# SBOM for wisio 0.2.2

> Analyze, visualize, and understand I/O performance issues in HPC workflows

The Python package wisio 0.2.2 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/wisio@0.2.2`
- PyPI: https://pypi.org/project/wisio/0.2.2/
- Requires Python: \>=3.10
- Changelog: <https://github.com/grc-iit/wisio/releases>
- Documentation: <https://grc.iit.edu/docs/category/wisio/>
- Homepage: <https://grc.iit.edu/docs/category/wisio/>
- Issues: <https://github.com/grc-iit/wisio/issues>
- Repository: <https://github.com/grc-iit/wisio>

## SBOMs

### wisio-0.2.2-cp310-cp310-manylinux\_2\_35\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8f0d2080-0999-5d0f-9d85-07c5bef27290/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### wisio-0.2.2-cp310-cp310-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/066644b6-ed10-53a8-bdf1-44d970ab04c7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### wisio-0.2.2-cp311-cp311-manylinux\_2\_35\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b296bf9b-ea29-5987-b5b0-f3fd72156c3e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### wisio-0.2.2-cp311-cp311-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bad7660b-7f66-55c0-a052-fa59206933b4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### wisio-0.2.2-cp312-cp312-manylinux\_2\_35\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d9709158-c2ac-55ec-a340-dba82cecef87/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### wisio-0.2.2-cp312-cp312-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/52a8d31d-d49d-5c73-b0c3-19bf8a41741a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### wisio-0.2.2-cp313-cp313-manylinux\_2\_35\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7f17a5c4-7687-58f3-8c81-54ccdec829db/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### wisio-0.2.2-cp313-cp313-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, grc-iit/wisio, workflow cd.yml).

- [wisio-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/99db087e-8113-555b-a79f-9df700718d7f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-74860](https://insights.sbomify.com/CVE-2026-74860/) | high (8.5) | libxml2 2.9.14+dfsg-1.3ubuntu3.8 (Ubuntu) | none listed | libxml2 vulnerabilities |
| [CVE-2026-74860](https://insights.sbomify.com/CVE-2026-74860/) | high (8.5) | libxml2 2.9.13+dfsg-1ubuntu0.12 (Ubuntu) | none listed | libxml2 vulnerabilities |
| [CVE-2026-11979](https://insights.sbomify.com/CVE-2026-11979/) | high (7.8) | libxml2 2.9.13+dfsg-1ubuntu0.13 (Ubuntu) | none listed |  |
| [CVE-2026-11979](https://insights.sbomify.com/CVE-2026-11979/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.8 (Ubuntu) | none listed |  |
| [CVE-2026-11979](https://insights.sbomify.com/CVE-2026-11979/) | high (7.8) | libxml2 2.9.13+dfsg-1ubuntu0.12 (Ubuntu) | none listed |  |
| [CVE-2026-11979](https://insights.sbomify.com/CVE-2026-11979/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.9 (Ubuntu) | none listed |  |
| [CVE-2026-76781](https://insights.sbomify.com/CVE-2026-76781/) | high (7.8) | libxml2 2.9.13+dfsg-1ubuntu0.13 (Ubuntu) | none listed | libxml2 vulnerabilities |
| [CVE-2026-76781](https://insights.sbomify.com/CVE-2026-76781/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.8 (Ubuntu) | none listed | libxml2 vulnerabilities |
| [CVE-2026-76781](https://insights.sbomify.com/CVE-2026-76781/) | high (7.8) | libxml2 2.9.13+dfsg-1ubuntu0.12 (Ubuntu) | none listed | libxml2 vulnerabilities |
| [CVE-2026-76781](https://insights.sbomify.com/CVE-2026-76781/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.9 (Ubuntu) | none listed | libxml2 vulnerabilities |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/wisio@0.2.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/wisio/0.2.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/wisio/0.2.2