# SBOM for rfc3161-client 1.0.9
The Python package rfc3161-client 1.0.9 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.
- Package URL (PURL): `pkg:pypi/rfc3161-client@1.0.9`
- PyPI: https://pypi.org/project/rfc3161-client/1.0.9/
- Requires Python: \>=3.9
- Documentation:
- Homepage:
- Issues:
- Source:
## SBOMs
### rfc3161\_client-1.0.9-cp39-abi3-macosx\_10\_12\_x86\_64.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/17909de3-3e32-567b-9e1b-8d310482b5d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-macosx\_11\_0\_arm64.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/cb7cddd3-a59e-53e0-a9ce-6e7e43dd9588/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/4de913b2-4662-5748-8380-4f3c3ddc50bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/534da941-801b-5db9-9766-186772be9b05/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-manylinux\_2\_17\_i686.manylinux2014\_i686.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/87315bed-ed89-5197-ad08-f8ad3362b0ac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/200e0ed3-b63e-5f39-ac5a-a9eba87ed8b7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/00dd3278-9741-52dc-9b2b-bdc26391ac69/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-musllinux\_1\_2\_armv7l.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/931d472a-6c6a-53ad-b088-d8ffbfe7176c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-musllinux\_1\_2\_i686.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/2dd9facd-5d26-597a-ae09-fb320cb8c82c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/acff5f96-d048-5af2-a863-cd470a0d7278/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-win32.whl
PEP 740 attestation verified (GitHub, trailofbits/rfc3161-client, workflow CI.yml).
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/acdef869-96b8-5f05-8d3e-3c51e73ebeaa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### rfc3161\_client-1.0.9-cp39-abi3-win\_amd64.whl
PEP 740 attestation failed verification: Failed to refresh TUF metadata.
- [rfc3161\_client-1.0.9.dist-info/sboms/rfc3161-client.cyclonedx.json](https://pypi.sbomify.com/artifact/d10b27b3-7fee-5cc6-96af-cda1520567cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities
## Known vulnerabilities
Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.
| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [GHSA-qwgh-2vcv-g2f7](https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7) | medium (6.3) | block-buffer 0.12.0 (crates.io) | none listed | block\_buffer: panic corrupts inline buffer position |
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |
## Fetch it over TEA
This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:
```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rfc3161-client@1.0.9
```
Machine-readable copy of this page: https://pypi.sbomify.com/package/rfc3161-client/1.0.9.json
---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rfc3161-client/1.0.9