# SBOM for pdfitdown 4.2.0

> PdfItDown: Convert anything to PDF. Python bindings for the Rust library.

The Python package pdfitdown 4.2.0 ships 73 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pdfitdown@4.2.0`
- PyPI: https://pypi.org/project/pdfitdown/4.2.0/
- License: MIT
- Requires Python: \>=3.8

## SBOMs

### pdfitdown-4.2.0-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3e0a1c11-7fc0-571e-bc09-69e7c7fb71cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp310-cp310-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/506f94f3-606b-5b53-8d8c-21d5b1da6ee2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/cce6f687-6613-5ed5-a96d-c5a37f9f70a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/4ac7fd0f-e46c-5d8a-92f1-91a751b7b7b4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp310-cp310-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/572c85c4-888d-56d9-ab3b-8be038845c26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f1a8f451-a1f5-5d13-9131-d2535a2a02e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp310-cp310-win\_amd64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ac93a623-ac24-54ae-9c4d-0f2de1536d5b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e1569d3d-3464-5fb5-b366-686c6137a598/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-macosx\_11\_0\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c34a32b8-c346-57c6-b9ad-2a6507979426/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/dfee84f1-8331-553b-85b9-dcde596d5ec1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/144c30ee-0790-5f58-b2fb-dd3c4245da6b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c6142dc6-f875-5f8c-b962-01a81cbd3b88/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9f29bec3-bae3-585b-a8ee-c1be8ffc5e89/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/82d9d7d3-d0e0-5eed-91d5-0f7b83caa780/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/765590e8-dc85-5cd7-a8ff-4e427af183cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp311-cp311-win\_amd64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/680740a0-d49d-58a1-977f-6dfba7310a1c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/2100a790-be02-51a2-8adf-e89096170d0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-macosx\_11\_0\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/b7f3fce8-55fc-5c45-a307-0d22127f4e6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/2e2640af-f301-549e-9774-5f0bc853bdc2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8806fc2e-d801-5f52-8ebe-7bf4eff52f4c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/dd32b64e-b178-57a7-b2df-761a8bceac36/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9154fd3f-6cb2-5af4-85ff-018ac41b35a5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ecb19494-8958-5ba6-80da-be3163723ada/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ae024043-8671-5209-87c3-8c2b39fe7e99/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-win\_amd64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/fbf51a01-1e3f-581b-bf6d-e3274e1a77ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp312-cp312-win\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f6566aaa-5508-52b8-ac4d-d77e93817a27/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/aa559000-808c-5034-a2c3-dca18be58a92/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-macosx\_11\_0\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d5f58100-c500-5ece-a48a-6ca56280a222/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f4f4a7b3-867b-5a10-b49e-47170e1aa991/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/57b55ba7-40c4-504e-8d97-806131d9f3e6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/983eb325-951a-5601-9ee0-d56e425d36f2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/53d9d51b-d34c-5ec4-9aa4-feb7d95c24f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e9f6d8aa-774d-5d51-bac6-09308da7a089/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3505f602-ce55-59d2-b8c5-51064bb7ca33/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-win32.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ff8dbfb8-7bed-5b0b-8293-68edf821f1ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-win\_amd64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/afd84df8-19eb-5a19-97d0-c5e1afa9c82e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp313-cp313-win\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e5f7fb12-956b-5abf-9fca-ae20a096eecc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e10ae674-08e2-5356-9fba-7c6d64aa52c8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-macosx\_11\_0\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/38851979-b367-58df-a7e7-340f4013761b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9d9b4abe-5ce9-508e-81b4-122e71299760/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0449d39c-8b91-5d06-81ac-f987aea3427c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d76885f5-6158-53f3-acc5-0ad2f0acc14f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/54d2cd71-8acf-5562-ba48-26efbac7e3ed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f4927a10-b796-5ae0-a3f1-6644f626cc29/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/68502245-1ed4-507e-8045-fe8409babe92/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-win\_amd64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/aab55f63-d4eb-56fd-acb3-f687074844a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314-win\_arm64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/db4f2e80-ba55-5bc9-b6a1-744ec287481b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/725fe509-bce8-5cbf-bb6f-e2a74409c732/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/66d290d0-73e6-5471-87b7-4a5244c2500c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c58730b3-58af-5384-a431-09908022ce64/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e29261e2-8de1-532e-a04c-af8791233bc2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314t-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/2d811ba9-4f96-5350-951d-b3c0c019a803/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/66ec933f-8527-5b33-a0af-5d5082f904b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp315-cp315-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/699fdbc9-6177-5360-91a4-8330f2d4e334/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/87555478-620c-5422-ab78-32f227bfe5e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp315-cp315t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/eb9bf178-a303-5bc6-be66-438655c8e40f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/17e308a8-c21b-506e-b59b-7b40ae8e8eaa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c8ef860f-437c-5126-ac57-a60e299e2bda/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp38-cp38-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c139c531-4d86-53b4-ac35-5fd6c87b3109/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp38-cp38-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f1b1c120-26d6-5c3c-9dcf-b0cbbe5970f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp38-cp38-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3c811140-c852-5406-bc49-1c7868df48e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c3b0a3b3-de4b-52a7-bd5a-ea7cd1b02b7d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp39-cp39-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/502979ca-5f86-53de-8eb1-402e384a5eb2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/6744b749-76ce-527e-a3a8-d59a6577f0b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ac6b69f7-e105-5b78-99b0-5a0509df3e97/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp39-cp39-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/359d9289-5c6f-51f3-b478-63cb26999808/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0afa766c-4854-5f60-bdb4-f25b3cbc0533/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3261e78e-ab5c-58f3-b634-129d005ef56a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-pp311-pypy311\_pp73-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d6c0791a-d91a-5dc5-806f-3c6fd4ddaf35/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/a0186145-a789-5e8a-ab32-652d48a8a615/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/22d0dddd-0ac1-52c5-90a2-30125426148c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/438443f0-ac00-58ea-8e48-22068a77cad8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

### pdfitdown-4.2.0-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl

- [pdfitdown-4.2.0.dist-info/sboms/pdfitdown-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c29b051e-3ab4-5096-8ddd-34ccfaae86ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 53 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-115905](https://insights.sbomify.com/CVE-2026-115905/) | critical (10.0) | zip 0.6.6 (crates.io) | 9.0.5 | zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE |
| [CVE-2026-115905](https://insights.sbomify.com/CVE-2026-115905/) | critical (10.0) | zip 2.4.2 (crates.io) | 9.0.5 | zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE |
| [RUSTSEC-2026-0369](https://osv.dev/vulnerability/RUSTSEC-2026-0369) | critical (9.1) | zip 0.6.6 (crates.io) | 9.0.0 | ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target |
| [RUSTSEC-2026-0369](https://osv.dev/vulnerability/RUSTSEC-2026-0369) | critical (9.1) | zip 2.4.2 (crates.io) | 9.0.0 | ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target |
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0187](https://osv.dev/vulnerability/RUSTSEC-2026-0187) | high (7.5) | lopdf 0.39.0 (crates.io) | 0.42.0 | Stack overflow in lopdf via deeply nested PDF objects |
| [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.36.2 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names |
| [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.37.5 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names |
| [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.38.4 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names |
| [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.39.4 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names |
| [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.36.2 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service |
| [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.37.5 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service |
| [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.38.4 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service |
| [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.39.4 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service |
| [CVE-2026-115909](https://insights.sbomify.com/CVE-2026-115909/) | high (7.5) | zip 0.6.6 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` aborts the process on a symlink entry with a large declared size |
| [CVE-2026-115909](https://insights.sbomify.com/CVE-2026-115909/) | high (7.5) | zip 2.4.2 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` aborts the process on a symlink entry with a large declared size |
| [RUSTSEC-2026-0367](https://osv.dev/vulnerability/RUSTSEC-2026-0367) | high (7.3) | zip 0.6.6 (crates.io) | 9.0.0 | Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation |
| [RUSTSEC-2026-0367](https://osv.dev/vulnerability/RUSTSEC-2026-0367) | high (7.3) | zip 2.4.2 (crates.io) | 9.0.0 | Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation |
| [CVE-2026-115906](https://insights.sbomify.com/CVE-2026-115906/) | medium (6.5) | zip 0.6.6 (crates.io) | 9.0.0 | zip: AES Entry HMAC Authentication Bypass on Premature EOF |
| [CVE-2026-115906](https://insights.sbomify.com/CVE-2026-115906/) | medium (6.5) | zip 2.4.2 (crates.io) | 9.0.0 | zip: AES Entry HMAC Authentication Bypass on Premature EOF |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2026-0444](https://osv.dev/vulnerability/RUSTSEC-2026-0444) | unknown | astral-tl 0.7.11 (crates.io) | none listed | \`astral-tl\` is unmaintained |
| [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 1.3.3 (crates.io) | none listed | Bincode is unmaintained |
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |
| [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained |
| [RUSTSEC-2023-0019](https://osv.dev/vulnerability/RUSTSEC-2023-0019) | unknown | kuchiki 0.8.1 (crates.io) | none listed | \`kuchiki\` is unmaintained |
| [RUSTSEC-2026-0253](https://osv.dev/vulnerability/RUSTSEC-2026-0253) | unknown | lru 0.16.4 (crates.io) | 0.18.2 | Potential use-after-free due to lack of panic safety in \`LruCache::pop()\` |
| [RUSTSEC-2026-0253](https://osv.dev/vulnerability/RUSTSEC-2026-0253) | unknown | lru 0.18.0 (crates.io) | 0.18.2 | Potential use-after-free due to lack of panic safety in \`LruCache::pop()\` |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2024-0370](https://osv.dev/vulnerability/RUSTSEC-2024-0370) | unknown | proc-macro-error 1.0.4 (crates.io) | none listed | proc-macro-error is unmaintained |
| [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.7.3 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` |
| [RUSTSEC-2026-0206](https://osv.dev/vulnerability/RUSTSEC-2026-0206) | unknown | rustybuzz 0.18.0 (crates.io) | none listed | \`rustybuzz\` is unmaintained |
| [RUSTSEC-2026-0206](https://osv.dev/vulnerability/RUSTSEC-2026-0206) | unknown | rustybuzz 0.20.1 (crates.io) | none listed | \`rustybuzz\` is unmaintained |
| [RUSTSEC-2026-0192](https://osv.dev/vulnerability/RUSTSEC-2026-0192) | unknown | ttf-parser 0.24.1 (crates.io) | none listed | \`ttf-parser\` is unmaintained |
| [RUSTSEC-2026-0192](https://osv.dev/vulnerability/RUSTSEC-2026-0192) | unknown | ttf-parser 0.25.1 (crates.io) | none listed | \`ttf-parser\` is unmaintained |
| [RUSTSEC-2024-0449](https://osv.dev/vulnerability/RUSTSEC-2024-0449) | unknown | unsafe-libyaml 0.2.11 (crates.io) | none listed | unsafe-libyaml is unmaintained |
| [RUSTSEC-2024-0320](https://osv.dev/vulnerability/RUSTSEC-2024-0320) | unknown | yaml-rust 0.4.5 (crates.io) | none listed | yaml-rust is unmaintained. |
| [RUSTSEC-2026-0368](https://osv.dev/vulnerability/RUSTSEC-2026-0368) | unknown | zip 0.6.6 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` creates symbolic links whose attacker-controlled targets are outside the destination directory |
| [RUSTSEC-2026-0368](https://osv.dev/vulnerability/RUSTSEC-2026-0368) | unknown | zip 2.4.2 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` creates symbolic links whose attacker-controlled targets are outside the destination directory |
| [RUSTSEC-2026-0391](https://osv.dev/vulnerability/RUSTSEC-2026-0391) | unknown | zstd 0.13.3 (crates.io) | 0.13.4 | Data from an abandoned stream leaks into the next stream on a reused context |
| [RUSTSEC-2026-0395](https://osv.dev/vulnerability/RUSTSEC-2026-0395) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free with \`CParameter::StableInBuffer\` |
| [RUSTSEC-2026-0396](https://osv.dev/vulnerability/RUSTSEC-2026-0396) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`Seekable\` reads a NULL or out-of-bounds seek table |
| [RUSTSEC-2026-0397](https://osv.dev/vulnerability/RUSTSEC-2026-0397) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`OutBuffer::around\_pos\` exposes uninitialized memory |
| [RUSTSEC-2026-0398](https://osv.dev/vulnerability/RUSTSEC-2026-0398) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`Seekable::decompress\` sets a \`Vec\` length beyond its capacity for offsets past the end |
| [RUSTSEC-2026-0399](https://osv.dev/vulnerability/RUSTSEC-2026-0399) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free through \`init\_using\_cdict\` and \`init\_using\_ddict\` |
| [RUSTSEC-2026-0400](https://osv.dev/vulnerability/RUSTSEC-2026-0400) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free of a dictionary after a one-shot call on a context with an open stream |
| [RUSTSEC-2026-0401](https://osv.dev/vulnerability/RUSTSEC-2026-0401) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Out-of-bounds read in \`train\_from\_buffer\` when sample sizes overflow |
| [RUSTSEC-2026-0402](https://osv.dev/vulnerability/RUSTSEC-2026-0402) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Heap buffer overflow in \`CCtx::try\_clone\` on a multithreaded context |
| [RUSTSEC-2026-0403](https://osv.dev/vulnerability/RUSTSEC-2026-0403) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Uninitialized memory exposed when streaming decompression of a legacy frame fails |
| [RUSTSEC-2026-0404](https://osv.dev/vulnerability/RUSTSEC-2026-0404) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Double free in \`DCtx::try\_clone\` |
| [RUSTSEC-2026-0405](https://osv.dev/vulnerability/RUSTSEC-2026-0405) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Out-of-bounds read with an out-of-range \`InBuffer::pos\` |
| [RUSTSEC-2026-0406](https://osv.dev/vulnerability/RUSTSEC-2026-0406) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free when changing a multithreaded context with an unfinished frame |
| [RUSTSEC-2026-0410](https://osv.dev/vulnerability/RUSTSEC-2026-0410) | unknown | zstd-sys 2.0.16+zstd.1.5.7 (crates.io) | 2.1.2 | WebAssembly allocator shim corrupts memory on allocation failure |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pdfitdown@4.2.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pdfitdown/4.2.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pdfitdown/4.2.0