# SBOM for pyspector 0.1.7

> A high-performance, security-focused static analysis tool for Python, powered by Rust.

The Python package pyspector 0.1.7 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pyspector@0.1.7`
- PyPI: https://pypi.org/project/pyspector/0.1.7/
- Author: ParzivalHack
- License: MIT
- Requires Python: \>=3.8

## SBOMs

### pyspector-0.1.7-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [pyspector-0.1.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/320323da-c3f9-5df5-a173-8070ff78a007/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyspector-0.1.7-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [pyspector-0.1.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b952965-ba94-503b-b1e6-40d7294a69ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyspector-0.1.7-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [pyspector-0.1.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d9652ee0-22e3-5545-ae4e-6066c36f6e3a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pyspector-0.1.7-cp39-cp39-manylinux\_2\_28\_x86\_64.whl

- [pyspector-0.1.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a7c1b131-2be2-5c06-a2d1-fd9128cfd209/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-41206](https://insights.sbomify.com/CVE-2026-41206/) | medium (6.9) | pyspector 0.1.7 (PyPI) | 0.1.8 | PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate\_plugin\_code |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pyspector@0.1.7
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pyspector/0.1.7.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyspector/0.1.7