# SBOM for fast-crewai 0.1.5

> High-performance acceleration for CrewAI - 2-5x faster memory, tools, and task execution with zero code changes

The Python package fast-crewai 0.1.5 ships 15 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/fast-crewai@0.1.5`
- PyPI: https://pypi.org/project/fast-crewai/0.1.5/
- Requires Python: \>=3.11
- Bug Tracker: <https://github.com/neul-labs/fast-crewai/issues>
- Documentation: <https://neul-labs.github.io/fast-crewai>
- Homepage: <https://github.com/neul-labs/fast-crewai>
- Repository: <https://github.com/neul-labs/fast-crewai>

## SBOMs

### fast\_crewai-0.1.5-cp311-cp311-macosx\_10\_12\_x86\_64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/985a6b76-22c0-55e1-99c9-a5d4b3fb4f5e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp311-cp311-macosx\_11\_0\_arm64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/4439892f-dd93-5cc4-9585-6834a79ea921/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/d60e8780-0559-59dc-b213-c9f97264357b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/03ba3df4-11c6-58e5-91ca-66cb8a618e9f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp311-cp311-win\_amd64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/3fd3563a-9348-58b8-85a1-49648c5ce9e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp312-cp312-macosx\_10\_12\_x86\_64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/95291b9b-e7f2-5e46-9e2e-18bf53266969/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp312-cp312-macosx\_11\_0\_arm64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/2c045a65-488d-5862-963c-11f4ee719f39/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/4eb1d2d1-bcb4-5dab-8c11-75adea32c87b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/81152dcf-4d76-5afb-965e-90dad00530ff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp312-cp312-win\_amd64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/c7f58168-0427-5aef-aed5-a769aa5b9301/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp313-cp313-macosx\_10\_12\_x86\_64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/27cb3a82-b82e-53fc-9d8b-9fd9e2316806/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp313-cp313-macosx\_11\_0\_arm64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/c1760b8a-ba34-5d04-9431-f408ba0bb805/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/6d6a8b0f-2783-558c-a7e0-95121945f8d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/84f25988-c83b-5e6b-973b-5b017a4db0e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### fast\_crewai-0.1.5-cp313-cp313-win\_amd64.whl

- [fast\_crewai-0.1.5.dist-info/sboms/fast-crewai.cyclonedx.json](https://pypi.sbomify.com/artifact/21021ede-8962-5acf-a820-20a444575de3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.24.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [CVE-2026-119375](https://insights.sbomify.com/CVE-2026-119375/) | medium (6.8) | libsqlite3-sys 0.37.0 (crates.io) | 0.39.0 | \`libsqlite3-sys\` via C SQLite CVE-2026-119375 |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.24.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.100 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |
| [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.48.0 (crates.io) | 1.51.6 | \`AsyncFd::new\` and related constructors violate I/O safety |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/fast-crewai@0.1.5
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/fast-crewai/0.1.5.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/fast-crewai/0.1.5