SBOM for xlwings 0.37.8

Make Excel fly: Interact with Excel from Python and vice versa.

CycloneDX 10 known vulnerabilities

License: BSD 3-clause
Requires Python: >=3.11
PyPI: xlwings 0.37.8
Changelog: https://docs.xlwings.org/en/stable/whatsnew.html
Documentation: https://docs.xlwings.org
Funding: https://www.xlwings.org/pricing
Homepage: https://www.xlwings.org
Source: https://github.com/xlwings/xlwings

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

xlwings-0.37.8-cp311-cp311-macosx_10_12_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp311-cp311-macosx_11_0_arm64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp311-cp311-musllinux_1_2_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp311-cp311-musllinux_1_2_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-macosx_10_12_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-macosx_11_0_arm64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-musllinux_1_2_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp312-cp312-musllinux_1_2_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-macosx_10_12_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-macosx_11_0_arm64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-musllinux_1_2_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp313-cp313-musllinux_1_2_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-macosx_10_12_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-macosx_11_0_arm64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-musllinux_1_2_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-musllinux_1_2_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp314-cp314-pyemscripten_2026_0_wasm32.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-macosx_10_12_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-macosx_11_0_arm64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-musllinux_1_2_aarch64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

xlwings-0.37.8-cp315-cp315-musllinux_1_2_x86_64.whl

xlwings.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 10 known vulnerabilities

Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
CVE-2026-115905 zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE	Critical 10.0	zip 0.6.6 crates.io	9.0.5
RUSTSEC-2026-0369 ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target	Critical 9.1	zip 0.6.6 crates.io	9.0.0
RUSTSEC-2026-0436 Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input	High 7.5	calamine 0.22.0 crates.io	0.38.0
RUSTSEC-2026-0194 Quadratic run time when checking a start tag for duplicate attribute names	High 7.5	quick-xml 0.30.0 crates.io	0.41.0
RUSTSEC-2026-0195 Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service	High 7.5	quick-xml 0.30.0 crates.io	0.41.0
CVE-2026-115909 zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size	High 7.5	zip 0.6.6 crates.io	9.0.0
RUSTSEC-2026-0367 Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation	High 7.3	zip 0.6.6 crates.io	9.0.0
CVE-2026-115906 zip: AES Entry HMAC Authentication Bypass on Premature EOF	Medium 6.5	zip 0.6.6 crates.io	9.0.0
RUSTSEC-2025-0056 adler crate is unmaintained, use adler2 instead	Unknown	adler 1.0.2 crates.io	—
RUSTSEC-2026-0368 zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory	Unknown	zip 0.6.6 crates.io	9.0.0

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]

Package information

Available SBOMs

xlwings-0.37.8-cp311-cp311-macosx_10_12_x86_64.whl

xlwings-0.37.8-cp311-cp311-macosx_11_0_arm64.whl

xlwings-0.37.8-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings-0.37.8-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings-0.37.8-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings-0.37.8-cp311-cp311-musllinux_1_2_aarch64.whl

xlwings-0.37.8-cp311-cp311-musllinux_1_2_x86_64.whl

xlwings-0.37.8-cp312-cp312-macosx_10_12_x86_64.whl

xlwings-0.37.8-cp312-cp312-macosx_11_0_arm64.whl

xlwings-0.37.8-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings-0.37.8-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings-0.37.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings-0.37.8-cp312-cp312-musllinux_1_2_aarch64.whl

xlwings-0.37.8-cp312-cp312-musllinux_1_2_x86_64.whl

xlwings-0.37.8-cp313-cp313-macosx_10_12_x86_64.whl

xlwings-0.37.8-cp313-cp313-macosx_11_0_arm64.whl

xlwings-0.37.8-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings-0.37.8-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings-0.37.8-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings-0.37.8-cp313-cp313-musllinux_1_2_aarch64.whl

xlwings-0.37.8-cp313-cp313-musllinux_1_2_x86_64.whl

xlwings-0.37.8-cp314-cp314-macosx_10_12_x86_64.whl

xlwings-0.37.8-cp314-cp314-macosx_11_0_arm64.whl

xlwings-0.37.8-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings-0.37.8-cp314-cp314-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings-0.37.8-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings-0.37.8-cp314-cp314-musllinux_1_2_aarch64.whl

xlwings-0.37.8-cp314-cp314-musllinux_1_2_x86_64.whl

xlwings-0.37.8-cp314-cp314-pyemscripten_2026_0_wasm32.whl

xlwings-0.37.8-cp315-cp315-macosx_10_12_x86_64.whl

xlwings-0.37.8-cp315-cp315-macosx_11_0_arm64.whl

xlwings-0.37.8-cp315-cp315-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

xlwings-0.37.8-cp315-cp315-manylinux_2_17_armv7l.manylinux2014_armv7l.whl

xlwings-0.37.8-cp315-cp315-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

xlwings-0.37.8-cp315-cp315-musllinux_1_2_aarch64.whl

xlwings-0.37.8-cp315-cp315-musllinux_1_2_x86_64.whl

Known vulnerabilities

Access via TEA