# SBOM for polodb-python 0.2.1

> Modern Python bindings for the embedded PoloDB document database

The Python package polodb-python 0.2.1 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/polodb-python@0.2.1`
- PyPI: https://pypi.org/project/polodb-python/0.2.1/
- Requires Python: \>=3.10
- Documentation: <https://github.com/PoloDB/polodb-python#readme>
- Homepage: <https://www.polodb.org>
- Issues: <https://github.com/PoloDB/polodb-python/issues>
- Repository: <https://github.com/PoloDB/polodb-python>

## SBOMs

### polodb\_python-0.2.1-cp310-abi3-macosx\_10\_13\_x86\_64.whl

- [polodb\_python-0.2.1.dist-info/sboms/polodb-python.cyclonedx.json](https://pypi.sbomify.com/artifact/98da31ea-c818-5699-aa95-54ff3bef0abd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### polodb\_python-0.2.1-cp310-abi3-macosx\_11\_0\_arm64.whl

- [polodb\_python-0.2.1.dist-info/sboms/polodb-python.cyclonedx.json](https://pypi.sbomify.com/artifact/a57947e5-cb54-5b9e-bb80-73a344c06bf5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### polodb\_python-0.2.1-cp310-abi3-manylinux\_2\_28\_aarch64.whl

- [polodb\_python-0.2.1.dist-info/sboms/polodb-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f1a7c374-f63d-5ac0-a392-3150cd19bd20/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### polodb\_python-0.2.1-cp310-abi3-manylinux\_2\_28\_x86\_64.whl

- [polodb\_python-0.2.1.dist-info/sboms/polodb-python.cyclonedx.json](https://pypi.sbomify.com/artifact/86f2e852-594e-574c-b484-495bb6e2ecf4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### polodb\_python-0.2.1-cp310-abi3-win\_amd64.whl

- [polodb\_python-0.2.1.dist-info/sboms/polodb-python.cyclonedx.json](https://pypi.sbomify.com/artifact/38579b23-c4bb-5063-a4f3-83dd46c24339/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0418](https://osv.dev/vulnerability/RUSTSEC-2026-0418) | unknown | libz-sys 1.1.20 (crates.io) | 1.1.31 | libz-sys build script leaks environment variables in the build directory |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/polodb-python@0.2.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/polodb-python/0.2.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/polodb-python/0.2.1