# SBOM for tesseract-robotics 0.35.0

> Tesseract Python Library

The Python package tesseract-robotics 0.35.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/tesseract-robotics@0.35.0`
- PyPI: https://pypi.org/project/tesseract-robotics/0.35.0/
- Author: John Wason
- License: Apache-2.0
- Documentation: <https://tesseract-robotics.github.io/tesseract_python/>
- Homepage: <https://tesseract-robotics.github.io/tesseract_python/>
- Source: <https://github.com/tesseract-robotics/tesseract_python>
- Tracker: <https://github.com/tesseract-robotics/tesseract_python/issues>

## SBOMs

### tesseract\_robotics-0.35.0-cp310-cp310-manylinux\_2\_39\_aarch64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/df92acc8-786f-5666-9352-18e8fd407321/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp310-cp310-manylinux\_2\_39\_x86\_64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d5718703-51c1-534d-bd3a-647a7a37d67a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp311-cp311-manylinux\_2\_39\_aarch64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ae528381-9107-50ba-8de9-693ab2e27275/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp311-cp311-manylinux\_2\_39\_x86\_64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/41c27aa3-91ce-56d7-a318-285ec5fe6317/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp312-cp312-manylinux\_2\_39\_aarch64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2dc8fe26-5742-5cd6-8ab7-f7240ec7c55b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp312-cp312-manylinux\_2\_39\_x86\_64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e559354b-59c9-5347-88bb-bb92517119c2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp313-cp313-manylinux\_2\_39\_aarch64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f3ec2f1d-a65a-5b98-b95e-7e4b61e4973c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp313-cp313-manylinux\_2\_39\_x86\_64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6776233b-f220-5729-ad3d-e66bfe367d1b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp314-cp314-manylinux\_2\_39\_aarch64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/beae2a94-6260-59d0-92e0-748287cac474/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### tesseract\_robotics-0.35.0-cp314-cp314-manylinux\_2\_39\_x86\_64.whl

- [tesseract\_robotics-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f67a06c5-5850-593d-b674-cdb9b8d38ee9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-41989](https://insights.sbomify.com/CVE-2026-41989/) | medium (6.7) | libgcrypt20 1.10.3-2build1 (Ubuntu) | none listed | libgcrypt20 vulnerabilities |
| [CVE-2024-2236](https://insights.sbomify.com/CVE-2024-2236/) | medium (5.9) | libgcrypt20 1.10.3-2build1 (Ubuntu) | none listed | libgcrypt20 vulnerability |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/tesseract-robotics@0.35.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/tesseract-robotics/0.35.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/tesseract-robotics/0.35.0