# SBOM for slint-compiler 1.18.1b1

> Slint Compiler

The Python package slint-compiler 1.18.1b1 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/slint-compiler@1.18.1b1`
- PyPI: https://pypi.org/project/slint-compiler/1.18.1b1/
- Requires Python: \>=3.10
- Changelog: <https://github.com/slint-ui/slint/blob/master/CHANGELOG.md>
- Documentation: <https://slint.dev/docs>
- Homepage: <https://slint.dev>
- Repository: <https://github.com/slint-ui/slint>
- Tracker: <https://github.com/slint-ui/slint/issues>

## SBOMs

### slint\_compiler-1.18.1b1-py3-none-macosx\_11\_0\_arm64.whl

- [slint\_compiler-1.18.1b1.dist-info/sboms/slint-compiler.cyclonedx.json](https://pypi.sbomify.com/artifact/bfb82ea7-0849-5b7f-8ef1-a680ca685615/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### slint\_compiler-1.18.1b1-py3-none-manylinux\_2\_35\_aarch64.whl

- [slint\_compiler-1.18.1b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d93a2596-a5d1-5605-97b7-66c6c5c1ada0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [slint\_compiler-1.18.1b1.dist-info/sboms/slint-compiler.cyclonedx.json](https://pypi.sbomify.com/artifact/13ec2746-5e69-58bb-91ad-6f1f332c1a44/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### slint\_compiler-1.18.1b1-py3-none-manylinux\_2\_35\_x86\_64.whl

- [slint\_compiler-1.18.1b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39def9cf-178f-5b5b-bdbf-7cc91adcf0b7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [slint\_compiler-1.18.1b1.dist-info/sboms/slint-compiler.cyclonedx.json](https://pypi.sbomify.com/artifact/978f972f-4428-5a2f-b7fd-5cf64b671d40/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### slint\_compiler-1.18.1b1-py3-none-win\_amd64.whl

- [slint\_compiler-1.18.1b1.dist-info/sboms/slint-compiler.cyclonedx.json](https://pypi.sbomify.com/artifact/2415e928-dabc-5f3c-9cb4-2e57b82598ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### slint\_compiler-1.18.1b1-py3-none-win\_arm64.whl

- [slint\_compiler-1.18.1b1.dist-info/sboms/slint-compiler.cyclonedx.json](https://pypi.sbomify.com/artifact/542befae-388e-5f1e-9d15-63ed93679fac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0414](https://osv.dev/vulnerability/RUSTSEC-2026-0414) | high (7.5) | pulldown-cmark 0.13.4 (crates.io) | 0.13.5 | Exponential event growth with \`ENABLE\_WIKILINKS\` |
| [RUSTSEC-2026-0433](https://osv.dev/vulnerability/RUSTSEC-2026-0433) | high (7.5) | pulldown-cmark 0.13.4 (crates.io) | 0.13.6 | Quadratic parsing of nested image wikilinks with \`ENABLE\_WIKILINKS\` |
| [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 2.0.1 (crates.io) | none listed | Bincode is unmaintained |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/slint-compiler@1.18.1b1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/slint-compiler/1.18.1b1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/slint-compiler/1.18.1b1