# SBOM for tcfetch 0.5.2 > Download log files from Taskcluster CI systems The Python package tcfetch 0.5.2 ships 70 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/tcfetch@0.5.2` - PyPI: https://pypi.org/project/tcfetch/0.5.2/ - Requires Python: \>=3.7 ## SBOMs ### tcfetch-0.5.2-cp310-cp310-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/0e67d0e7-9183-5b26-8f36-af4cd4fe7029/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/285233e4-349b-55c2-8936-e9745ce03849/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/cd614846-7727-5c5c-8b1d-d9a8dc2eeab3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp310-cp310-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/9f188f76-6ac8-5c8a-8b0a-b1192a48308a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp310-cp310-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/20393979-7547-5428-bb1a-afd6cc5b20b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/bbae1583-778a-54a4-981e-bb1a825f6a6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp310-cp310-win\_amd64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/9b9c21ca-9342-5b0a-ad78-21082549baaa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-macosx\_11\_0\_arm64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/607e7c02-bf8a-5bd4-b9a2-6c52dbba3575/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/46a72460-7e39-5d3d-b22c-907d02806c7e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/864f60d7-70b0-5856-aa06-32376f9166d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/846f3701-87ee-52e0-ad76-978e549b21d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/6e5aa9e8-f090-5f49-b24f-99a0388851f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/f6b127c7-da5e-530f-a143-7777828f7e3e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/2a9e1f62-7008-51db-8405-3333ae5fdb7c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp311-cp311-win\_amd64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/9a9c0f8b-0a8e-5cf3-8498-166310b9e5cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/c2f38c5e-97f8-5f37-8914-9cb38d7add3d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/f18d5ab5-8cf7-5834-a0f5-bd76822d3dca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/01d41dab-c16a-561a-bc0b-19cf45f1ef12/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/da708ca2-877c-5c90-b198-ed0bfd2b1311/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/feeadb66-62e5-557e-9efc-127817f50ab0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/c6c58370-2901-5f07-9950-7b2ddac722de/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/c4ae93ee-0dda-5f75-81b6-0b0f1f40885b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp312-cp312-win\_amd64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/e6dc0a0e-426f-5248-a200-633eb6a6ce08/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/faada4ac-914d-5761-8d6b-67c8dcaebac9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/5e433223-5296-518b-961b-c86b587408d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/15ab51f9-07f3-5dae-80e5-d057418bf2e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/9d206c9a-8fc4-56d1-a6a5-1ac2f1bcdd5f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/31489018-5318-5cb4-b157-ee980cfae9fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/12f27fef-b67e-537b-9db6-5f0979cec3e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/f67c2e5d-62fa-5bc9-b9b7-1df96ec33c96/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313-win\_amd64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/4e2d02d8-f8db-59c0-9933-56f39d7c3a94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313t-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/ea544bdd-9f23-5a7f-a86c-4f8de32fea08/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313t-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/22e11a4d-f8be-5468-8148-de04b1e797ec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313t-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/b00d6161-4d7a-576b-8647-003a582141d9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/d73f29c3-ecea-55fa-9fe2-50d75b2abc1a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/488cdf08-f55e-50c9-84eb-05bdfac7441e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/7587ca20-27cc-51db-a6e7-470a26150fc2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/a45ffe13-074c-53d3-82c6-2cc5f3d1c827/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/4ea53228-d937-5650-b0c4-bae8f7b43e15/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/d0dc7643-3d29-5413-b9a4-46422e2205a2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/e2edb7e3-ddc8-5ea8-a89d-3e592d845975/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/b9750782-ef70-5f59-b135-25002ba3300d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-win32.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/db08d3b3-f541-5c1f-a386-d698ace0bb24/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314-win\_amd64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/1a6d31de-a85d-58b2-98be-e2cb85c5737c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/0a3ced25-7e72-51a4-839e-1e1d44a60702/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/2e0772e6-33b5-5dd8-99a6-4a25c19a72d4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314t-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/6ecaf150-73b7-5386-a7b1-1b4d11e9566f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/14881861-bd35-5e29-898d-2da674d6de60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp315-cp315-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/f74822ff-0613-5170-957c-4813475658a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/f06d7451-6848-5874-9209-33a355122143/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp37-cp37m-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/ee3ad517-956c-5833-9e9e-b679cebe65bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp37-cp37m-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/edea80bf-46ff-586f-aeab-b69adc7f7c66/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp37-cp37m-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/55195306-c726-528c-86b1-96e12c61eec1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp37-cp37m-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/9508e752-2c65-5fbf-8afa-bf5108637db2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp38-cp38-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/330f566b-5852-5634-989b-0f7aa0922401/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp38-cp38-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/e9216dab-04ee-54bf-95ee-953f40d7699e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp38-cp38-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/c392ba61-0a5f-5af2-89ba-f85e7671d9d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp38-cp38-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/e75bc9e2-e3c6-5f83-a63f-3ffbf7c78881/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp39-cp39-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/d49ff30d-f85a-5eaf-97c3-7ad8b2243f04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/4d2600e8-f1a5-5354-9039-118fc05cc966/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp39-cp39-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/ca74b640-89ca-5f52-b95e-a3c4ddeefe0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp39-cp39-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/07fa7e63-ba4d-5f74-a42d-3c008d967232/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp39-cp39-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/08c6b917-b651-5b4f-bde6-2693488e7889/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/153443e0-107c-562c-bbf7-6f4ab7388a7b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-pp311-pypy311\_pp73-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/6b0590ba-d7f4-52b1-b669-bc1d756f3379/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/fe46e65d-c55d-5e21-947d-faf250fcbb70/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/f3a4dd66-e129-507a-b78d-d8ed93848634/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-pp311-pypy311\_pp73-musllinux\_1\_2\_armv7l.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/4e21acff-70b3-571f-8609-99ffd17eb4e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/66eb499e-906e-5be8-90dd-5dda5e573bc6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ### tcfetch-0.5.2-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl - [tcfetch-0.5.2.dist-info/sboms/tcfetch.cyclonedx.json](https://pypi.sbomify.com/artifact/8ac914ee-efbf-53bf-8195-8de4c11418dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 28 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-25800](https://insights.sbomify.com/CVE-2026-25800/) | high (7.5) | quinn-proto 0.11.14 (crates.io) | 0.11.15 | Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly | | [RUSTSEC-2026-0340](https://osv.dev/vulnerability/RUSTSEC-2026-0340) | high (7.5) | quinn-proto 0.11.14 (crates.io) | 0.11.18 | Peer minimum ACK delay can panic quinn-proto when ACK\_FREQUENCY transmission is enabled | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [CVE-2026-123613](https://insights.sbomify.com/CVE-2026-123613/) | medium (5.3) | rustls 0.23.40 (crates.io) | 0.23.45 | TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | | [CVE-2026-123609](https://insights.sbomify.com/CVE-2026-123609/) | medium (4.0) | rustls 0.23.40 (crates.io) | 0.23.46 | \`Debug\` impls for client session values expose TLS secrets | | [CVE-2026-123610](https://insights.sbomify.com/CVE-2026-123610/) | low (3.7) | rustls 0.23.40 (crates.io) | 0.23.46 | Brotli certificate decompression can allocate up to 1 GiB before authentication | | [CVE-2026-123611](https://insights.sbomify.com/CVE-2026-123611/) | low (3.7) | rustls 0.23.40 (crates.io) | 0.23.46 | Unauthenticated ServerHello can downgrade later connections to classical key exchange | | [RUSTSEC-2026-0338](https://osv.dev/vulnerability/RUSTSEC-2026-0338) | unknown | quinn-proto 0.11.14 (crates.io) | 0.11.18 | Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads | | [RUSTSEC-2026-0339](https://osv.dev/vulnerability/RUSTSEC-2026-0339) | unknown | quinn-proto 0.11.14 (crates.io) | 0.11.17 | Unbounded growth of pending connection ID retirements in quinn-proto | | [RUSTSEC-2026-0342](https://osv.dev/vulnerability/RUSTSEC-2026-0342) | unknown | quinn-proto 0.11.14 (crates.io) | 0.11.17 | Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | rustls-webpki 0.103.13 (crates.io) | 0.103.16 | Certificate verification may accept distrusted intermediates | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.52.3 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | | [CVE-2026-111943](https://insights.sbomify.com/CVE-2026-111943/) | unknown | webpki-roots 1.0.7 (crates.io) | 1.0.10 | Bundled root certificates allow trust in distrusted emSign intermediates | | [RUSTSEC-2026-0391](https://osv.dev/vulnerability/RUSTSEC-2026-0391) | unknown | zstd 0.13.3 (crates.io) | 0.13.4 | Data from an abandoned stream leaks into the next stream on a reused context | | [RUSTSEC-2026-0395](https://osv.dev/vulnerability/RUSTSEC-2026-0395) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free with \`CParameter::StableInBuffer\` | | [RUSTSEC-2026-0396](https://osv.dev/vulnerability/RUSTSEC-2026-0396) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`Seekable\` reads a NULL or out-of-bounds seek table | | [RUSTSEC-2026-0397](https://osv.dev/vulnerability/RUSTSEC-2026-0397) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`OutBuffer::around\_pos\` exposes uninitialized memory | | [RUSTSEC-2026-0398](https://osv.dev/vulnerability/RUSTSEC-2026-0398) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | \`Seekable::decompress\` sets a \`Vec\` length beyond its capacity for offsets past the end | | [RUSTSEC-2026-0399](https://osv.dev/vulnerability/RUSTSEC-2026-0399) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free through \`init\_using\_cdict\` and \`init\_using\_ddict\` | | [RUSTSEC-2026-0400](https://osv.dev/vulnerability/RUSTSEC-2026-0400) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free of a dictionary after a one-shot call on a context with an open stream | | [RUSTSEC-2026-0401](https://osv.dev/vulnerability/RUSTSEC-2026-0401) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Out-of-bounds read in \`train\_from\_buffer\` when sample sizes overflow | | [RUSTSEC-2026-0402](https://osv.dev/vulnerability/RUSTSEC-2026-0402) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Heap buffer overflow in \`CCtx::try\_clone\` on a multithreaded context | | [RUSTSEC-2026-0403](https://osv.dev/vulnerability/RUSTSEC-2026-0403) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Uninitialized memory exposed when streaming decompression of a legacy frame fails | | [RUSTSEC-2026-0404](https://osv.dev/vulnerability/RUSTSEC-2026-0404) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Double free in \`DCtx::try\_clone\` | | [RUSTSEC-2026-0405](https://osv.dev/vulnerability/RUSTSEC-2026-0405) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Out-of-bounds read with an out-of-range \`InBuffer::pos\` | | [RUSTSEC-2026-0406](https://osv.dev/vulnerability/RUSTSEC-2026-0406) | unknown | zstd-safe 7.2.4 (crates.io) | 7.4.0 | Use-after-free when changing a multithreaded context with an unfinished frame | | [RUSTSEC-2026-0410](https://osv.dev/vulnerability/RUSTSEC-2026-0410) | unknown | zstd-sys 2.0.16+zstd.1.5.7 (crates.io) | 2.1.2 | WebAssembly allocator shim corrupts memory on allocation failure | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tcfetch@0.5.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tcfetch/0.5.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tcfetch/0.5.2