diff --git a/sbom/cve-bin-tool-py3.11.json b/sbom/cve-bin-tool-py3.11.json index 910eafe3d3..9ac01ebb32 100644 --- a/sbom/cve-bin-tool-py3.11.json +++ b/sbom/cve-bin-tool-py3.11.json @@ -2,10 +2,10 @@ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", - "serialNumber": "urn:uuid:2517bccd-0e14-4a43-8f1c-68ee87099e0f", + "serialNumber": "urn:uuid:eb1f2323-fcd2-4d64-95cf-1889f50d4ada", "version": 1, "metadata": { - "timestamp": "2024-05-20T00:28:17Z", + "timestamp": "2024-05-27T00:28:41Z", "tools": { "components": [ { @@ -2314,7 +2314,7 @@ "type": "library", "bom-ref": "54-requests", "name": "requests", - "version": "2.31.0", + "version": "2.32.2", "supplier": { "name": "Kenneth Reitz", "contact": [ @@ -2323,14 +2323,8 @@ } ] }, - "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*", "description": "Python HTTP for Humans.", - "hashes": [ - { - "alg": "SHA-1", - "content": "147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4" - } - ], "licenses": [ { "license": { @@ -2341,12 +2335,12 @@ ], "externalReferences": [ { - "url": "https://pypi.org/project/requests/2.31.0", + "url": "https://pypi.org/project/requests/2.32.2", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/requests@2.31.0", + "purl": "pkg:pypi/requests@2.32.2", "properties": [ { "name": "language", diff --git a/sbom/cve-bin-tool-py3.11.spdx b/sbom/cve-bin-tool-py3.11.spdx index b0801539dc..dc25b2ecb4 100644 --- a/sbom/cve-bin-tool-py3.11.spdx +++ b/sbom/cve-bin-tool-py3.11.spdx @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: Python-cve-bin-tool -DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-a18e0454-728e-4a13-8cfd-68e27dec2387 +DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-1e1f34fe-9584-4982-9f48-6e445a1052e9 LicenseListVersion: 3.22 Creator: Tool: sbom4python-0.10.4 -Created: 2024-05-20T00:26:55Z +Created: 2024-05-27T00:27:17Z CreatorComment: This document has been automatically generated. ##### @@ -856,19 +856,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:* PackageName: requests SPDXID: SPDXRef-Package-54-requests -PackageVersion: 2.31.0 +PackageVersion: 2.32.2 PrimaryPackagePurpose: LIBRARY PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.org) -PackageDownloadLocation: https://pypi.org/project/requests/2.31.0 +PackageDownloadLocation: https://pypi.org/project/requests/2.32.2 FilesAnalyzed: false -PackageChecksum: SHA1: 147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4 -PackageLicenseDeclared: NOASSERTION +PackageLicenseDeclared: Apache-2.0 PackageLicenseConcluded: Apache-2.0 -PackageLicenseComments: requests declares Apache 2.0 which is not currently a valid SPDX License identifier or expression. PackageCopyrightText: NOASSERTION PackageSummary: Python HTTP for Humans. -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.31.0 -ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:* +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.32.2 +ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:* ##### PackageName: certifi