# SBOM for bitgauss 0.4.3 > A fast boolean linear algebra library The Python package bitgauss 0.4.3 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/bitgauss@0.4.3` - PyPI: https://pypi.org/project/bitgauss/0.4.3/ - Requires Python: \>=3.9 - Homepage: - repository: ## SBOMs ### bitgauss-0.4.3-cp314-cp314t-macosx\_10\_12\_x86\_64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/c51b3d46-4e94-5084-a21f-b667e2debd5b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-macosx\_11\_0\_arm64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/1f629c9c-3c1e-5a77-8119-e1bd906ef079/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/4f06f64c-1117-5dce-97ad-a508032380b7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/782efd38-da89-56b1-b744-dae7a4f530eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/cdd1dae1-4e85-551f-8bd5-c3550a96fd58/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/2fe4c65d-3ebb-509e-8666-d9b0a5d5621d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/e9551c02-aaed-51a8-b276-58aa593ab0f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/65b31599-951e-5d90-8375-9f0ac88b4df3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/d2522528-4dea-56c3-93d0-465630860468/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/137a8abc-d6ef-5e88-8e79-baf0ca5fb2f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-musllinux\_1\_2\_i686.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/a6685f38-5a52-5a3d-b146-fa153e74df7d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/d0c4b701-9b7f-55ef-ba41-151bbf80bc26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-win32.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/340170b8-f287-5c54-b667-735ce3206833/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-win\_amd64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/012893a5-6833-5618-bd40-410a82f9d99c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp314-cp314t-win\_arm64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/bb50f164-7970-5d0d-8a5d-cce417cab9b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-macosx\_10\_12\_x86\_64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/2262808c-e526-50d7-ada8-25342c60bafd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-macosx\_11\_0\_arm64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/b5b243c0-aeb7-54e9-b365-4a6b5e39810f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/ad80b6a7-c0a2-5068-9f99-26408496db23/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/67fe2c37-4fbb-54b2-8c11-920823fb1138/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/0c4a5312-7e27-55e2-9bd0-c728d6956293/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/aba29253-1fd7-5273-83ea-b3a3ce6be6d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/197ee3a8-676b-516f-964d-e1f4292f8ea1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/f6f9bc76-f56c-5727-9daa-5eeeb0fefd00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-musllinux\_1\_2\_aarch64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/10b74943-da44-5b90-a6fe-215f19f26123/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-musllinux\_1\_2\_armv7l.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/7ac310bc-b25e-599c-bcf2-dc5aa37e4a11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-musllinux\_1\_2\_i686.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/e495487e-e5de-5123-aca6-7e66a879e623/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-musllinux\_1\_2\_x86\_64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/cfcaaec5-5144-5e1a-8e09-877259b6e85d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-win32.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/4e3e651e-cca9-5917-9f21-6b034265d218/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-win\_amd64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/86a6d312-6409-52c8-8bb8-0010958e9747/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### bitgauss-0.4.3-cp39-abi3-win\_arm64.whl - [bitgauss-0.4.3.dist-info/sboms/bitgauss\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/1bc769f1-37e2-5e56-bbe4-bb567f1655ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.1 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bitgauss@0.4.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bitgauss/0.4.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bitgauss/0.4.3