# SBOM for quickdiff 0.1.6 > Add your description here The Python package quickdiff 0.1.6 ships 45 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/quickdiff@0.1.6` - PyPI: https://pypi.org/project/quickdiff/0.1.6/ - Requires Python: \>=3.13 ## SBOMs ### quickdiff-0.1.6-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/4488a57c-b845-57fb-b752-9cbadca36087/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-macosx\_11\_0\_arm64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/5c32e6e7-ae01-5158-9c87-f85c7d9c790c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/792a5ff8-d876-522a-805f-87d784bafee8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/031de690-c3f3-591f-bc1e-40e49c03f7fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/6fb4561b-1a0f-5f30-bb05-e06fb55d9088/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/3e7d434c-8777-57b6-9034-975d816b9eea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/11595cea-10e6-5bf1-9902-0b9f626c70d4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/789c7e1c-d4ec-57e7-8289-7e4d85f2bf3f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/e41fabca-e2f8-5c20-bbf6-0d3938b4f241/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-musllinux\_1\_2\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/d4102796-c100-5dfd-aeea-f834b51ee0a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-musllinux\_1\_2\_i686.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/125ca803-330d-5a6d-a58f-aacd7f0a9609/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/49a7a70b-fa68-5a1f-a2cf-2545cea1c2cf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-win32.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/feb8dffe-c240-5459-a867-73c7511783e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-win\_amd64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/3b083c62-ec55-528f-b917-cb4d361b2ca0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313-win\_arm64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/0a27338a-a144-5171-8679-0cbe69faeead/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/501ff8fa-faf9-5058-9c3b-dbbaac674e88/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/551b2d0b-31a1-54aa-b6a7-bc9d130aae72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/9fb9ef52-1b7d-5bd8-8562-d28a746014e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/3aff9dfa-502b-5230-8492-53ca78e3e727/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-musllinux\_1\_2\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/e638248d-5087-5558-90c3-07d5ec0b1184/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-musllinux\_1\_2\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/422d99a8-f25d-5971-af61-d04ab4f0773d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-musllinux\_1\_2\_i686.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/620533a6-8365-5071-9816-623fdd721019/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/ad022c18-a083-59e9-8321-8ed1fd6e5c12/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/1165f4f3-05a8-5b6f-803c-4f8eae1880a2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-macosx\_11\_0\_arm64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/9a924752-3cd0-5724-9de1-98ad017ae805/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/74c593c7-72c8-52dd-9ea8-744b39d943e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/6b7fdbba-eed2-5696-914f-f2db56116e38/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/c44a2a20-ab0a-500a-bd00-e3fcae8108e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/5c0a959c-e088-503b-93c9-eb819708b4a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/c75bf91f-0391-5615-bea5-927c8d2f2dda/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/7d1f69cb-a3ac-5d41-b170-67367c534186/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/ac825c49-9e34-5bc9-a550-e2037fa3fe43/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-musllinux\_1\_2\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/83c82ae9-7412-5a9f-a478-e216151b5345/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-musllinux\_1\_2\_i686.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/f0c9c448-42a0-5131-a8ca-345332ff2bbf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/82586d2f-3ab3-535a-b3ae-09cfa19c32d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-win\_amd64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/21761e19-c4a4-59c4-8cae-e387e66882fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314-win\_arm64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/f3d8a79a-f434-53a9-99e4-92f386de0991/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/dd696ee7-97e1-52c7-a1b7-713182c78af5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/680f5d79-dbca-5d93-ac36-1520beccf473/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/dd609763-6d66-5ef7-a987-4dc06e603501/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/0f5d9745-b4e4-5030-8b2b-fb807281b50e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/8f5018f3-23d0-5d4b-8136-bc48f4649934/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/4d1e9379-ee46-58fe-9a94-819acd166b7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-musllinux\_1\_2\_i686.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/424cbf7a-5776-5a32-94be-efc654bf48c0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### quickdiff-0.1.6-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [quickdiff-0.1.6.dist-info/sboms/quickdiff.cyclonedx.json](https://pypi.sbomify.com/artifact/6054bb00-a8bb-51f3-88bd-fd85041e05d4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/quickdiff@0.1.6 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/quickdiff/0.1.6.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/quickdiff/0.1.6