifact/68a7f3fc-b3ee-520e-a9a5-da3f82f5c376/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 19 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0340](https://osv.dev/vulnerability/RUSTSEC-2026-0340) | high (7.5) | quinn-proto 0.11.17 (crates.io) | 0.11.18 | Peer minimum ACK delay can panic quinn-proto when ACK\_FREQUENCY transmission is enabled |
| [RUSTSEC-2026-0343](https://osv.dev/vulnerability/RUSTSEC-2026-0343) | high (7.5) | quinn-proto 0.11.17 (crates.io) | 0.11.18 | Outgoing datagram buffer accounting can panic the sender in quinn-proto |
| [CVE-2026-123613](https://insights.sbomify.com/CVE-2026-123613/) | medium (5.3) | rustls 0.23.44 (crates.io) | 0.23.45 | TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries |
| [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.23.44 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets |
| [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.23.44 (crates.io) | 0.23.46 | Brotli certificate decompression can allocate up to 1 GiB before authentication |
| [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.23.44 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange |
| [CVE-2026-123612](https://insights.sbomify.com/CVE-2026-123612/) | low (2.3) | rustls 0.23.44 (crates.io) | 0.23.46 | Buffered application data sent to outer server after ECH rejection |
| [RUSTSEC-2026-0385](https://osv.dev/vulnerability/RUSTSEC-2026-0385) | unknown | ctutils 0.4.2 (crates.io) | 0.4.4 | Non-constant-time mask generation and \`u128\` comparisons |
| [RUSTSEC-2026-0338](https://osv.dev/vulnerability/RUSTSEC-2026-0338) | unknown | quinn-proto 0.11.17 (crates.io) | 0.11.18 | Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads |
| [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.103.15 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates |
| [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety |
| [RUSTSEC-2025-0081](https://osv.dev/vulnerability/RUSTSEC-2025-0081) | unknown | unic-char-property 0.9.0 (crates.io) | none listed | \`unic-char-property\` is unmaintained |
| [RUSTSEC-2025-0075](https://osv.dev/vulnerability/RUSTSEC-2025-0075) | unknown | unic-char-range 0.9.0 (crates.io) | none listed | \`unic-char-range\` is unmaintained |
| [RUSTSEC-2025-0080](https://osv.dev/vulnerability/RUSTSEC-2025-0080) | unknown | unic-common 0.9.0 (crates.io) | none listed | \`unic-common\` is unmaintained |
| [RUSTSEC-2025-0090](https://osv.dev/vulnerability/RUSTSEC-2025-0090) | unknown | unic-emoji-char 0.9.0 (crates.io) | none listed | \`unic-emoji-char\` is unmaintained |
| [RUSTSEC-2025-0100](https://osv.dev/vulnerability/RUSTSEC-2025-0100) | unknown | unic-ucd-ident 0.9.0 (crates.io) | none listed | \`unic-ucd-ident\` is unmaintained |
| [RUSTSEC-2025-0098](https://osv.dev/vulnerability/RUSTSEC-2025-0098) | unknown | unic-ucd-version 0.9.0 (crates.io) | none listed | \`unic-ucd-version\` is unmaintained |
| [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-root-certs 1.0.9 (crates.io) | 1.0.10 | Bundled root certificates allow trust in distrusted emSign intermediates |
| [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-roots 1.0.9 (crates.io) | 1.0.10 | Bundled root certificates allow trust in distrusted emSign intermediates |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/odin-voice@2.0.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/odin-voice/2.0.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/odin-voice/2.0.1