# SBOM for opendal 0.47.12 > Apache OpenDAL™ Python Binding The Python package opendal 0.47.12 ships 27 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/opendal@0.47.12` - PyPI: https://pypi.org/project/opendal/0.47.12/ - Requires Python: \>=3.10 - Documentation: - Homepage: - Repository: ## SBOMs ### opendal-0.47.12-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/31fc81a0-7acb-572d-b7e0-f1a5757d6637/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-macosx\_11\_0\_arm64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/79baa2e0-3e62-5d31-84a6-6124df23fbd2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/7bc895b6-0f8b-523d-a7a1-af8c432ed04d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/5e8487d9-8011-5dde-815f-d80bd6058c6b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-manylinux\_2\_28\_aarch64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e25534c7-8d34-5431-a072-3b9faf93d74f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-musllinux\_1\_1\_aarch64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/a7e083d7-c740-593d-9560-ec7fffaf6676/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-musllinux\_1\_1\_armv7l.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/7519b074-93c5-5a4c-9013-ccad823e1429/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-musllinux\_1\_1\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/b92065b4-ff95-5a88-b2d4-e67c63a3d032/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp310-cp310-win\_amd64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ce16c484-6d32-5e39-8c08-4af4180b9c3d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### opendal-0.47.12-cp311-abi3-macosx\_10\_12\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8e754132-aac7-5c11-8483-095160d270dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-macosx\_11\_0\_arm64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/5e499090-7ecd-5e4b-a165-150a126e446b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/afdd6050-0ddd-594f-ae89-2c107ae50d88/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/4b7b9b05-8b08-5acf-8c93-0eb52330ecb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-manylinux\_2\_28\_aarch64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/854b9ebd-1afc-56d8-b181-38dc28e1e941/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-musllinux\_1\_1\_aarch64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/84578dd2-4cce-5062-879c-46cf6a9cf21f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-musllinux\_1\_1\_armv7l.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/4fbc848e-bc4a-56aa-909b-fe82227eb3ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-musllinux\_1\_1\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9652987e-7be3-5255-b690-ffcd931aa3d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp311-abi3-win\_amd64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/4efb2487-f297-5664-9761-2408c23985f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-macosx\_10\_12\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/bb9f8956-3e05-55eb-8b56-42ef926f83df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-macosx\_11\_0\_arm64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f1641453-f2d6-5f55-8b3d-44030cd9d491/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/b5fa5ed0-36c0-5c28-a8ed-badf41f9d369/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c5fe8c57-809b-5bec-960a-c8819c41044a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-manylinux\_2\_28\_aarch64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/90f93204-730f-5a61-8cd0-0d9114cd53be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-musllinux\_1\_1\_aarch64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/93d17194-73ae-5c96-9dd4-159c7f5352cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-musllinux\_1\_1\_armv7l.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/2d8d090f-111f-5f1f-a084-618a7b93ee9f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-musllinux\_1\_1\_x86\_64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/24b5a9b2-61b0-5ea4-80cf-7fc42b95bfd3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### opendal-0.47.12-cp314-cp314t-win\_amd64.whl - [opendal-0.47.12.dist-info/sboms/opendal-python.cyclonedx.json](https://pypi.sbomify.com/artifact/18d58981-c5e9-503d-ac85-8e1cbaa85487/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-119375](https://insights.sbomify.com/CVE-2026-119375/) | medium (6.8) | libsqlite3-sys 0.30.1 (crates.io) | 0.39.0 | \`libsqlite3-sys\` via C SQLite CVE-2026-119375 | | [CVE-2023-49092](https://insights.sbomify.com/CVE-2023-49092/) | medium (5.9) | rsa 0.9.10 (crates.io) | 0.10.0 | Marvin Attack: potential key recovery through timing sidechannels | | [RUSTSEC-2026-0385](https://osv.dev/vulnerability/RUSTSEC-2026-0385) | unknown | ctutils 0.4.3 (crates.io) | 0.4.4 | Non-constant-time mask generation and \`u128\` comparisons | | [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained | | [RUSTSEC-2024-0384](https://osv.dev/vulnerability/RUSTSEC-2024-0384) | unknown | instant 0.1.13 (crates.io) | none listed | \`instant\` is unmaintained | | [RUSTSEC-2026-0186](https://osv.dev/vulnerability/RUSTSEC-2026-0186) | unknown | memmap2 0.5.10 (crates.io) | 0.9.11 | Unchecked pointer offset in crate \`memmap2\` | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.103.15 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-root-certs 1.0.9 (crates.io) | 1.0.10 | Bundled root certificates allow trust in distrusted emSign intermediates | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-roots 1.0.9 (crates.io) | 1.0.10 | Bundled root certificates allow trust in distrusted emSign intermediates | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/opendal@0.47.12 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/opendal/0.47.12.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/opendal/0.47.12