{"url":"https://pypi.sbomify.com/package/openentropy/0.12.3","markdown_url":"https://pypi.sbomify.com/package/openentropy/0.12.3.md","name":"openentropy","version":"0.12.3","purl":"pkg:pypi/openentropy@0.12.3","summary":"Your computer is a hardware noise observatory. Harvests entropy from 60+ hardware noise sources.","author":"Amenti Labs","project_urls":{"Documentation":"https://amenti-labs.github.io/openentropy/","Homepage":"https://github.com/amenti-labs/openentropy","Issues":"https://github.com/amenti-labs/openentropy/issues","Repository":"https://github.com/amenti-labs/openentropy"},"requires_python":">=3.10","license":null,"classifiers":["Development Status :: 4 - Beta","Intended Audience :: Developers","Intended Audience :: Science/Research","License :: OSI Approved :: MIT License","Operating System :: MacOS","Operating System :: POSIX :: Linux","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Rust","Topic :: Scientific/Engineering","Topic :: Security :: Cryptography","Typing :: Typed"],"wheels":[{"filename":"openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl","url":"https://files.pythonhosted.org/packages/a0/83/ed50826e1f4e03ee8629f4a3cd871ca46035e336b597bbeec1e8e43b94d1/openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl","sboms":[{"artifact_uuid":"25ac7889-856e-5e5f-9dbe-df79895c1e0f","path":"openentropy-0.12.3.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/25ac7889-856e-5e5f-9dbe-df79895c1e0f/download","vulnerability_count":1,"scan_error":null},{"artifact_uuid":"0f17215e-4ad3-5583-9a5b-5f535b060648","path":"openentropy-0.12.3.dist-info/sboms/openentropy-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0f17215e-4ad3-5583-9a5b-5f535b060648/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":2,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"CVE-2026-4878","aliases":["UBUNTU-CVE-2026-4878","USN-8193-1"],"summary":"libcap2 vulnerability","severity":"high","score":7.0,"package":"libcap2","version":"1:2.66-5ubuntu2.2","ecosystem":"Ubuntu","purl":"pkg:deb/ubuntu/libcap2@1:2.66-5ubuntu2.2","fixed":[],"url":"https://insights.sbomify.com/CVE-2026-4878/","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.9.2","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.9.2","fixed":["0.9.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["openentropy-0.12.3-cp312-cp312-manylinux_2_39_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":2,"total_sboms":2,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":1,"low":1,"unknown":5}}}