# SBOM for pngquant-py 0.1.2 The Python package pngquant-py 0.1.2 ships 47 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/pngquant-py@0.1.2` - PyPI: https://pypi.org/project/pngquant-py/0.1.2/ - Requires Python: \>=3.12 - Homepage: - Repository: ## SBOMs ### pngquant\_py-0.1.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/aade46cd-12a4-5857-90f3-9cc7fd25fe07/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/81cca4cb-e156-59d6-8eaa-39e0f7d7856b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/488ae11e-7b9b-5c17-89e8-47013abc67ae/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/89a602b9-916b-5e97-8a22-10294e3ac5be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/9608e275-8eb4-574e-9bef-28565a444b9a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/95748dde-ff02-5e93-8685-68ad0041b91a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ba39587d-3cbe-5843-a4d2-5c967b7574c8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e804673c-cf78-501e-909f-60eff4834738/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-musllinux\_1\_2\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ad1b5af8-8e71-5941-9b31-0edcfb156594/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-musllinux\_1\_2\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3253a734-c430-5b39-a7af-3f8b70e3a728/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c0161881-4617-5d21-b73b-7408346725c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp312-cp312-win\_amd64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/89f20d7a-d7b9-5474-83a7-d014ee177304/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4fc838ae-343c-5127-a5af-8addb2bf5b3d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/eba430ce-bb35-567d-869b-4174efebf042/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/67905835-fca0-5fe3-987b-38d29d359c7d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/912f6afe-42df-5d96-bae9-31cb431c448a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/29409192-d50d-5228-9101-86296fa8fa62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ab804684-8856-5060-b179-4c4cfce17ceb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a80201b6-1494-52cc-bb4f-40d6b7ddeb8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0c23e9ec-2616-50c8-a6e3-f0c0fdc165cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-musllinux\_1\_2\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f9358891-ecc1-5dea-ae40-145c5ca677b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-musllinux\_1\_2\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6776b41b-c523-508b-bb7a-29e71a25131e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/573bca10-9364-51b1-86d4-6e75b64e2c66/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp313-cp313-win\_amd64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/07211ec2-4e2e-50c5-a14e-09d4a0252d16/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/148c8b71-6a6c-5134-a8ec-d0e3b27e0815/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4ca839e6-49ca-51a3-aeee-c6b1f91ded04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/63e7306d-10a8-5c9d-ad41-f1ef8e39cead/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8ee98608-58e8-553a-8410-de75883e8bde/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/91632ccb-81f9-5e7b-b13e-0fb782c134d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/1d995925-1c5c-5055-b503-bc3c0893848b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/12e92f1d-2416-5dbe-ae02-f387da426531/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b9ac4300-b607-5990-87c0-a7014292aded/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-musllinux\_1\_2\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b7a75f3c-3a5b-5a1c-914d-12d2b69e3876/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-musllinux\_1\_2\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a13a2b3a-b449-5293-ad9e-a28a1dc96540/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6a3e01d3-91c4-527e-9387-e452e4ef98d9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-win32.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6cda5ed6-8d3b-52e0-ae1e-13f68ad5a827/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314-win\_amd64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/7c6256f7-c7f8-5a74-9844-3912cdfafeb9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a6a27502-1139-55e7-bf7c-87b2f6735dbc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/1d7b33cc-0ab1-5d7d-8b6d-b2d1c8c3ca5f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6524b414-a864-5172-9f87-6eb83e031d3d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a37f748b-36b5-5fed-9ed0-bfc31ae271cf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/cc62a9af-6cd7-5996-88d4-909f33e18044/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ce0eda25-8490-5c59-bd9f-9916fb4d0fa8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/63673cbb-8fd6-5fcb-b479-1658da54c4a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f7a533a0-d073-5b29-ac55-24770477d7e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-musllinux\_1\_2\_i686.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e15009bd-ae91-508d-b2ac-bb30fd8ef309/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### pngquant\_py-0.1.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [pngquant\_py-0.1.2.dist-info/sboms/pngquant-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b943d59e-3596-57f8-90ae-e5318ec3f5dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pngquant-py@0.1.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pngquant-py/0.1.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pngquant-py/0.1.2