# SBOM for py-hpl-logger 0.2.7 > A high-performance, buffered, non-blocking logger for Python, implemented in Rust. The Python package py-hpl-logger 0.2.7 ships 47 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/py-hpl-logger@0.2.7` - PyPI: https://pypi.org/project/py-hpl-logger/0.2.7/ - License: MIT - Requires Python: \>=3.9 ## SBOMs ### py\_hpl\_logger-0.2.7-cp313-cp313t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/e57e50df-b299-5981-b26b-683b15b436dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp313-cp313t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/1d3e4538-080d-5743-a3d4-693773f6a902/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp313-cp313t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/41e1e345-33a1-544f-904b-4529fc6ba4de/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp313-cp313t-musllinux\_1\_2\_aarch64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/7a0b1fb2-f1e4-51c9-9f70-8698dc05554e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp313-cp313t-musllinux\_1\_2\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/0f1c1c58-1e58-55ef-8626-199a77427e9c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp313-cp313t-musllinux\_1\_2\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/86ea5acb-e85e-5383-96c5-7723a81a093d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/c0075651-013f-512c-bccd-6c04d94fbae5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/e574815c-0118-5f6d-83e4-6e49571d4ae8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/99ecb658-349f-5712-bda2-f70d054f5ce8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/6f5107f1-98df-5edd-9d3b-eb607ac24345/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/6083946f-0d30-52bc-8a0b-682d2f0996b4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/229bb399-b080-5b6d-8376-527225493df0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-musllinux\_1\_2\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/b3ed9c06-3b7c-5215-80d2-70c74730d7b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/56b3ebe3-dfdc-52fd-9b7a-c90d08dfa3b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/dfed74b7-5845-54fc-ac8f-9569bcec37e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/ccae7085-5139-5610-bb61-a9d381fd61cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/f211c491-7d5a-5dd6-93e6-839850cbc501/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/ae2e673b-f38b-58ed-8dd7-24204e81e6a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/5f35cb04-706c-56b2-95db-221ccb51e04d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-musllinux\_1\_2\_aarch64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/384d3da0-5355-5140-9c98-91c322e7f736/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-musllinux\_1\_2\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/c2501a1a-b707-5414-8522-56d0b5817e5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-musllinux\_1\_2\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/0b5694a2-f3af-5ba0-a82b-ef018c265e6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-musllinux\_1\_2\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/6aac4dd9-b2d8-5d21-b72d-d83655d6f53e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-cp39-abi3-win\_amd64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/defe94c2-dfb4-594c-b194-7783e2a2f349/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/cab4f3ea-7b89-5f09-b594-95a4e80363c7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/5aa0266a-8410-502f-8e41-1e68abed1b17/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/b0f60436-c60f-5a3b-b8ad-525e15f37a93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-musllinux\_1\_2\_aarch64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/870502de-0925-5692-a823-963433501184/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-musllinux\_1\_2\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/b6f80c3c-6980-5b64-9f09-4ce754b66643/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-musllinux\_1\_2\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/64036659-4f75-57d1-affb-3e70a02653f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp310-pypy310\_pp73-musllinux\_1\_2\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/78cdce99-f01d-5daa-baff-f02d310000b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/d665b228-64bf-5a8f-b6bb-bd95d93d24d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/f7618fc3-2f11-5cc1-9af9-b9f017a422e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/8031fbe2-5c59-5a00-abe9-221f3b803d8b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/2d2d4cda-5914-541c-a1e8-a822ff7174e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/d2016382-6cd5-5624-8786-5c6c60325f61/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/c63df8e2-0ce0-5937-8b48-c86b93cb473c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-musllinux\_1\_2\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/a83f4596-a7e4-5a7f-b470-13a88aa232e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/fc40ee91-2b39-5b0e-b26f-7770d0aca5cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/9aaee40d-958e-5971-b59d-6518502f5d33/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/7618a16f-582f-5254-80d0-bcc8c85af4f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/cc9f8cfe-dc4f-59ce-a8fe-7ff56e08f010/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/958e1ee2-0df1-5a55-8fd2-096256e40d0c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-musllinux\_1\_2\_aarch64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/a912c418-b219-5533-9544-af37dad9017c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-musllinux\_1\_2\_armv7l.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/9558fe3b-a9f6-56ef-b549-e852b4d416c7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-musllinux\_1\_2\_i686.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/57560750-7d6e-57aa-ba32-d7e6a22deaa6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ### py\_hpl\_logger-0.2.7-pp39-pypy39\_pp73-musllinux\_1\_2\_x86\_64.whl - [py\_hpl\_logger-0.2.7.dist-info/sboms/py\_hpl\_logger.cyclonedx.json](https://pypi.sbomify.com/artifact/2879228f-b22e-5b96-afbb-2b7f8de90156/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 16 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-93599](https://insights.sbomify.com/CVE-2026-93599/) | high (7.5) | rustls-webpki 0.101.7 (crates.io) | 0.103.13 | Reachable panic in certificate revocation list parsing | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [CVE-2026-25541](https://insights.sbomify.com/CVE-2026-25541/) | medium (5.5) | bytes 1.10.1 (crates.io) | 1.11.1 | Integer overflow in \`BytesMut::reserve\` | | [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.21.12 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets | | [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. | | [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.21.12 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange | | [CVE-2026-93600](https://insights.sbomify.com/CVE-2026-93600/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints for URI names were incorrectly accepted | | [CVE-2026-93601](https://insights.sbomify.com/CVE-2026-93601/) | low (2.2) | rustls-webpki 0.101.7 (crates.io) | 0.103.12 | Name constraints were accepted for certificates asserting a wildcard name | | [RUSTSEC-2021-0141](https://osv.dev/vulnerability/RUSTSEC-2021-0141) | unknown | dotenv 0.15.0 (crates.io) | none listed | dotenv is Unmaintained | | [RUSTSEC-2026-0258](https://osv.dev/vulnerability/RUSTSEC-2026-0258) | unknown | h2 0.3.27 (crates.io) | 0.4.16 | h2 unbounded empty DATA frames | | [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained | | [RUSTSEC-2025-0134](https://osv.dev/vulnerability/RUSTSEC-2025-0134) | unknown | rustls-pemfile 1.0.4 (crates.io) | none listed | rustls-pemfile is unmaintained | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.101.7 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.48.0 (crates.io) | 1.51.6 | \`AsyncFd::new\` and related constructors violate I/O safety | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-roots 0.25.4 (crates.io) | 0.26.11 | Bundled root certificates allow trust in distrusted emSign intermediates | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/py-hpl-logger@0.2.7 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/py-hpl-logger/0.2.7.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/py-hpl-logger/0.2.7