# SBOM for tangram-ship162 0.6.0 > AIS maritime data integration plugin for tangram The Python package tangram-ship162 0.6.0 ships 54 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/tangram-ship162@0.6.0` - PyPI: https://pypi.org/project/tangram-ship162/0.6.0/ - Requires Python: \>=3.10 - Homepage: ## SBOMs ### tangram\_ship162-0.6.0-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/b0bf1078-5d50-58f4-864c-a307e05d8f3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-macosx\_11\_0\_arm64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/61e6004d-b0c4-5c07-9a11-1021225f4868/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-manylinux\_2\_28\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/d2b176bd-84e6-5f90-a29e-6eb5979d1120/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-manylinux\_2\_28\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/8893f441-5fc6-582a-a3bf-f0b917c8b7f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-manylinux\_2\_28\_i686.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/58bd7be3-7018-5b94-b048-845992f045d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-manylinux\_2\_28\_ppc64le.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/8eb2be1a-af4b-5f1b-a589-5d8ad21b00ba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-manylinux\_2\_28\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/478e54b5-b35b-5a43-ac08-7bbf1d322922/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-musllinux\_1\_1\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/7e66f05c-864a-5dd3-972d-d4200da67208/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-musllinux\_1\_1\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/4028a836-40fe-5fac-af17-5170124075be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-musllinux\_1\_1\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/ff81c6df-35fc-57f9-9ab8-30ba6ba2e4fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp310-cp310-win\_amd64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/3b24c2e6-5bd9-56d0-9428-b919aa24d839/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/ee89e6a9-1172-5291-85da-fa9c0d855fb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-macosx\_11\_0\_arm64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/bd366507-0e1e-58a1-a026-51c0241b1438/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/f90e8953-f9d1-5956-a738-9a9539f98a87/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-manylinux\_2\_28\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/6dad8075-0d68-5efd-85ac-5c1bdd67a26e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-manylinux\_2\_28\_i686.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/1cc536e1-8c31-557c-a449-c30f4219fe08/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-manylinux\_2\_28\_ppc64le.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/97084371-b9fe-54f2-b99a-427b923330e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/e0e224c7-6c43-5e28-9df2-362288c4d2a2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-musllinux\_1\_1\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/f890c341-5329-5b32-a0e2-ccebe6597c23/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-musllinux\_1\_1\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/e0704df7-81cc-53c1-b3f9-899d6654437c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-musllinux\_1\_1\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/6220b216-9c4b-546b-8e3d-7ea7b7fcada7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp311-cp311-win\_amd64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/419952f5-fc00-57de-aeb7-bf8e85d56a0c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/c00cebf0-2575-5d50-92d9-283575ee23fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-macosx\_11\_0\_arm64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/efbb7a04-ca25-5c56-82cb-421479ecca9e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/74b407f5-f4f8-5f6e-b46e-b9096d7ac61c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-manylinux\_2\_28\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/f1a3d3b4-49a6-5b0c-a0b2-4eae1aa168d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-manylinux\_2\_28\_i686.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/1482c009-1288-52cb-8a28-082f6bdba9b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-manylinux\_2\_28\_ppc64le.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/b86f4b1c-d6ce-5c93-8412-30237ba80b86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/d008e676-e645-5064-9257-7fd0f31785db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-musllinux\_1\_1\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/82e0e229-3882-5173-bda5-38bc9cd1fea6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-musllinux\_1\_1\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/b9e4e8ac-f019-5881-85f3-2548894fd3f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-musllinux\_1\_1\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/ec2ee4f1-a4f5-5775-9f41-53f73e77d9b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp312-cp312-win\_amd64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/f729d54b-2cb7-53eb-b2b9-927e7a43fa72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/5c0db3d7-52fe-5957-8b79-ae5a1d73959d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-macosx\_11\_0\_arm64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/b1b81e31-268f-5982-9f51-cd774d18c9eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/207aa810-26f0-53e8-b590-d69d332aed27/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-manylinux\_2\_28\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/b4f41834-ed0e-5296-9658-0fefc2986656/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-manylinux\_2\_28\_i686.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/f2e283d5-e888-503d-92d6-b2b2350ad349/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-manylinux\_2\_28\_ppc64le.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/eac4a4aa-c251-5b88-8995-9592c484ec00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/ee3e657f-6c09-5338-a549-e10fab1753b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-musllinux\_1\_1\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/1594b199-fe09-53e7-a36a-838c3693324d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-musllinux\_1\_1\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/2899fde5-9ef1-56fb-b96f-882eff6ad79e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-musllinux\_1\_1\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/df5a1b66-7671-5b53-9724-dc5338416090/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp313-cp313-win\_amd64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/40955d69-f521-55b8-866f-e2f37a07b1f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/b4dfc6d5-ad41-5c6c-96ad-17afb27d4980/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-macosx\_11\_0\_arm64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/39da4454-6fdf-5951-ad19-0b963defcac8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/77064486-e497-522e-bbc2-02785a0b8617/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-manylinux\_2\_28\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/a44ad6e7-db23-534a-a11b-a09f7b7a25b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-manylinux\_2\_28\_i686.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/639190a0-9b95-5915-bdfd-b1063177b4a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-manylinux\_2\_28\_ppc64le.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/81ccf2af-0ebf-5fa0-946e-ef8c00aefbd2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/4731a8d9-b619-5bd7-955d-66582fe13749/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-musllinux\_1\_1\_aarch64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/4ee87998-d15c-5a2d-bee0-6e1c27219b80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-musllinux\_1\_1\_armv7l.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/cd19da01-ee39-5763-a165-08d62b8cf2e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ### tangram\_ship162-0.6.0-cp314-cp314-musllinux\_1\_1\_x86\_64.whl - [tangram\_ship162-0.6.0.dist-info/sboms/tangram\_ship162.cyclonedx.json](https://pypi.sbomify.com/artifact/06a20a99-1504-5e5e-a0d6-fc3b23909a23/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 10 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-3336](https://insights.sbomify.com/CVE-2026-3336/) | high (8.7) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | PKCS7\_verify Certificate Chain Validation Bypass in AWS-LC | | [CVE-2026-3337](https://insights.sbomify.com/CVE-2026-3337/) | high (8.2) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | Timing Side-Channel in AES-CCM Tag Verification in AWS-LC | | [RUSTSEC-2026-0044](https://osv.dev/vulnerability/RUSTSEC-2026-0044) | high (8.2) | aws-lc-sys 0.34.0 (crates.io) | 0.39.0 | AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN | | [CVE-2026-3338](https://insights.sbomify.com/CVE-2026-3338/) | high (7.5) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | PKCS7\_verify Signature Validation Bypass in AWS-LC | | [CVE-2026-4428](https://insights.sbomify.com/CVE-2026-4428/) | high (7.4) | aws-lc-sys 0.34.0 (crates.io) | 0.39.0 | CRL Distribution Point Scope Check Logic Error in AWS-LC | | [GHSA-6g2r-675j-hx59](https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59) | low (2.3) | xxhash-rust 0.8.15 (crates.io) | 0.8.16 | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | | [CVE-2026-111959](https://insights.sbomify.com/CVE-2026-111959/) | unknown | arrow-data 58.1.0 (crates.io) | 58.4.1 | Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads | | [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.2 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tangram-ship162@0.6.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tangram-ship162/0.6.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tangram-ship162/0.6.0