# SBOM for video-reader-rs 0.4.5 The Python package video-reader-rs 0.4.5 ships 21 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/video-reader-rs@0.4.5` - PyPI: https://pypi.org/project/video-reader-rs/0.4.5/ - Requires Python: \>=3.9 ## SBOMs ### video\_reader\_rs-0.4.5-cp314-cp314t-manylinux\_2\_34\_aarch64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35e751a1-a807-59b5-8c48-b5f32d3e06ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2b3f69e7-2b8c-564f-90f4-700f34b59150/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp314-cp314t-manylinux\_2\_34\_x86\_64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/05c7b805-91ae-5e84-9a2a-2ac65c4f4980/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/16597324-10e8-59fb-9acf-4b5daca15cb4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp314-cp314t-manylinux\_2\_39\_riscv64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/79855f41-4b73-5c8c-b20f-80b26ab3f293/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c175fbc5-7950-52fc-8846-1ca3cba63977/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp39-abi3-macosx\_14\_0\_arm64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/29cdf220-b699-5a94-b350-cccf8551fa78/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp39-abi3-macosx\_15\_0\_x86\_64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f59f57f8-c946-505f-b9d2-70603c36f648/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp39-abi3-manylinux\_2\_34\_aarch64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e0b48441-cba3-53d1-a111-c9954d884240/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/803d9905-13a9-5cb0-a64b-c7e38ea47f6b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp39-abi3-manylinux\_2\_34\_x86\_64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bfe85be0-6f50-5d94-8a87-4ba2e7eb7a36/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7338acd0-d828-5776-84f1-057fb95194fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp39-abi3-manylinux\_2\_39\_riscv64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c8abe769-2a11-57d6-bdad-836843532127/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5952288d-8f5e-5311-80a2-270d0b8ea13c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-cp39-abi3-win\_amd64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2e94036b-55a9-5ffe-8cec-dc8301b93ad1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-pp311-pypy311\_pp73-manylinux\_2\_34\_aarch64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e1acb10d-adf9-5ade-a24e-4b9c97cd07fd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8c1c042b-2024-5f39-85ea-1baac5458b00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-pp311-pypy311\_pp73-manylinux\_2\_34\_x86\_64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39f66106-3967-5ade-b312-d0c1a9b70642/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8d42f1df-a044-5dd2-b56e-3f05125eecad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### video\_reader\_rs-0.4.5-pp311-pypy311\_pp73-manylinux\_2\_39\_riscv64.whl - [video\_reader\_rs-0.4.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ff870a1-bafa-5fb0-9795-42b20635c0cd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [video\_reader\_rs-0.4.5.dist-info/sboms/video\_reader-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f50487b9-2ad0-5cb3-8b43-7c5a2a1ab8dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.48.0 (crates.io) | 1.51.6 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/video-reader-rs@0.4.5 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/video-reader-rs/0.4.5.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/video-reader-rs/0.4.5