# SBOM for pyprevent 0.1.6

> Python implementation of 2024 AHA PREVENT calculator

The Python package pyprevent 0.1.6 ships 9 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pyprevent@0.1.6`
- PyPI: https://pypi.org/project/pyprevent/0.1.6/
- Source: <https://github.com/lhegstrom/PyPrevent/>
- Tracker: <https://github.com/lhegstrom/PyPrevent/issues>

## SBOMs

### pyprevent-0.1.6-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/b6b49793-bc61-5c5c-9ae7-50c579604ba3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/a3c34c07-7bde-5db2-9ad0-45bd5fc4f0c2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/0bfe4b87-2b3c-5c5c-8865-410825661e1f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp312-cp312-win\_amd64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/b31e27d8-ecfb-5e85-93c1-181b99fea9a5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/8a33478a-3337-575c-b4a3-58ebd6256479/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp313-cp313-win\_amd64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/f6092a01-36b8-59a9-893d-f1549c08c5c7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/0d1537dc-623a-50c7-bf77-af65044ea5b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp314-cp314-win\_amd64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/94429a58-1bb4-585d-9672-4a6b847afbca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### pyprevent-0.1.6-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pyprevent-0.1.6.dist-info/sboms/pyprevent.cyclonedx.json](https://pypi.sbomify.com/artifact/6bf22b95-619a-531d-8dd1-97f0ca537c6d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.20.2 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.20.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.20.2 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` |
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pyprevent@0.1.6
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pyprevent/0.1.6.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyprevent/0.1.6