SBOM for greyjack 0.3.9

GreyJack Solver is a constraint metaheuristic solver for Python, built on the robust foundations of Rust and Polars. It empowers you to tackle a wide array of constraint optimization problems, including continuous, integer, and mixed-integer challenges with ease and efficiency.

CycloneDX 27 known vulnerabilities

Requires Python: >=3.10
PyPI: greyjack 0.3.9
Documentation: https://github.com/CameleoGrey/greyjack-solver-python
Homepage: https://github.com/CameleoGrey/greyjack-solver-python
Issues: https://github.com/CameleoGrey/greyjack-solver-python/issues
Repository: https://github.com/CameleoGrey/greyjack-solver-python.git

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

greyjack-0.3.9-cp310-cp310-macosx_11_0_arm64.whl

greyjack.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 27 known vulnerabilities

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0194 Quadratic run time when checking a start tag for duplicate attribute names	High 7.5	quick-xml 0.39.4 crates.io	0.41.0
RUSTSEC-2026-0195 Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service	High 7.5	quick-xml 0.39.4 crates.io	0.41.0
CVE-2026-123609 `Debug` impls for client session values expose TLS secrets	Medium 4.0	rustls 0.23.45 crates.io	0.23.46
CVE-2026-123610 Brotli certificate decompression can allocate up to 1 GiB before authentication	Low 3.7	rustls 0.23.45 crates.io	0.23.46
CVE-2026-123611 Unauthenticated ServerHello can downgrade later connections to classical key exchange	Low 3.7	rustls 0.23.45 crates.io	0.23.46
CVE-2026-123612 Buffered application data sent to outer server after ECH rejection	Low 2.3	rustls 0.23.45 crates.io	0.23.46
GHSA-6g2r-675j-hx59 xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release	Low 2.3	xxhash-rust 0.8.15 crates.io	0.8.16
RUSTSEC-2025-0141 Bincode is unmaintained	Unknown	bincode 2.0.1 crates.io	—
RUSTSEC-2026-0204 Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid	Unknown	crossbeam-epoch 0.9.18 crates.io	0.9.20
RUSTSEC-2026-0186 Unchecked pointer offset in crate `memmap2`	Unknown	memmap2 0.9.5 crates.io	0.9.11
RUSTSEC-2026-0441 `pin-utils` is unmaintained	Unknown	pin-utils 0.1.0 crates.io	—
CVE-2026-111943 Certificate verification may accept distrusted intermediates	Unknown	rustls-webpki 0.103.15 crates.io	0.103.16
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.53.1 crates.io	1.53.3
RUSTSEC-2026-0391 Data from an abandoned stream leaks into the next stream on a reused context	Unknown	zstd 0.13.3 crates.io	0.13.4
RUSTSEC-2026-0395 Use-after-free with `CParameter::StableInBuffer`	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0396 `Seekable` reads a NULL or out-of-bounds seek table	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0397 `OutBuffer::around_pos` exposes uninitialized memory	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0398 `Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0399 Use-after-free through `init_using_cdict` and `init_using_ddict`	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0400 Use-after-free of a dictionary after a one-shot call on a context with an open stream	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0401 Out-of-bounds read in `train_from_buffer` when sample sizes overflow	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0402 Heap buffer overflow in `CCtx::try_clone` on a multithreaded context	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0403 Uninitialized memory exposed when streaming decompression of a legacy frame fails	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0404 Double free in `DCtx::try_clone`	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0405 Out-of-bounds read with an out-of-range `InBuffer::pos`	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0406 Use-after-free when changing a multithreaded context with an unfinished frame	Unknown	zstd-safe 7.2.3 crates.io	7.4.0
RUSTSEC-2026-0410 WebAssembly allocator shim corrupts memory on allocation failure	Unknown	zstd-sys 2.0.14+zstd.1.5.7 crates.io	2.1.2

Package information

Available SBOMs

greyjack-0.3.9-cp310-cp310-macosx_11_0_arm64.whl

greyjack-0.3.9-cp310-cp310-manylinux_2_28_x86_64.whl

greyjack-0.3.9-cp310-cp310-win_amd64.whl

greyjack-0.3.9-cp311-cp311-macosx_11_0_arm64.whl

greyjack-0.3.9-cp311-cp311-manylinux_2_28_x86_64.whl

greyjack-0.3.9-cp311-cp311-win_amd64.whl

greyjack-0.3.9-cp312-cp312-macosx_11_0_arm64.whl

greyjack-0.3.9-cp312-cp312-manylinux_2_28_x86_64.whl

greyjack-0.3.9-cp312-cp312-win_amd64.whl

greyjack-0.3.9-cp313-cp313-macosx_11_0_arm64.whl

greyjack-0.3.9-cp313-cp313-manylinux_2_28_x86_64.whl

greyjack-0.3.9-cp313-cp313-win_amd64.whl

greyjack-0.3.9-cp314-cp314-macosx_11_0_arm64.whl

greyjack-0.3.9-cp314-cp314-manylinux_2_28_x86_64.whl

greyjack-0.3.9-cp314-cp314-win_amd64.whl

Known vulnerabilities

Access via TEA