SBOM for py-nickel 1.18.0

CycloneDX PEP 740 attested 10 known vulnerabilities

Package information

Requires Python
>=3.11
PyPI
py-nickel 1.18.0
Homepage
https://nickel-lang.org

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

py_nickel-1.18.0-cp311-cp311-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp311-cp311-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp311-cp311-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp311-cp311-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp311-cp311-win_amd64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp312-cp312-win_amd64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

py_nickel-1.18.0-cp313-cp313-win_amd64.whl

Attested
Publisher: GitHub Source: nickel-lang/nickel Workflow: release-python.yml
Valid
py-nickel.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0194
Quadratic run time when checking a start tag for duplicate attribute names
High 7.5 quick-xml 0.38.3
crates.io
0.41.0
RUSTSEC-2026-0195
Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
High 7.5 quick-xml 0.38.3
crates.io
0.41.0
RUSTSEC-2025-0141
Bincode is unmaintained
Unknown bincode 1.3.3
crates.io
—
RUSTSEC-2025-0167
`Bitmap::try_from(&[u8])` can create invalid values
Unknown bitmaps 3.2.1
crates.io
—
RUSTSEC-2026-0247
bitmaps is unmaintained
Unknown bitmaps 3.2.1
crates.io
—
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Unknown crossbeam-epoch 0.9.18
crates.io
0.9.20
RUSTSEC-2026-0292
Double free / use-after-free in `Chunk` and `InlineArray` removal methods when an element's `Drop` panics
Unknown imbl-sized-chunks 0.1.3
crates.io
0.2.0
RUSTSEC-2026-0386
`AsyncFd::new` and related constructors violate I/O safety
Unknown tokio 1.47.1
crates.io
1.51.6
RUSTSEC-2024-0449
unsafe-libyaml is unmaintained
Unknown unsafe-libyaml 0.2.11
crates.io
—
RUSTSEC-2024-0320
yaml-rust is unmaintained.
Unknown yaml-rust 0.4.5
crates.io
—

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]