sbomify PyPI TEA Start free

SBOM for openexr 3.4.7

Python bindings for the OpenEXR image file format

CycloneDX PEP 740 attested 4 known vulnerabilities
Requires Python
>=3.7
PyPI
openexr 3.4.7
Bug Tracker
https://github.com/AcademySoftwareFoundation/OpenEXR/issues
Homepage
https://openexr.com
Source
https://github.com/AcademySoftwareFoundation/OpenEXR

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

openexr-3.4.7-cp310-cp310-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp310-cp310-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp311-cp311-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp311-cp311-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp312-cp312-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp312-cp312-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp313-cp313-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp313-cp313-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp38-cp38-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp38-cp38-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp39-cp39-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

openexr-3.4.7-cp39-cp39-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: AcademySoftwareFoundation/openexr Workflow: python-wheels-publish.yml Environment: pypi
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
CVE-2026-34543
OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)
 High 8.7 openexr 3.4.7
PyPI
 3.4.8
CVE-2026-34588
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write
 High 8.6 openexr 3.4.7
PyPI
 3.4.9
CVE-2026-34544
OpenEXR: integer overflow to OOB write in uncompress_b44_impl()
 High 8.4 openexr 3.4.7
PyPI
 3.4.8
CVE-2026-34589
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write
 High 8.4 openexr 3.4.7
PyPI
 3.4.9

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]