# SBOM for rapsqlite 0.5.1

> True async SQLite — no fake async, no GIL stalls.

The Python package rapsqlite 0.5.1 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/rapsqlite@0.5.1`
- PyPI: https://pypi.org/project/rapsqlite/0.5.1/
- Author: RAP Project
- License: MIT
- Requires Python: \>=3.10

## SBOMs

### rapsqlite-0.5.1-cp310-abi3-macosx\_10\_12\_x86\_64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/ea4dd1ce-f783-5552-be8e-5953839d8e86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-macosx\_11\_0\_arm64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/70bf9c9d-4d71-53c1-bad3-a64d482e373d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/99a95a86-5f73-512f-a5d5-062751624e86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-manylinux\_2\_28\_aarch64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/8837fc63-a1e4-51f4-825b-99debfb73505/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-musllinux\_1\_2\_aarch64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/2ce5c315-0ec5-5a4b-ad90-4ed11778bd45/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-musllinux\_1\_2\_x86\_64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/5abd03cb-8f9f-5a6b-9ad3-850147767dac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-win\_amd64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/07e1246b-02e4-5357-8422-7732816750ac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### rapsqlite-0.5.1-cp310-abi3-win\_arm64.whl

- [rapsqlite-0.5.1.dist-info/sboms/rapsqlite.cyclonedx.json](https://pypi.sbomify.com/artifact/50eb7a55-5653-54f5-ad34-36c30a86806f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-119375](https://insights.sbomify.com/CVE-2026-119375/) | medium (6.8) | libsqlite3-sys 0.30.1 (crates.io) | 0.39.0 | \`libsqlite3-sys\` via C SQLite CVE-2026-119375 |
| [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained |
| [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.49.0 (crates.io) | 1.51.6 | \`AsyncFd::new\` and related constructors violate I/O safety |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rapsqlite@0.5.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rapsqlite/0.5.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rapsqlite/0.5.1