diff --git a/sbom/cve-bin-tool-py3.11.json b/sbom/cve-bin-tool-py3.11.json
index 910eafe3d3..9ac01ebb32 100644
--- a/sbom/cve-bin-tool-py3.11.json
+++ b/sbom/cve-bin-tool-py3.11.json
@@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
- "serialNumber": "urn:uuid:2517bccd-0e14-4a43-8f1c-68ee87099e0f",
+ "serialNumber": "urn:uuid:eb1f2323-fcd2-4d64-95cf-1889f50d4ada",
"version": 1,
"metadata": {
- "timestamp": "2024-05-20T00:28:17Z",
+ "timestamp": "2024-05-27T00:28:41Z",
"tools": {
"components": [
{
@@ -2314,7 +2314,7 @@
"type": "library",
"bom-ref": "54-requests",
"name": "requests",
- "version": "2.31.0",
+ "version": "2.32.2",
"supplier": {
"name": "Kenneth Reitz",
"contact": [
@@ -2323,14 +2323,8 @@
}
]
},
- "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*",
"description": "Python HTTP for Humans.",
- "hashes": [
- {
- "alg": "SHA-1",
- "content": "147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4"
- }
- ],
"licenses": [
{
"license": {
@@ -2341,12 +2335,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/requests/2.31.0",
+ "url": "https://pypi.org/project/requests/2.32.2",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/requests@2.31.0",
+ "purl": "pkg:pypi/requests@2.32.2",
"properties": [
{
"name": "language",
diff --git a/sbom/cve-bin-tool-py3.11.spdx b/sbom/cve-bin-tool-py3.11.spdx
index b0801539dc..dc25b2ecb4 100644
--- a/sbom/cve-bin-tool-py3.11.spdx
+++ b/sbom/cve-bin-tool-py3.11.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-a18e0454-728e-4a13-8cfd-68e27dec2387
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-1e1f34fe-9584-4982-9f48-6e445a1052e9
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.10.4
-Created: 2024-05-20T00:26:55Z
+Created: 2024-05-27T00:27:17Z
CreatorComment: This document has been automatically generated.
#####
@@ -856,19 +856,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*
PackageName: requests
SPDXID: SPDXRef-Package-54-requests
-PackageVersion: 2.31.0
+PackageVersion: 2.32.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.org)
-PackageDownloadLocation: https://pypi.org/project/requests/2.31.0
+PackageDownloadLocation: https://pypi.org/project/requests/2.32.2
FilesAnalyzed: false
-PackageChecksum: SHA1: 147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4
-PackageLicenseDeclared: NOASSERTION
+PackageLicenseDeclared: Apache-2.0
PackageLicenseConcluded: Apache-2.0
-PackageLicenseComments: requests declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Python HTTP for Humans.
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.31.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.32.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*
#####
PackageName: certifi