# SBOM for tangram-jet1090 0.6.0 > Mode S and ADS-B data integration plugin for tangram The Python package tangram-jet1090 0.6.0 ships 54 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/tangram-jet1090@0.6.0` - PyPI: https://pypi.org/project/tangram-jet1090/0.6.0/ - Requires Python: \>=3.10 - Homepage: ## SBOMs ### tangram\_jet1090-0.6.0-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/2fbbe432-7132-5cd7-a88d-87b877a9c18e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-macosx\_11\_0\_arm64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/4bcc015c-f35d-5716-81c9-86fdc3e391d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-manylinux\_2\_28\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/7b3ac7c6-7a33-5c69-b499-94240727d9a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-manylinux\_2\_28\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/6740b20f-eea0-58ae-8e83-54dcce98ee82/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-manylinux\_2\_28\_i686.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/c6adeadc-b810-5138-86c3-51c9dd580f51/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-manylinux\_2\_28\_ppc64le.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/177deaac-a1a3-55b6-931a-44a80e1b00dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-manylinux\_2\_28\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/bf242f5f-0f23-520b-a668-c3ef86c4f66f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-musllinux\_1\_1\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/7b4b0771-a6f7-52f8-a147-7d51d5d65293/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-musllinux\_1\_1\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/8ec878a1-822c-5985-814f-10fb8583ed09/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-musllinux\_1\_1\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/3e673641-db3f-5fbf-aedc-f69a2e88a4d4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp310-cp310-win\_amd64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/e405cfb9-74a5-56ca-af9d-a35463a1304b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/799f6015-1d9b-5791-b3a1-20ab26d8e53e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-macosx\_11\_0\_arm64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/79344599-e50c-563e-abdb-2b4181a4e902/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/80ae967b-7528-5adf-9b22-9fb95d6cf00b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-manylinux\_2\_28\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/9b7ace64-6a94-5281-aa44-cd664bdd1e85/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-manylinux\_2\_28\_i686.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/a6812085-8fdd-5e9f-8268-a6aa13502995/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-manylinux\_2\_28\_ppc64le.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/289b6c0d-5f8f-59d7-85d9-eae7833344ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/228bbef7-f61a-5b28-8ec9-2c51341c3dad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-musllinux\_1\_1\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/06de6300-e233-57b9-ab48-b528b4d44ed1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-musllinux\_1\_1\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/1e59e7e2-cb87-5e21-b1c4-81f043111486/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-musllinux\_1\_1\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/9467ed84-a5f1-54fb-b541-d17ba06dcf7b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp311-cp311-win\_amd64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/e812bad0-0fff-5bee-a9af-d82fcfdea713/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/85aa0088-0b50-5d5f-b05b-742e3b7c77c0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-macosx\_11\_0\_arm64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/4c9f90ac-7fcd-5056-a244-a94ae9d29907/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/38ad988b-720c-59e5-a496-47524043dc28/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-manylinux\_2\_28\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/20706f19-ab9b-50e7-ac28-b1e40d25eb7e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-manylinux\_2\_28\_i686.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/77cf154f-8c0d-5bcc-8dd8-b83734c90b53/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-manylinux\_2\_28\_ppc64le.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/baf0426b-12e1-5624-b189-a94bf52b44b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/dc06bd3c-e676-5f39-bbf1-d82841aaeed1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-musllinux\_1\_1\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/2cb96953-3976-5f64-a9d4-96c98154977d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-musllinux\_1\_1\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/a6c85a54-389e-5696-812e-bf4e64c4e0f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-musllinux\_1\_1\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/237432a1-fb1b-5d60-b108-d0e4a044d98f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp312-cp312-win\_amd64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/4853da03-66b8-5b66-85b8-1707f179e3e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/5bd86010-a129-5e74-90cc-4b2f7ba177e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-macosx\_11\_0\_arm64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/88c82481-584d-55b9-aaaa-bf4f7e1a9d60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/94dbaac8-7895-56b5-b717-db28ee6d6da4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-manylinux\_2\_28\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/19710299-6a67-5878-acd8-5cbed2fecbd9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-manylinux\_2\_28\_i686.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/5fd1e76d-872b-54ab-bed5-9e920c355f2a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-manylinux\_2\_28\_ppc64le.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/985eee13-8fab-574c-b9fa-a095ec8e0849/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/414395f5-dfa7-56d7-b9b9-8c4a7b4c1782/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-musllinux\_1\_1\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/a39f6139-eb2b-5e5e-a07e-16ec41eab004/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-musllinux\_1\_1\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/f5148273-16e6-5bfa-8956-cd6ceb1dcce0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-musllinux\_1\_1\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/b66748d0-471a-5a5e-963f-082c383f2beb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp313-cp313-win\_amd64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/363423af-dace-53a6-afd2-171f470dcced/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/47f31498-ff1f-5c1b-8fc8-34bac43743c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-macosx\_11\_0\_arm64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/efc0f29c-1542-5ce6-b579-8880d6a353db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/cc3dcc25-44a3-5821-9eb9-3d9a65af8fde/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-manylinux\_2\_28\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/7a1e50ff-4707-53fa-9b74-00b0799d7b61/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-manylinux\_2\_28\_i686.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/314501cf-0f14-5b48-8ca8-16d6dd6dbee3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-manylinux\_2\_28\_ppc64le.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/3515be44-53c3-5cd4-8095-511546f9c05f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/12230cb7-5075-5ecc-a552-02b803986883/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-musllinux\_1\_1\_aarch64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/ba96b73e-0d8a-5be8-8545-302a70341bf3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-musllinux\_1\_1\_armv7l.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/247d8bb6-e383-5f90-9834-77eaaa57999a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ### tangram\_jet1090-0.6.0-cp314-cp314-musllinux\_1\_1\_x86\_64.whl - [tangram\_jet1090-0.6.0.dist-info/sboms/tangram\_jet1090.cyclonedx.json](https://pypi.sbomify.com/artifact/539b4d87-4d81-59d8-832f-f5c27e596f0e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 15 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-3336](https://insights.sbomify.com/CVE-2026-3336/) | high (8.7) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | PKCS7\_verify Certificate Chain Validation Bypass in AWS-LC | | [CVE-2026-3337](https://insights.sbomify.com/CVE-2026-3337/) | high (8.2) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | Timing Side-Channel in AES-CCM Tag Verification in AWS-LC | | [RUSTSEC-2026-0044](https://osv.dev/vulnerability/RUSTSEC-2026-0044) | high (8.2) | aws-lc-sys 0.34.0 (crates.io) | 0.39.0 | AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN | | [CVE-2026-3338](https://insights.sbomify.com/CVE-2026-3338/) | high (7.5) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | PKCS7\_verify Signature Validation Bypass in AWS-LC | | [RUSTSEC-2026-0414](https://osv.dev/vulnerability/RUSTSEC-2026-0414) | high (7.5) | pulldown-cmark 0.13.0 (crates.io) | 0.13.5 | Exponential event growth with \`ENABLE\_WIKILINKS\` | | [RUSTSEC-2026-0433](https://osv.dev/vulnerability/RUSTSEC-2026-0433) | high (7.5) | pulldown-cmark 0.13.0 (crates.io) | 0.13.6 | Quadratic parsing of nested image wikilinks with \`ENABLE\_WIKILINKS\` | | [CVE-2026-4428](https://insights.sbomify.com/CVE-2026-4428/) | high (7.4) | aws-lc-sys 0.34.0 (crates.io) | 0.39.0 | CRL Distribution Point Scope Check Logic Error in AWS-LC | | [CVE-2026-119375](https://insights.sbomify.com/CVE-2026-119375/) | medium (6.8) | libsqlite3-sys 0.37.0 (crates.io) | 0.39.0 | \`libsqlite3-sys\` via C SQLite CVE-2026-119375 | | [GHSA-6g2r-675j-hx59](https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59) | low (2.3) | xxhash-rust 0.8.15 (crates.io) | 0.8.16 | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | | [RUSTSEC-2021-0139](https://osv.dev/vulnerability/RUSTSEC-2021-0139) | unknown | ansi\_term 0.12.1 (crates.io) | none listed | ansi\_term is Unmaintained | | [CVE-2026-111959](https://insights.sbomify.com/CVE-2026-111959/) | unknown | arrow-data 58.1.0 (crates.io) | 58.4.1 | Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.2 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tangram-jet1090@0.6.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tangram-jet1090/0.6.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tangram-jet1090/0.6.0