# SBOM for seqpro 0.23.0 The Python package seqpro 0.23.0 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/seqpro@0.23.0` - PyPI: https://pypi.org/project/seqpro/0.23.0/ - Requires Python: \>=3.10 ## SBOMs ### seqpro-0.23.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/9a40edf9-6c6a-5b7a-9833-09d72f009ceb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-macosx\_11\_0\_arm64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/ae444ce0-3a94-5bde-80f3-9e7b12cc703c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/f795531a-f6ac-580e-8e1a-1e3bbfdbb35d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/5bf063d6-0d8e-5c7f-b3aa-f1b11b1fc9dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/bc579a94-943f-594e-8595-a6f5b2ac8692/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/46b4327a-882a-5508-b008-951a1f0324e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/c96a9ea2-95bf-59b6-a4d0-c4910a0ffeb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/183b1676-1244-53a5-8123-ad746ec900b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/43b1922d-f3f6-58e7-bb8f-5733166f618b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/85e54611-b27a-51e4-99c5-3ec9bbc52975/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-musllinux\_1\_2\_i686.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/c7d3b7e1-348c-5f8c-be14-84fe6959aaf1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/dc43668e-6445-5c9e-9b8b-da7b7471e214/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-win32.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/00a888a1-4671-5a3e-be29-950185950194/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-win\_amd64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/a4ba0d5d-762f-5abd-8900-14ba71fec929/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp314-cp314t-win\_arm64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/0adff51c-92cb-5cdf-8636-27303699368c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-macosx\_10\_12\_x86\_64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/cbb7030d-c3ac-5846-8603-203267406f10/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-macosx\_11\_0\_arm64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/bb1d0f30-b675-56cb-bcb7-3780f1988b06/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/963a6c35-7d37-5219-8909-b7acfb9e5a5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/673089cc-37ea-56ad-9f76-dfcd3f969988/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/80cf64f6-2edc-5110-9492-04de3eb796d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/d27d8c88-84a3-5709-ae4a-d9a69d72577f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/156237d7-6568-57f8-b7f7-2edd60b66e8e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/eb843ccb-fd00-5e0c-832e-67eb927e2dab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-musllinux\_1\_2\_aarch64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/3ae6b27c-33f3-58a7-b090-e9ff7c6c5d80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-musllinux\_1\_2\_armv7l.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/65360b4d-b6de-5b24-9a57-67e0019cf65a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-musllinux\_1\_2\_i686.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/a74f96e1-9ad7-5052-91c6-f6c4c5bbdd19/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-musllinux\_1\_2\_x86\_64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/6a09aa4c-00d9-52e1-b07d-3693f9f1b94d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-win32.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/df53968c-12c5-5b47-9444-780517e63535/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-win\_amd64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/5afbafa1-8460-5e96-9dd7-feac23244650/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### seqpro-0.23.0-cp39-abi3-win\_arm64.whl - [seqpro-0.23.0.dist-info/sboms/seqpro.cyclonedx.json](https://pypi.sbomify.com/artifact/bb4fab74-ee42-5eb5-9d53-6f0287765b72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [GHSA-6g2r-675j-hx59](https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59) | low (2.3) | xxhash-rust 0.8.15 (crates.io) | 0.8.16 | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | | [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.99 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/seqpro@0.23.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/seqpro/0.23.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/seqpro/0.23.0