# SBOM for openexr 3.5.3 > Python bindings for the OpenEXR image file format The Python package openexr 3.5.3 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/openexr@3.5.3` - PyPI: https://pypi.org/project/openexr/3.5.3/ - Requires Python: \>=3.11 - Bug Tracker: - Homepage: - Source: ## SBOMs ### openexr-3.5.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b047a91-f59d-52a8-9492-48187758b0e1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bc113b9b-28c7-5924-b412-37c81934445d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/da134c79-cd1d-5c28-a141-c70bd75baeaf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6806a9e8-c878-5abd-abd9-79a71f176deb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/19b4a55e-4cd5-57a8-9a33-e8c1cc99dd18/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e9f7f11-6a83-5a11-bb68-46ad1a405a74/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f67ca739-b521-50a9-9bd8-476cdd5b9150/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72f435c8-89d7-5f5e-a03c-a92e9b75f20f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1f030d66-c09b-5184-8ca8-e0f37fc5a45a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openexr-3.5.3-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, AcademySoftwareFoundation/openexr, workflow python\_release.yml). - [openexr-3.5.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/845e37d9-d798-5b39-b209-d5047775eaa1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/openexr@3.5.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/openexr/3.5.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/openexr/3.5.3