# SBOM for onnx 1.23.2 > Open Neural Network Exchange The Python package onnx 1.23.2 ships 23 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/onnx@1.23.2` - PyPI: https://pypi.org/project/onnx/1.23.2/ - Requires Python: \>=3.10 - Homepage: - Repository: ## SBOMs ### onnx-1.23.2-cp310-cp310-macosx\_13\_0\_universal2.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/252a3124-c8b4-5209-9d62-5c29d29688b0/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp310-cp310-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/3370002b-8502-52d0-997b-0364ab204375/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/ab6a7646-87fe-5cab-b309-4403fe3707c2/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp310-cp310-win32.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/d0d5b2da-46db-5d38-af4e-f71b0760d91c/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/8ed1fd0c-e766-5584-8df0-2a6ffcf89f6d/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp311-cp311-macosx\_13\_0\_universal2.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/a9171b38-730c-52e9-aef6-ff82bcf7ea0e/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/4442fcaa-af37-5e52-8953-618e9781657b/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/2396b9af-3b39-556c-a5d2-2a5afdf7f895/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp311-cp311-win32.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/70aceb79-ceb3-506e-8335-3ab1293bdf1e/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/5db567ce-6e5c-5ec6-afb2-34928c41d745/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp311-cp311-win\_arm64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/c167ed02-5e01-53d9-a27c-3d7bede273b6/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-macosx\_13\_0\_universal2.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/83da01e4-d302-5a07-b268-80cdda709753/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/a0f170bc-36ff-5192-95f7-44483ef9ac5c/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/b4651218-9504-5ce4-bf79-1d2821a6e5aa/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-pyemscripten\_2026\_0\_wasm32.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/a5b862a4-c728-5a9f-9443-72d78329b135/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-win32.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/575bd8cb-b124-5cf5-be05-5c797fd95d80/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/7671021d-ca3d-5227-be96-49e83de931b3/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp312-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/0629b5e1-ddfd-5794-8e2d-09ba0ce408a5/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp314-cp314t-macosx\_13\_0\_universal2.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/3e8b3ccc-26d9-597a-a061-32cda20d6f9e/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp314-cp314t-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/3a2c5fe6-d4dc-5645-8660-32465f0d626e/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp314-cp314t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/1698bdcf-8233-51a7-8855-8ee5518fc2ef/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/24115c16-2502-5e65-9543-c4b72dcda40d/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### onnx-1.23.2-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, onnx/onnx, workflow create\_release.yml). - [onnx-1.23.2.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/569ccf8b-948b-5f5a-ab7a-bb93b65aed87/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/onnx@1.23.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/onnx/1.23.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/onnx/1.23.2