# SBOM for mrg32k3a-core 0.1.2 The Python package mrg32k3a-core 0.1.2 ships 20 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/mrg32k3a-core@0.1.2` - PyPI: https://pypi.org/project/mrg32k3a-core/0.1.2/ - Requires Python: \>=3.8 ## SBOMs ### mrg32k3a\_core-0.1.2-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/955cde59-1996-5dae-9e50-a4e7015a33b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp311-cp311-macosx\_11\_0\_arm64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/6345b1bc-40c0-552c-8e56-7f8029ed447c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0bcf3c15-4ee3-5c87-af8c-277f20979fa9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp311-cp311-win32.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/2c87f9b4-701d-571d-bc02-c042c0e04bcc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp311-cp311-win\_amd64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/818c8f6e-f54f-5ee7-a503-ab69afad4466/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/400ca57a-1c1a-5ac1-8afe-925205ad8dfc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/13c961ce-34c5-5d24-85cc-54af68882f25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/7a6a1fdb-aebd-5d24-8575-392bc4a88a67/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp312-cp312-win32.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/fa18bcb7-9ae7-5d13-b339-efa268f29bde/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp312-cp312-win\_amd64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/70f09ec3-4cdf-5970-977f-ce28c1625a35/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ed33ff02-bd12-5712-8dc3-4d73976b4a5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/db22ae82-8850-517e-b2d2-70d280770a5f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b643b359-2058-53d6-9e6e-531afe325961/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp313-cp313-win32.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/e333aa68-ddc7-5499-937f-ab996851cd65/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp313-cp313-win\_amd64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/87a0727a-5baa-593d-9f9e-cf2e23bc5398/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a2dddaf7-b8db-5cd5-85ce-59bed95aef25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a500f504-1bee-5e54-b906-eedeb02ca311/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/d2750d4f-07bf-5ef0-a23a-78ea21962f0d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp314-cp314-win32.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/73269c5f-d449-5a4b-bf65-f0e900e9b263/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### mrg32k3a\_core-0.1.2-cp314-cp314-win\_amd64.whl - [mrg32k3a\_core-0.1.2.dist-info/sboms/mrg32k3a-core.cyclonedx.json](https://pypi.sbomify.com/artifact/e1519223-1014-508a-9f80-b57b211bd154/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/mrg32k3a-core@0.1.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/mrg32k3a-core/0.1.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/mrg32k3a-core/0.1.2