SBOM for samyama 1.14.0

Python SDK for the Samyama Graph Database

CycloneDX PEP 740 attested 9 known vulnerabilities

Package information

Author
Samyama Graph Database Team
License
Apache-2.0
Requires Python
>=3.8
PyPI
samyama 1.14.0

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

samyama-1.14.0-cp38-abi3-macosx_10_15_x86_64.whl

Attested
Publisher: GitHub Source: samyama-ai/samyama-graph Workflow: publish-pypi.yml Environment: pypi
Valid
samyama-python.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

samyama-1.14.0-cp38-abi3-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: samyama-ai/samyama-graph Workflow: publish-pypi.yml Environment: pypi
Valid
samyama-python.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

samyama-1.14.0-cp38-abi3-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: samyama-ai/samyama-graph Workflow: publish-pypi.yml Environment: pypi
Valid
samyama-python.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

samyama-1.14.0-cp38-abi3-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: samyama-ai/samyama-graph Workflow: publish-pypi.yml Environment: pypi
Valid
samyama-python.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

samyama-1.14.0-cp38-abi3-win_amd64.whl

Attested
Publisher: GitHub Source: samyama-ai/samyama-graph Workflow: publish-pypi.yml Environment: pypi
Valid
samyama-python.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0194
Quadratic run time when checking a start tag for duplicate attribute names
High 7.5 quick-xml 0.36.2
crates.io
0.41.0
RUSTSEC-2026-0194
Quadratic run time when checking a start tag for duplicate attribute names
High 7.5 quick-xml 0.37.5
crates.io
0.41.0
RUSTSEC-2026-0195
Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
High 7.5 quick-xml 0.36.2
crates.io
0.41.0
RUSTSEC-2026-0195
Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
High 7.5 quick-xml 0.37.5
crates.io
0.41.0
CVE-2026-111959
Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads
Unknown arrow-data 60.0.0
crates.io
60.1.0
RUSTSEC-2025-0141
Bincode is unmaintained
Unknown bincode 1.3.3
crates.io
—
RUSTSEC-2026-0418
libz-sys build script leaks environment variables in the build directory
Unknown libz-sys 1.1.30
crates.io
1.1.31
CVE-2026-111943
Certificate verification may accept distrusted intermediates
Unknown rustls-webpki 0.103.15
crates.io
0.103.16
RUSTSEC-2024-0449
unsafe-libyaml is unmaintained
Unknown unsafe-libyaml 0.2.11
crates.io
—

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]