SBOM for pywebnn 0.5.12

Python bindings for W3C WebNN specification

CycloneDX PEP 740 attested 8 known vulnerabilities

Package information

License
Apache-2.0
Requires Python
>=3.10
PyPI
pywebnn 0.5.12
Documentation
https://github.com/rustnn/pywebnn#readme
Homepage
https://github.com/rustnn/pywebnn
Issues
https://github.com/rustnn/pywebnn/issues
Repository
https://github.com/rustnn/pywebnn

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

pywebnn-0.5.12-cp312-cp312-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: rustnn/pywebnn Workflow: publish.yml Environment: pypi
Valid
pywebnn.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities
Download

pywebnn-0.5.12-cp312-cp312-manylinux_2_34_x86_64.whl

Attested
Publisher: GitHub Source: rustnn/pywebnn Workflow: publish.yml Environment: pypi
Valid
pywebnn.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities
Download

pywebnn-0.5.12-cp312-cp312-win_amd64.whl

Attested
Publisher: GitHub Source: rustnn/pywebnn Workflow: publish.yml Environment: pypi
Valid
pywebnn.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0176
Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
High 8.7 pyo3 0.28.3
crates.io
0.29.0
RUSTSEC-2026-0177
Missing `Sync` bound on `PyCFunction::new_closure` closures
Medium 6.3 pyo3 0.28.3
crates.io
0.29.0
CVE-2026-45784
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers
Medium 5.1 openssl 0.10.79
crates.io
0.10.80
GHSA-7gcf-g7xr-8hxj
serde_with: KeyValueMap serialization panics on empty sequence or map entries
Medium 5.1 serde_with 3.19.0
crates.io
3.21.0
RUSTSEC-2026-0190
Unsoundness in `Error::downcast_mut()`
Unknown anyhow 1.0.102
crates.io
1.0.103
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Unknown crossbeam-epoch 0.9.18
crates.io
0.9.20
RUSTSEC-2024-0436
paste - no longer maintained
Unknown paste 1.0.15
crates.io
—
CVE-2026-111943
Bundled root certificates allow trust in distrusted emSign intermediates
Unknown webpki-root-certs 1.0.7
crates.io
1.0.10

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]