# SBOM for pyarrow 26.0.1

> Python library for Apache Arrow

The Python package pyarrow 26.0.1 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pyarrow@26.0.1`
- PyPI: https://pypi.org/project/pyarrow/26.0.1/
- Requires Python: \>=3.11
- Documentation: <https://arrow.apache.org/docs/python>
- Homepage: <https://arrow.apache.org/>
- Issues: <https://github.com/apache/arrow/issues>
- Repository: <https://github.com/apache/arrow>

## SBOMs

### pyarrow-26.0.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/788937a7-00a8-51e5-9ff3-78be5481ab51/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c2fc649d-25ca-5ba2-aaf0-09f8385e5745/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/987d6d72-2cd2-5dde-853b-e9fc70c1882d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b365ee10-a4b1-5a75-8aea-8292e7c76b2e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/350867e5-d1ee-567e-8756-7505da67a529/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/14690ed5-2956-5c5f-b36c-ade4d212f33b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9938153a-a72d-5291-8950-74fff66736c1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/352976dc-92a8-55d6-a115-3ea1d7c18fe5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/15ce0e57-8117-52a8-b886-6ec67a64acba/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ff1943bb-a9a3-5aa7-bb82-e6f2f3fc60d2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp315-cp315-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/61b8faa8-2bc3-5ca3-8db1-335fa4d85390/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/17d57fd1-268c-528f-9f8d-46ec74d7c7b9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1335dc7e-9db7-54a2-9fa7-d28e53a7704d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyarrow-26.0.1-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

- [pyarrow-26.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/04c16047-f5e3-5259-a6fa-1c67aa724117/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pyarrow@26.0.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pyarrow/26.0.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyarrow/26.0.1