# SBOM for semsimian 0.3.0 The Python package semsimian 0.3.0 ships 49 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/semsimian@0.3.0` - PyPI: https://pypi.org/project/semsimian/0.3.0/ - Requires Python: \>=3.8 ## SBOMs ### semsimian-0.3.0-cp310-cp310-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/2c5d84bd-57f9-5b3c-a14b-05c86524c87a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/8d5deb73-b488-50bb-a77b-0f3f47c57875/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/fd63fd7e-e444-598f-9077-3e781478f293/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/2ae3044b-f65b-558a-8bc7-9fd53dbae0cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/0748186f-6312-5f8c-9cf4-43c2e3e372e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/24c97513-9327-5dfb-bb3e-3b1d92c5fff2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp310-cp310-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/1f47608f-cbf9-568f-b5ee-0a7c81ef14b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/faa86116-24b3-509d-8257-24c6fd615b94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/e3be67ce-5a18-55e7-8ab4-53e105e16f35/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/370c2244-15ac-5550-b44b-829ce2bbbda3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/1e06f9bc-4c1f-5e6d-a073-d012fc6cfbf7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/fdca1332-4ae3-5a22-aba3-5c7ba7e514ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/1d62b57a-4e83-58e1-80b7-942463666338/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp311-cp311-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/39b9336e-d99d-5a64-848f-3d406282e169/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/4e183ec3-5f59-5f94-a872-11e633dc7a41/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/c4ab073d-ac9f-5517-bb0e-11d22c63c65c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/a4470cd7-c2a5-5dca-b0e3-6bd781f6f9a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/d059a7be-782f-5c8a-8fe8-538f2cf29697/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/5377a196-c692-53ba-be53-2c1125abaccb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/91e539a2-557c-5456-8556-e7a0e5796500/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp312-cp312-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/87147364-1033-57fa-a452-fc1a50a73e66/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/f75a8bec-893b-5528-b52d-b1f7f8d693af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/0d199255-83ac-5724-9311-a2a5e3fee7bc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/ff62b152-ad6e-53cb-a247-19a69034373d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/327b9664-56d8-5c82-a6d8-57cd9a22111b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/11d59c76-a5c2-5f09-85bb-04faa59b39ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/3b98bcb2-d1d8-510a-9fd5-4bbe3e03d75c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp313-cp313-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/371497b1-3272-50e3-b96c-b2688f7f4e3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/eead458f-d3af-56e3-9e5e-50e2baaa3ac4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/17f86d6d-06fe-5964-82db-e90f55611237/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/c8a84e08-fa41-5cb5-82a8-45247126026d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/a12f6fb3-9b0f-52d8-b21a-2b8b69f68b13/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/9ff6d02b-0af8-5c07-baa1-96694bc2d133/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/93239170-4bf6-5cee-a8f9-dd70e95a9ba0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp314-cp314-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/491d91d8-0d77-5acb-9c05-2b2e6002de4a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/08af5749-9dc3-57c9-9150-9db0dd4bda9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/0c168bd9-f6c8-5597-96ed-c1bd9d02628d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/463edae4-9230-56d3-a8cf-3d00fdf8df18/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/d3c4650d-9d17-5b18-b42d-642720d723fd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/e4392a7b-747d-541b-aa46-96810a52177f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/561a4cc5-7f8a-537c-8c11-f8957e0324a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp38-cp38-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/f72ee29b-b432-5262-a9ae-0525853f56f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_12\_universal2.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/a509be40-41cb-5734-89c7-c1a549fd9e3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-macosx\_10\_12\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/360dd703-46a0-5338-b418-925154829024/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/940c0988-6f30-5344-9200-0fbeef554070/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/1e93cfb0-8263-5223-a29d-4102bf4a7541/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/d0c30c2f-dcf3-52c9-91d4-d1391827b69d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/57fc9184-6e74-5cc6-b621-f0b0b3ce70fd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ### semsimian-0.3.0-cp39-cp39-win\_amd64.whl - [semsimian-0.3.0.dist-info/sboms/semsimian.cyclonedx.json](https://pypi.sbomify.com/artifact/35a6d957-b8e3-58f7-8154-53fe30450f83/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 13 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.26.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-33055](https://insights.sbomify.com/CVE-2026-33055/) | high (8.1) | tar 0.4.41 (crates.io) | 0.4.45 | tar-rs incorrectly ignores PAX size headers if header size is nonzero | | [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.31.0 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names | | [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.31.0 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service | | [RUSTSEC-2026-0344](https://osv.dev/vulnerability/RUSTSEC-2026-0344) | high (7.5) | ruzstd 0.7.0 (crates.io) | 0.9.1 | Decompression bomb in \`ruzstd\`: a tiny input can exhaust memory (OOM) | | [CVE-2026-119375](https://insights.sbomify.com/CVE-2026-119375/) | medium (6.8) | libsqlite3-sys 0.28.0 (crates.io) | 0.39.0 | \`libsqlite3-sys\` via C SQLite CVE-2026-119375 | | [CVE-2026-33056](https://insights.sbomify.com/CVE-2026-33056/) | medium (6.5) | tar 0.4.41 (crates.io) | 0.4.45 | \`unpack\_in\` can chmod arbitrary directories by following symlinks | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.26.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.86 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2025-0119](https://osv.dev/vulnerability/RUSTSEC-2025-0119) | unknown | number\_prefix 0.4.0 (crates.io) | none listed | number\_prefix crate is unmaintained | | [RUSTSEC-2024-0400](https://osv.dev/vulnerability/RUSTSEC-2024-0400) | unknown | ruzstd 0.7.0 (crates.io) | 0.7.3 | \`ruzstd\` uninit and out-of-bounds memory reads | | [GHSA-3pv8-6f4r-ffg2](https://osv.dev/vulnerability/GHSA-3pv8-6f4r-ffg2) | unknown | tar 0.4.41 (crates.io) | 0.4.46 | tar has a PAX header desynchronization issue | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/semsimian@0.3.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/semsimian/0.3.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/semsimian/0.3.0