# SBOM for ua-parser-rs 0.1.5 > native accelerator for ua-parser The Python package ua-parser-rs 0.1.5 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/ua-parser-rs@0.1.5` - PyPI: https://pypi.org/project/ua-parser-rs/0.1.5/ - License: Apache 2.0 - Requires Python: \>=3.10 - Homepage: - Source Code: ## SBOMs ### ua\_parser\_rs-0.1.5-cp310-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2b27f53d-f6c9-5ace-8eca-722274d13545/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2e4a0d18-dfff-53bf-a7ff-85397444e445/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b30a1428-e974-59d8-b273-481927e66426/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/cbbe7b84-2e64-5abe-bcf7-41225bd3ffdd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-manylinux\_2\_34\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/44f9449e-4c17-5798-a39f-ab4ed487f588/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/53b989ae-7f83-5acb-a190-bcf79144e7e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2fb81b07-4d9a-5247-910d-e253c6e6c79e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp310-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/279a5a1a-a516-5dc1-88ff-eb8f9acf5178/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d87818be-0cf7-5a9d-92e4-5e45eafa3038/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/310e61ff-9c50-504e-a2de-7e62ddf776ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c5dcdbbb-ad21-52e2-99c8-8ed33708dc55/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d12d2f8b-1a64-5db2-88d4-f942d4787ad8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-manylinux\_2\_34\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d5683ae2-84ef-5ba8-8237-6079ee72e034/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e4cb935b-d0c2-5cf7-b5e0-a5bfa46dc216/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8eafe2d5-5ecc-5dc6-9606-2f02a0dea9ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4330cc74-78f3-5b2d-af2f-5058167b94b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/50b82eba-7ba9-5b90-be41-12fbe2c487d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/31d59dc6-8e15-5041-8cb7-b3017068ae00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1fda496b-4e2f-5f0c-977d-5069f231cc30/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/916d3afb-bd8f-5ce0-a8a2-6e3fd22ceb94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-manylinux\_2\_34\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a09b614a-a09c-5d08-9b42-0030f0db45f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9a1225ad-2663-5dbf-bde6-156206a2c962/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-graalpy312-graalpy250\_312\_native-win\_amd64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ba8ddbc0-7c6f-5705-90cd-7186f9816e40/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/006359ef-8006-5156-9d24-36f92e9301f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2f140605-effd-567f-ab04-cf54f821de77/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/206f8e6e-67d5-5cd5-948a-d1874798ca5d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/15efe087-8093-5515-9e88-23e487f7cb2c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-manylinux\_2\_34\_aarch64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5784718e-b6af-5d41-8417-e2d6478c3956/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/258e21b9-cbfd-55a0-ab9c-0de5584acb2b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ua\_parser\_rs-0.1.5-pp311-pypy311\_pp73-win\_amd64.whl PEP 740 attestation verified (GitHub, ua-parser/uap-python, workflow release-wheels.yml). - [ua\_parser\_rs-0.1.5.dist-info/sboms/ua-parser-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7d426898-00bc-5f40-850d-0ca0b5987d82/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/ua-parser-rs@0.1.5 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/ua-parser-rs/0.1.5.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/ua-parser-rs/0.1.5