# SBOM for pyk4a-bundle 1.5.0.1 > Python wrapper over Azure Kinect SDK The Python package pyk4a-bundle 1.5.0.1 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/pyk4a-bundle@1.5.0.1` - PyPI: https://pypi.org/project/pyk4a-bundle/1.5.0.1/ - License: MIT - Requires Python: \>=3.4 - Homepage: ## SBOMs ### pyk4a\_bundle-1.5.0.1-cp310-cp310-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5f7bebc8-f13a-5d2d-ad9c-da5a8922d923/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyk4a\_bundle-1.5.0.1-cp311-cp311-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/477827ad-c88c-561d-b630-f66bd4317d8a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyk4a\_bundle-1.5.0.1-cp312-cp312-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/37ec1a84-a59a-57ac-9838-d68dcc2e8719/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyk4a\_bundle-1.5.0.1-cp313-cp313-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8d34131d-48af-52b3-bc81-691653638eb5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyk4a\_bundle-1.5.0.1-cp313-cp313t-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/009902c5-8073-5c6d-8dea-5a346a710001/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyk4a\_bundle-1.5.0.1-cp314-cp314-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9912f0c2-2a65-5fc1-8af5-5f7c0a80ec16/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyk4a\_bundle-1.5.0.1-cp314-cp314t-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl - [pyk4a\_bundle-1.5.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6d4c701e-1ce9-5828-9c2b-b79a97068e0f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-4878](https://insights.sbomify.com/CVE-2026-4878/) | high (7.0) | libcap2 1:2.66-5ubuntu2.2 (Ubuntu) | none listed | libcap2 vulnerability | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pyk4a-bundle@1.5.0.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pyk4a-bundle/1.5.0.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyk4a-bundle/1.5.0.1