# SBOM for qcs-api-client-common 0.27.3

> Contains core QCS client functionality and middleware implementations.

The Python package qcs-api-client-common 0.27.3 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/qcs-api-client-common@0.27.3`
- PyPI: https://pypi.org/project/qcs-api-client-common/0.27.3/
- License: Apache-2.0
- Requires Python: \<4,\>=3.10
- Homepage: <https://github.com/rigetti/qcs-api-client-rust>

## SBOMs

### qcs\_api\_client\_common-0.27.3-cp310-cp310-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/44d71e93-dc6f-500c-b308-4a7572118f89/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp310-cp310-manylinux\_2\_28\_aarch64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/94b86846-1669-510f-866d-304850dc224c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/f5108c43-7e9e-5a14-adfa-a0286c4c857a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp310-cp310-win\_amd64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/40a051dd-c114-5230-8797-945b1929122a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp311-cp311-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/484d0311-79c5-59de-a804-ec2a66db7498/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp311-cp311-manylinux\_2\_28\_aarch64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/4ffaebcf-b20b-5949-aeb4-40c7d53c0583/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/25d55716-3e75-56ce-a0b1-1a264a455169/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp311-cp311-win\_amd64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/a8e64ff4-819c-5101-b551-68cf38ad0ea9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp312-cp312-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/d2193c5e-25c3-57b5-bea4-67ccb39ccb07/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp312-cp312-manylinux\_2\_28\_aarch64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/2c116490-9ffa-56fa-a66f-3a29c4b2af55/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/7a60335d-0fa9-5e82-bd29-2027717d0cf1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp312-cp312-win\_amd64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/1da9e495-4fe5-5b8c-a4bd-830d3f99554d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp313-cp313-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/4cf20cec-aa49-57ff-8926-880eb611ecc5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp313-cp313-manylinux\_2\_28\_aarch64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/cdbd12fd-2c00-5e96-80b6-79484cdb6cd4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/37b311fa-2cf6-525a-981b-88545dbe134c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### qcs\_api\_client\_common-0.27.3-cp313-cp313-win\_amd64.whl

- [qcs\_api\_client\_common-0.27.3.dist-info/sboms/qcs-api-client-common.cyclonedx.json](https://pypi.sbomify.com/artifact/05d428e5-5712-557a-ada4-e26f61ce3a92/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-25537](https://insights.sbomify.com/CVE-2026-25537/) | medium (5.5) | jsonwebtoken 9.3.1 (crates.io) | 10.3.0 | jsonwebtoken has Type Confusion that leads to potential authorization bypass |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/qcs-api-client-common@0.27.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/qcs-api-client-common/0.27.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/qcs-api-client-common/0.27.3