# SBOM for tleco 1.0.8 The Python package tleco 1.0.8 ships 42 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/tleco@1.0.8` - PyPI: https://pypi.org/project/tleco/1.0.8/ - Requires Python: \>=3.11 ## SBOMs ### tleco-1.0.8-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/1e2282ad-59ae-57c4-a5b9-ba72ce0077f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-macosx\_11\_0\_arm64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/f8db9e15-8d9a-5a56-a3ad-138c39b81d32/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/4511b85a-4517-511f-96bf-e5028fb5cc1a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/cff6b279-b5b4-5259-b445-9bb51ef044a6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/a643fd05-4ac4-5c6e-9a5c-a5852ee39e05/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/2796d5a1-e489-5b62-91ef-5866dc08a1aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/0eca46d4-098a-562a-8ccb-36eb9fcaa56d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/5501b0d6-1764-5b19-8f7a-7e34377c6afa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp311-cp311-win\_amd64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/3fbe4382-828a-561c-b3bf-3d86c94499cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/8e94d296-becd-5f23-ada3-62b90ad92d86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-macosx\_11\_0\_arm64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/301f5fb5-5fb0-553d-aef0-ace608621516/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/5f10ca92-e22d-594f-9c0d-2bf5d561d2f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/1e6e7d11-243c-58b1-a03b-466c95e5363a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/bcccbcc9-6f00-5888-9681-8c9e2204aa64/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/6fd7aa6d-84a9-5693-86eb-a152da257b08/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/a2fc6204-150e-5b34-8a0d-a98369326035/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/e8159cf1-cff4-5d50-aff8-c5b21772c0f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp312-cp312-win\_amd64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/d5657d2e-6afc-5922-bc37-a274981922d3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/08625376-eb7e-568c-a0fd-b5888b1f6371/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-macosx\_11\_0\_arm64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/238e95e0-9956-5158-a2ce-87d0cf91cd36/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/5e9bd146-0b9c-57fe-b6af-bcd6a7012f85/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/6279186f-3844-5813-ace2-6b6c3376155b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/ea6c75de-3a00-5f83-9cc0-51a6149a2de6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/a1b209ee-a73a-5aaa-b77c-c6bbaee135d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/b631fad9-1fea-56d1-ad99-7039533b914a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/f7737166-afd2-557c-ad21-19446156d70d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp313-cp313-win\_amd64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/a79b69d8-d6c6-591c-9c47-cfbc0e9ab2eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/3457ce8c-d562-5f06-b832-f3838e64b8de/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-macosx\_11\_0\_arm64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/84e0d894-f399-5f03-9662-5c06d046b896/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/880c6a09-dad2-57ea-9b4c-93a017cd6729/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/7f7db00d-1858-55b1-91e6-fceade12ffa7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/bf6294ee-9d4a-5c35-9dc4-1408556a394d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/e383a524-f7f0-5b8f-895d-62af3bbad6f8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/daffe0f4-cbf0-5845-97f6-f871c14a9831/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/e14219ef-f1f1-5574-92f7-f4187e42db0f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-cp314-cp314-win\_amd64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/e90c7c08-2f92-5d3c-9115-ece45512a3e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/4bc9ba32-c834-50f5-8c0e-fe66b3c668d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-pp311-pypy311\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/97573cf3-bf10-5e1e-83ee-685fb1203b8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-pp311-pypy311\_pp73-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/b66af6c3-d521-5eb8-ae35-d52972cc0529/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-pp311-pypy311\_pp73-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/e4cfbf4f-b45f-58a7-a5ef-a5f5c57b4039/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-pp311-pypy311\_pp73-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/56948a50-a749-5e11-b646-8056fd7acc7b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### tleco-1.0.8-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tleco-1.0.8.dist-info/sboms/tleco.cyclonedx.json](https://pypi.sbomify.com/artifact/5cc07d78-012b-5c5d-a767-97c5525754b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.19.2 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.19.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.19.2 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tleco@1.0.8 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tleco/1.0.8.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tleco/1.0.8