# SBOM for pylasr 0.17.4

> Python bindings for LASR library - Fast Airborne LiDAR Data Processing

The Python package pylasr 0.17.4 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pylasr@0.17.4`
- PyPI: https://pypi.org/project/pylasr/0.17.4/
- License: GPL-3.0
- Requires Python: \>=3.9
- Bug Tracker: <https://github.com/r-lidar/lasR/issues>
- Documentation: <https://r-lidar.github.io/lasR/>
- Homepage: <https://github.com/r-lidar/lasR>
- Source Code: <https://github.com/r-lidar/lasR>

## SBOMs

### pylasr-0.17.4-cp310-cp310-manylinux\_2\_39\_x86\_64.whl

- [pylasr-0.17.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1205e5ce-433d-5d25-8fe7-831c0bb200c0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pylasr-0.17.4-cp311-cp311-manylinux\_2\_39\_x86\_64.whl

- [pylasr-0.17.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2c439e22-dc91-5e08-9a2c-1695f7d15bde/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pylasr-0.17.4-cp312-cp312-manylinux\_2\_39\_x86\_64.whl

- [pylasr-0.17.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/385d6ef4-d42b-5858-bed9-6a538c72b915/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pylasr-0.17.4-cp313-cp313-manylinux\_2\_39\_x86\_64.whl

- [pylasr-0.17.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/55b3cc4c-d3e8-5d9b-89c8-200bc1e28f60/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-6653](https://insights.sbomify.com/CVE-2026-6653/) | critical (9.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.7 (Ubuntu) | none listed | libxml2 vulnerability |
| [CVE-2026-74860](https://insights.sbomify.com/CVE-2026-74860/) | high (8.5) | libxml2 2.9.14+dfsg-1.3ubuntu3.7 (Ubuntu) | none listed | libxml2 vulnerabilities |
| [CVE-2026-11979](https://insights.sbomify.com/CVE-2026-11979/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.7 (Ubuntu) | none listed |  |
| [CVE-2026-76781](https://insights.sbomify.com/CVE-2026-76781/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.7 (Ubuntu) | none listed | libxml2 vulnerabilities |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pylasr@0.17.4
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pylasr/0.17.4.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pylasr/0.17.4