SBOM for tangram-core 0.6.0

A framework for real-time air traffic management research

CycloneDX PEP 740 attested 9 known vulnerabilities

Package information

Requires Python
>=3.10
PyPI
tangram-core 0.6.0
Homepage
https://mode-s.org/tangram/

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

tangram_core-0.6.0-cp310-cp310-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-manylinux_2_28_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-manylinux_2_28_i686.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-musllinux_1_1_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-musllinux_1_1_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-musllinux_1_1_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp310-cp310-win_amd64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-manylinux_2_28_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-manylinux_2_28_i686.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-musllinux_1_1_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-musllinux_1_1_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-musllinux_1_1_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp311-cp311-win_amd64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-manylinux_2_28_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-manylinux_2_28_i686.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-musllinux_1_1_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-musllinux_1_1_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-musllinux_1_1_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp312-cp312-win_amd64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-manylinux_2_28_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-manylinux_2_28_i686.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-musllinux_1_1_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-musllinux_1_1_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-musllinux_1_1_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp313-cp313-win_amd64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-manylinux_2_28_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-manylinux_2_28_i686.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-musllinux_1_1_aarch64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-musllinux_1_1_armv7l.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

tangram_core-0.6.0-cp314-cp314-musllinux_1_1_x86_64.whl

Attested
Publisher: GitHub Source: open-aviation/tangram Workflow: release.yml
Valid
tangram_core_rs.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 9 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
CVE-2026-3336
PKCS7_verify Certificate Chain Validation Bypass in AWS-LC
High 8.7 aws-lc-sys 0.34.0
crates.io
0.38.0
CVE-2026-3337
Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
High 8.2 aws-lc-sys 0.34.0
crates.io
0.38.0
RUSTSEC-2026-0044
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
High 8.2 aws-lc-sys 0.34.0
crates.io
0.39.0
CVE-2026-3338
PKCS7_verify Signature Validation Bypass in AWS-LC
High 7.5 aws-lc-sys 0.34.0
crates.io
0.38.0
CVE-2026-4428
CRL Distribution Point Scope Check Logic Error in AWS-LC
High 7.4 aws-lc-sys 0.34.0
crates.io
0.39.0
GHSA-6g2r-675j-hx59
xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release
Low 2.3 xxhash-rust 0.8.15
crates.io
0.8.16
RUSTSEC-2026-0441
`pin-utils` is unmaintained
Unknown pin-utils 0.1.0
crates.io
—
RUSTSEC-2026-0097
Rand is unsound with a custom logger using `rand::rng()`
Unknown rand 0.9.2
crates.io
0.9.3
RUSTSEC-2026-0386
`AsyncFd::new` and related constructors violate I/O safety
Unknown tokio 1.53.1
crates.io
1.53.3

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]