# SBOM for canns-lib 0.12.0

> High-performance computational acceleration library for CANNS, providing optimized implementations for topological data analysis and neural network computations

The Python package canns-lib 0.12.0 ships 36 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/canns-lib@0.12.0`
- PyPI: https://pypi.org/project/canns-lib/0.12.0/
- Requires Python: \<4.0,\>=3.11
- Homepage: <https://github.com/routhleck/canns-lib>
- Repository: <https://github.com/routhleck/canns-lib>

## SBOMs

### canns\_lib-0.12.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/90bad29b-17d3-5fd2-87b8-a79cc746c9ff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp311-cp311-macosx\_11\_0\_arm64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/95222717-6436-567d-966d-d898387c4ff7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/40461780-ae48-57b6-8e66-e5b099fd25cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/78bca189-9d2e-5b20-9b1b-4258549bb126/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cdd879b6-e228-5954-9557-8cb53a309b4f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/f3dda688-7f86-59cd-ae8b-cf4c68c31521/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a13fdd41-f4a8-5b63-924f-9ce6b0d62f97/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/7bec8787-76d2-5b7c-a79d-b6970fb7623a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp311-cp311-win\_amd64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/cb474f38-a731-5f2b-95c0-0b147722766d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-macosx\_10\_13\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/e5ce901b-a929-5872-bf91-aa68836abe26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-macosx\_11\_0\_arm64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/e1a0f60b-92e4-5c59-aaba-785afd4a2f2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/59a78fa0-cb44-51e0-bbc3-4192aebe1819/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/55b70a0f-756f-5ce4-9854-fd859748a2e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/008695de-1161-57df-b80b-4c40c36070d8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/497e208c-ed55-5ee2-bf00-e3548d67b443/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a877eda1-2960-5475-b7a8-9a42e6a143b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/de3a8811-43b5-5a20-a4e3-f3040b1d93b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp312-cp312-win\_amd64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/ba1078c5-503c-5d75-93dd-c697d3e7734e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-macosx\_10\_13\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/6c471ffa-57cf-5d9d-964e-2bf98b444946/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-macosx\_11\_0\_arm64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/577d576a-3298-505c-8ead-302420b4ba0d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/ae3da5d8-0eff-5522-8562-45d79300bfbb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/12f1725c-fa52-5070-85d7-dc839a5fc1e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/55d463d4-c6b6-5d26-aae8-6e0730c84d14/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/2990ec48-ae57-58ba-bf16-ca49d7e7fbdf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/589c0504-99ef-5a54-8632-ae7ef1a83894/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/a2d89cd1-bf94-541d-bcce-77e7af0c4b8d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp313-cp313-win\_amd64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/90f92df0-50c9-51b0-a0be-c871c8265d44/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-macosx\_10\_15\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/10d278b4-b286-5f05-9d59-263e243b84fb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-macosx\_11\_0\_arm64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/0c65027d-b457-5a1b-9048-54f91137e5bb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/c1d8a2c2-2232-50bc-af25-f1349769231b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/a6174d01-4bc4-5acf-b232-4e337e9bb703/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8b7d6840-3060-54bf-9676-1a9b0bb1fdff/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/c59a8131-c554-573a-a316-cb96c4d08de3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [canns\_lib-0.12.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/84ebd917-f72d-5cdc-ad39-144d068dd499/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/9b36d594-e2ba-5653-af55-04ca3b5d45d4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### canns\_lib-0.12.0-cp314-cp314-win\_amd64.whl

- [canns\_lib-0.12.0.dist-info/sboms/canns-lib.cyclonedx.json](https://pypi.sbomify.com/artifact/9de782bf-2343-592e-b8a7-6fa8c82e0668/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/canns-lib@0.12.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/canns-lib/0.12.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/canns-lib/0.12.0