# SBOM for fast-unidecode 1.0.3.post1

> Provides pure ASCII transliterations of Unicode strings.

The Python package fast-unidecode 1.0.3.post1 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/fast-unidecode@1.0.3.post1`
- PyPI: https://pypi.org/project/fast-unidecode/1.0.3.post1/
- Author: Daniel Stancl \<daniel.stancl@gmail.com\>, Amit Chowdhury \<amitc97@gmail.com\>
- License: MIT
- Homepage: <https://github.com/stancld/rust-unidecode/>
- Source Code: <https://github.com/stancld/rust-unidecode/>

## SBOMs

### fast\_unidecode-1.0.3.post1-cp311-cp311-macosx\_11\_0\_arm64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/718c013b-b5f2-5a05-9a0b-7495fe838454/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp311-cp311-manylinux\_2\_28\_aarch64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/db29b169-306b-531c-a723-733aa3764f27/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/1b2c195d-4e54-5729-9797-d91d74660b63/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp312-cp312-macosx\_11\_0\_arm64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/01525fea-b69f-5045-8101-4ebfef3db782/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp312-cp312-manylinux\_2\_28\_aarch64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/62cb14bf-5fa5-56a1-b22f-5f9faf1a68f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/cd6d97a5-efc3-5c70-90e3-60351d0bb11d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp313-cp313-macosx\_11\_0\_arm64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/4f8d14ce-0c7b-503d-bd7f-36cc668f0e70/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp313-cp313-manylinux\_2\_28\_aarch64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/b386078f-efa5-58de-8ef1-eaeb7a1eee46/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/b0e94784-e5b0-5181-9831-7f6e964a2661/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp314-cp314-macosx\_11\_0\_arm64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/4b6bc004-3d87-527e-91e8-9e5ef75adff3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp314-cp314-manylinux\_2\_28\_aarch64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/3cd1e8a5-c412-559e-9a07-13fa95e79254/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### fast\_unidecode-1.0.3.post1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [fast\_unidecode-1.0.3.post1.dist-info/sboms/fast\_unidecode.cyclonedx.json](https://pypi.sbomify.com/artifact/6d6b7d3f-dac3-50cc-80da-9c7b196c288c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/fast-unidecode@1.0.3.post1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/fast-unidecode/1.0.3.post1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/fast-unidecode/1.0.3.post1