{"url":"https://pypi.sbomify.com/package/lightningcss/0.3.2","markdown_url":"https://pypi.sbomify.com/package/lightningcss/0.3.2.md","name":"lightningcss","version":"0.3.2","purl":"pkg:pypi/lightningcss@0.3.2","summary":"Python bindings for lightningcss.","author":null,"project_urls":{"Source":"https://github.com/pydsigner/python-lightningcss"},"requires_python":">=3.7","license":"Apache-2.0","classifiers":["Development Status :: 3 - Alpha","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust","Topic :: Internet :: WWW/HTTP","Topic :: Software Development :: Pre-processors"],"wheels":[{"filename":"lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/85/38/b3917844d08d7e321d4a6ab3e9f22f2f443ab43f8611658524e10be5c941/lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"f4eed80b-6156-5611-bfad-8a74f30888d7","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f4eed80b-6156-5611-bfad-8a74f30888d7/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/a8/db/635391586622a70412fd7b1addb2b28da2f52c1dcc7687ba064f7fe726fb/lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"1615e6cc-5ed1-5d9a-b153-479310950b71","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1615e6cc-5ed1-5d9a-b153-479310950b71/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/e0/fe/38045b63e3474ee659fb3f15eac884a23186752d9312c36b98add21bbde0/lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"891e6a44-f426-503f-b777-50e89636e6cc","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/891e6a44-f426-503f-b777-50e89636e6cc/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","url":"https://files.pythonhosted.org/packages/3b/b7/1a0b635ba19426345a2d904523322e31d7489e77165858c251995b346bb3/lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","sboms":[{"artifact_uuid":"e342d157-3b13-5b69-a4f1-47d4a8e79a7c","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e342d157-3b13-5b69-a4f1-47d4a8e79a7c/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","url":"https://files.pythonhosted.org/packages/5c/24/f9c9672c5ee5b10211b6e6837ad206c7a603cccf1fdb6ee5c357a0c8baf0/lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","sboms":[{"artifact_uuid":"46ba6f02-f1d3-5937-97fd-2790e35bb58f","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/46ba6f02-f1d3-5937-97fd-2790e35bb58f/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","url":"https://files.pythonhosted.org/packages/df/86/240766f0ad4d46d0e601f675e77713c4060416a59301eac82029ba73bad5/lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","sboms":[{"artifact_uuid":"9ada5d46-7092-5d86-8246-1ca29e34a10a","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9ada5d46-7092-5d86-8246-1ca29e34a10a/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","url":"https://files.pythonhosted.org/packages/4d/e9/046fd61e9a2abbde4def2de1d04f93b54de0d425941d0c4cf6b73422d374/lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","sboms":[{"artifact_uuid":"1f264d31-14ce-51ec-9cb7-a784c5b56880","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1f264d31-14ce-51ec-9cb7-a784c5b56880/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/17/81/94c55cb25163b2033089a12085e4478a2634416961210fe7f8b7bae5f7ea/lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"2488ca60-5588-5cb6-a127-a3b0fe782609","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2488ca60-5588-5cb6-a127-a3b0fe782609/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-win32.whl","url":"https://files.pythonhosted.org/packages/e5/45/4b4860ea7afa9ffbf889bf293962fc301924a50c3ed83c926d2777595272/lightningcss-0.3.2-cp37-abi3-win32.whl","sboms":[{"artifact_uuid":"4fbcb663-f4fe-5d37-905a-1df7f17019ac","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4fbcb663-f4fe-5d37-905a-1df7f17019ac/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"lightningcss-0.3.2-cp37-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/01/bb/4012db75f38894a3787bd3ada4251af9cea92f99581c6c05e06413e5d9b6/lightningcss-0.3.2-cp37-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"1901bf0e-7032-5cde-866b-15f20c67e165","path":"lightningcss-0.3.2.dist-info/sboms/python-lightningcss.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1901bf0e-7032-5cde-866b-15f20c67e165/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":10,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.28.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.28.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.10.1","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.10.1","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0001","aliases":[],"summary":"Potential Undefined Behaviors in `Arc<T>`/`Rc<T>` impls of `from_value` on OOM","severity":"unknown","score":null,"package":"rkyv","version":"0.7.45","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.7.45","fixed":["0.7.46"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0001","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0235","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc","severity":"unknown","score":null,"package":"rkyv","version":"0.7.45","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.7.45","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0235","wheels":["lightningcss-0.3.2-cp37-abi3-macosx_10_12_x86_64.whl","lightningcss-0.3.2-cp37-abi3-macosx_11_0_arm64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_i686.manylinux2014_i686.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl","lightningcss-0.3.2-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","lightningcss-0.3.2-cp37-abi3-win32.whl","lightningcss-0.3.2-cp37-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":10,"total_sboms":10,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":2,"unknown":4}}}