Skip to content

SBOM for ormdantic 2.0.1

Rust-backed async ORM for Python applications that already use Pydantic models as their data boundary.

CycloneDX 25 known vulnerabilities

Requires Python: >=3.10
PyPI: ormdantic 2.0.1
Documentation: https://ormdantic.yezz.me/
Funding: https://github.com/sponsors/yezz123
Homepage: https://github.com/yezz123/ormdantic

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp310-cp310-win_amd64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp311-cp311-win_amd64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp312-cp312-win_amd64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp313-cp313-win_amd64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

ormdantic-2.0.1-cp314-cp314-win_amd64.whl

ormdantic-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 25 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0179 Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service	High 8.7	postgres-protocol 0.6.11 crates.io	0.6.12
CVE-2026-93599 Reachable panic in certificate revocation list parsing	High 7.5	rustls-webpki 0.101.7 crates.io	0.103.13
RUSTSEC-2026-0180 Panic decoding a malformed `hstore` value allows denial of service	Medium 6.9	postgres-protocol 0.6.11 crates.io	0.6.12
RUSTSEC-2026-0178 Panic on a `DataRow` with fewer fields than columns allows denial of service	Medium 6.9	tokio-postgres 0.7.17 crates.io	0.7.18
CVE-2026-119375 `libsqlite3-sys` via C SQLite CVE-2026-119375	Medium 6.8	libsqlite3-sys 0.30.1 crates.io	0.39.0
GHSA-qwgh-2vcv-g2f7 block_buffer: panic corrupts inline buffer position	Medium 6.3	block-buffer 0.12.0 crates.io	—
CVE-2026-123613 TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries	Medium 5.3	rustls 0.23.40 crates.io	0.23.45
CVE-2026-123609 `Debug` impls for client session values expose TLS secrets	Medium 4.0	rustls 0.21.12 crates.io	0.23.46
CVE-2026-123609 `Debug` impls for client session values expose TLS secrets	Medium 4.0	rustls 0.23.40 crates.io	0.23.46
CVE-2026-123610 Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.	Low 3.7	rustls 0.21.12 crates.io	0.23.46
CVE-2026-123610 Brotli certificate decompression can allocate up to 1 GiB before authentication	Low 3.7	rustls 0.23.40 crates.io	0.23.46
CVE-2026-123611 Unauthenticated ServerHello can downgrade later connections to classical key exchange	Low 3.7	rustls 0.21.12 crates.io	0.23.46
CVE-2026-123611 Unauthenticated ServerHello can downgrade later connections to classical key exchange	Low 3.7	rustls 0.23.40 crates.io	0.23.46
CVE-2026-93600 Name constraints for URI names were incorrectly accepted	Low 2.2	rustls-webpki 0.101.7 crates.io	0.103.12
CVE-2026-93601 Name constraints were accepted for certificates asserting a wildcard name	Low 2.2	rustls-webpki 0.101.7 crates.io	0.103.12
RUSTSEC-2026-0190 Unsoundness in `Error::downcast_mut()`	Unknown	anyhow 1.0.102 crates.io	1.0.103
RUSTSEC-2026-0385 Non-constant-time mask generation and `u128` comparisons	Unknown	ctutils 0.4.2 crates.io	0.4.4
RUSTSEC-2026-0418 libz-sys build script leaks environment variables in the build directory	Unknown	libz-sys 1.1.29 crates.io	1.1.31
RUSTSEC-2026-0253 Potential use-after-free due to lack of panic safety in `LruCache::pop()`	Unknown	lru 0.16.4 crates.io	0.18.2
RUSTSEC-2025-0134 rustls-pemfile is unmaintained	Unknown	rustls-pemfile 1.0.4 crates.io	—
RUSTSEC-2025-0134 rustls-pemfile is unmaintained	Unknown	rustls-pemfile 2.2.0 crates.io	—
CVE-2026-111943 Certificate verification may accept distrusted intermediates	Unknown	rustls-webpki 0.101.7 crates.io	0.103.16
CVE-2026-111943 Certificate verification may accept distrusted intermediates	Unknown	rustls-webpki 0.103.13 crates.io	0.103.16
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.52.3 crates.io	1.53.3
CVE-2026-111943 Bundled root certificates allow trust in distrusted emSign intermediates	Unknown	webpki-roots 1.0.7 crates.io	1.0.10

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]