# SBOM for mermaid-rs 0.1.3 > Python bindings for mermaid-rs-renderer - Fast Mermaid diagram rendering in Rust The Python package mermaid-rs 0.1.3 ships 23 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/mermaid-rs@0.1.3` - PyPI: https://pypi.org/project/mermaid-rs/0.1.3/ - Author: Philipp Temminghoff - Requires Python: \>=3.12 - Homepage: - Issues: - Repository: ## SBOMs ### mermaid\_rs-0.1.3-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2043e736-2a97-5960-83f0-69fd99ebf7ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6ae3c6d3-91c8-5c90-b56e-ae91763a87a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f19de513-8d62-5831-83ad-4a1dbc87d7e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5eb6553c-d110-5172-a8e3-594cfa4d75d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c6a96afb-b3fa-5228-b24d-fb680fccf331/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2de2cd47-5bba-59d9-800b-f3fcb705e1b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7b8f2ac5-3ac3-5f14-9afe-6f3b2e424de8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c1532400-5038-5a0f-9c46-ae2494f945ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8d16ac8b-5319-5d0e-8e11-08db5bfab564/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5c711690-d5f2-52d7-bf11-b7e3742e371b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f1d22943-5f66-5835-8c79-13b32fe5952c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b1746564-8f1e-5820-9651-30692e4f8b91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d0ffddc2-d16a-5b56-95b0-3f6474787308/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp313-cp313t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/66f2644f-0f1d-506c-ba53-3c6f6ad954da/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5d4c2eea-6b6b-54b4-b6d6-b78d82bf2a02/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/71480a19-7c5b-5f33-8323-503bea4634bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9da672b7-467c-52aa-8995-4cc55a87244a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c265a4ee-67a9-5f62-a241-bdf0fd47888b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b625647b-a1a8-5843-98b8-4a017fe0942d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/664ed5b9-aa34-59c3-939b-488edd8e4df6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0b97b493-8162-5e65-8618-6207cb15df1e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1c0b9a24-59e8-5dec-90b5-1756abdefb86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### mermaid\_rs-0.1.3-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, phil65/mermaid-rs, workflow release.yml). - [mermaid\_rs-0.1.3.dist-info/sboms/mermaid\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/46ae382f-8cd9-55c7-9df6-41f7c2368d79/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0013](https://osv.dev/vulnerability/RUSTSEC-2026-0013) | high (7.2) | pyo3 0.28.1 (crates.io) | 0.28.2 | Type confusion when accessing data from sublasses of subclasses of native types with \`abi3\` feature targeting Python 3.12 and up | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.101 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` | | [RUSTSEC-2026-0186](https://osv.dev/vulnerability/RUSTSEC-2026-0186) | unknown | memmap2 0.9.10 (crates.io) | 0.9.11 | Unchecked pointer offset in crate \`memmap2\` | | [RUSTSEC-2026-0192](https://osv.dev/vulnerability/RUSTSEC-2026-0192) | unknown | ttf-parser 0.20.0 (crates.io) | none listed | \`ttf-parser\` is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/mermaid-rs@0.1.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/mermaid-rs/0.1.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/mermaid-rs/0.1.3