# SBOM for cartesian-tree 0.4.0

> Build hierarchical Cartesian coordinate systems to easily transform poses.

The Python package cartesian-tree 0.4.0 ships 36 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/cartesian-tree@0.4.0`
- PyPI: https://pypi.org/project/cartesian-tree/0.4.0/
- Author: Kn0g
- Requires Python: \>=3.9
- Homepage: <https://github.com/Kn0g/cartesian-tree>

## SBOMs

### cartesian\_tree-0.4.0-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/62afab06-5449-5f06-944a-3a89048b1764/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/3966630b-83e7-539d-b80b-b4cd57b66821/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp310-cp310-manylinux\_2\_34\_x86\_64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/abaa8cbc-b69a-55f0-b20f-69e9dce6a5d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp310-cp310-win\_amd64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/8ce74ee8-48dc-5431-95a4-45a943d494e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/e6136e6f-7635-5649-9c14-888aca9f666c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp311-cp311-macosx\_11\_0\_arm64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/8bf95dca-21ec-54d5-8bd5-e0131e76e995/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/5c3fe6c6-661c-5bb7-8c99-dcd712071691/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/6d911b74-77e9-54d9-8347-ba64bd8768c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp311-cp311-win\_amd64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/4e50d449-d004-516c-a7c6-46541edad172/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/bd50e6aa-fc82-5ec1-9f3d-c502f9dab2a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp312-cp312-macosx\_11\_0\_arm64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/f83fa77f-005f-5544-adb9-c8dd4e384e35/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/c923f081-f46f-5faf-b5b1-34712fda541c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/1d9d0ea6-f2f7-5067-8f7e-2550855eb2f2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp312-cp312-win\_amd64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/0105a20c-58b2-56f3-8d8b-495981c509f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/21b1fe67-0f13-567d-a598-0135fe897924/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp313-cp313-macosx\_11\_0\_arm64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/c080fcb4-6fcc-5b67-8d1b-9a68291a36f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/ed01ca5c-a074-5884-93b8-ffeefcc430ac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/95177211-7cd9-54f8-aadd-95aa61aba19e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp313-cp313-win\_amd64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/d282b443-63b2-5e51-8b07-d60e54ed8000/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/e00f381d-0f70-50ba-9fc9-0deaacdfa080/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-macosx\_11\_0\_arm64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/3fc55e11-f43a-5b6b-9a8c-79700adb4b93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/58039c69-2dc5-5b6a-a649-a23827a2be26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/f7ec034a-2bbb-528a-ae29-2891b15a6349/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-manylinux\_2\_34\_x86\_64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/87484dec-23fd-5b59-a44f-3408a5af2297/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-win32.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/298d10ee-b65c-5ccf-bb12-0dfb1ba82eb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314-win\_amd64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/7266bef2-c37a-5c0c-8f2b-ce245987e35a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/4f100dda-669e-5d4c-8552-c029070c36ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/226f660e-7c78-54e7-bacd-d74e59fa9a6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/fd172721-cd15-50ca-805d-d3543f9c8118/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-cp39-cp39-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/f089818c-9cd8-58e7-8757-0b1daf731e6e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-pp310-pypy310\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/ff4170c7-90a2-5084-bfe4-ba6807b59f9a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-pp310-pypy310\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/1beabcfa-5d2f-57d0-bc6c-32433848350f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/2439515b-aad5-5935-99e7-27aa55a3d660/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-pp311-pypy311\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/5fe2773c-8640-5428-8c4c-d6f879487b83/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-pp39-pypy39\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/bc09c8c8-fbec-59f7-91cf-313b2ce45448/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### cartesian\_tree-0.4.0-pp39-pypy39\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [cartesian\_tree-0.4.0.dist-info/sboms/CartesianTree.cyclonedx.json](https://pypi.sbomify.com/artifact/1c53742e-d2ae-55de-b698-98a6a647ae09/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/cartesian-tree@0.4.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/cartesian-tree/0.4.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/cartesian-tree/0.4.0