# SBOM for pydiffsol 0.6.2

The Python package pydiffsol 0.6.2 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pydiffsol@0.6.2`
- PyPI: https://pypi.org/project/pydiffsol/0.6.2/
- Requires Python: \>=3.10

## SBOMs

### pydiffsol-0.6.2-cp310-abi3-macosx\_14\_0\_arm64.whl

- [pydiffsol-0.6.2.dist-info/sboms/pydiffsol.cyclonedx.json](https://pypi.sbomify.com/artifact/acfc2c45-5617-5e8b-86d1-098dacd4dfa0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities

### pydiffsol-0.6.2-cp310-abi3-manylinux\_2\_28\_aarch64.whl

- [pydiffsol-0.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/580cda7a-308b-5119-838f-e1721f20657f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [pydiffsol-0.6.2.dist-info/sboms/pydiffsol.cyclonedx.json](https://pypi.sbomify.com/artifact/d5198fb6-c569-5431-aa5f-105e6f215889/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities

### pydiffsol-0.6.2-cp310-abi3-manylinux\_2\_28\_x86\_64.whl

- [pydiffsol-0.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/66d79542-d478-5a47-80ae-23d14b5cd9f0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [pydiffsol-0.6.2.dist-info/sboms/pydiffsol.cyclonedx.json](https://pypi.sbomify.com/artifact/1a4dd955-30fb-5d3a-a932-9f4680af1e8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities

### pydiffsol-0.6.2-cp310-abi3-win\_amd64.whl

- [pydiffsol-0.6.2.dist-info/sboms/pydiffsol.cyclonedx.json](https://pypi.sbomify.com/artifact/03ca4ec4-a092-5c51-a90e-9ccb678c6973/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0344](https://osv.dev/vulnerability/RUSTSEC-2026-0344) | high (7.5) | ruzstd 0.8.3 (crates.io) | 0.9.1 | Decompression bomb in \`ruzstd\`: a tiny input can exhaust memory (OOM) |
| [RUSTSEC-2026-0186](https://osv.dev/vulnerability/RUSTSEC-2026-0186) | unknown | memmap2 0.2.3 (crates.io) | 0.9.11 | Unchecked pointer offset in crate \`memmap2\` |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2025-0081](https://osv.dev/vulnerability/RUSTSEC-2025-0081) | unknown | unic-char-property 0.9.0 (crates.io) | none listed | \`unic-char-property\` is unmaintained |
| [RUSTSEC-2025-0075](https://osv.dev/vulnerability/RUSTSEC-2025-0075) | unknown | unic-char-range 0.9.0 (crates.io) | none listed | \`unic-char-range\` is unmaintained |
| [RUSTSEC-2025-0080](https://osv.dev/vulnerability/RUSTSEC-2025-0080) | unknown | unic-common 0.9.0 (crates.io) | none listed | \`unic-common\` is unmaintained |
| [RUSTSEC-2025-0090](https://osv.dev/vulnerability/RUSTSEC-2025-0090) | unknown | unic-emoji-char 0.9.0 (crates.io) | none listed | \`unic-emoji-char\` is unmaintained |
| [RUSTSEC-2025-0100](https://osv.dev/vulnerability/RUSTSEC-2025-0100) | unknown | unic-ucd-ident 0.9.0 (crates.io) | none listed | \`unic-ucd-ident\` is unmaintained |
| [RUSTSEC-2025-0098](https://osv.dev/vulnerability/RUSTSEC-2025-0098) | unknown | unic-ucd-version 0.9.0 (crates.io) | none listed | \`unic-ucd-version\` is unmaintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pydiffsol@0.6.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pydiffsol/0.6.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pydiffsol/0.6.2