# SBOM for pyqir 0.12.8

The Python package pyqir 0.12.8 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pyqir@0.12.8`
- PyPI: https://pypi.org/project/pyqir/0.12.8/
- Requires Python: \>=3.9
- Homepage: <https://github.com/qir-alliance/pyqir>

## SBOMs

### pyqir-0.12.8-cp315-abi3.abi3t-manylinux\_2\_28\_aarch64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/3a70395f-71c2-5b32-a52c-ab65388fdcf9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp315-abi3.abi3t-manylinux\_2\_28\_x86\_64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/98a9e554-808a-59fd-aef0-2b13472535ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp39-abi3-macosx\_10\_12\_x86\_64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/869482bd-1152-50f2-8ca4-cffc4274ddbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp39-abi3-macosx\_11\_0\_arm64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/306aabe9-f36b-5728-851f-b43630df3d1d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp39-abi3-manylinux\_2\_28\_aarch64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/0d9a3cb0-ad5c-586d-928f-62bae1318307/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp39-abi3-manylinux\_2\_28\_x86\_64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/d4be1916-8e77-5313-80d4-7e4b9ef9c7ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp39-abi3-win\_amd64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/a92232bc-998b-5886-850d-ed772501d63b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyqir-0.12.8-cp39-abi3-win\_arm64.whl

- [pyqir-0.12.8.dist-info/sboms/pyqir.cyclonedx.json](https://pypi.sbomify.com/artifact/b3cc27a3-c23a-512f-9746-a4d29795d780/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.98 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pyqir@0.12.8
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pyqir/0.12.8.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyqir/0.12.8