# SBOM for pycleora 3.2.1 > Fast CPU-only graph embedding library with Rust core. Supports Cleora, DeepWalk, Node2Vec, ProNE, MLP, and more. The Python package pycleora 3.2.1 ships 38 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/pycleora@3.2.1` - PyPI: https://pypi.org/project/pycleora/3.2.1/ - Requires Python: \>=3.7 - Homepage: ## SBOMs ### pycleora-3.2.1-cp310-cp310-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/f6d73b27-69c9-52c2-a411-380fc47437de/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/00906cf6-aeac-5d72-8b7c-1297323b5811/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/fba09046-3030-5393-a05f-43c9c9f05c51/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp310-cp310-win\_amd64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/203ff45b-57d4-536d-9b71-a202913bf1a6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/11559795-fbdf-5272-a3b9-bc8357f79cf9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp311-cp311-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/5f957176-5446-521e-9791-3ce5ea1d163f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/0ce29e40-7c4d-56df-900f-4c6a601ffef8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/905955c2-da38-5d5b-8d9b-39be24cfaf9f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp311-cp311-win\_amd64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/81053b3f-e29b-52f8-ad0b-57867b19bc14/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/38f88f0d-c859-5d35-909f-42446c1395d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp312-cp312-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/35f44d8e-eaa6-513b-8817-dab5caae8673/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/8ec67cac-516a-5af9-8266-5a602b18fd98/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/9125066c-ccee-54ff-9901-4cff51528a18/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp312-cp312-win\_amd64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/a6eaaed0-2f89-5d72-a984-2d28ea096283/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/dfc141ea-af17-5d8f-854a-174c453b0846/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp313-cp313-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/f19e1ed0-e6f4-5847-9fb9-6948074383b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/681dc1b2-6846-5258-bd40-769c2cc0a7ab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/5d1ba33d-43bc-5609-a9e2-ce7a9be90890/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp313-cp313-win\_amd64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/95b98500-ac37-5b52-ba49-fb87c0cfa9cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp314-cp314-macosx\_11\_0\_arm64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/3fe22b8e-5383-5823-8822-527f60ff45c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp314-cp314-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/bf22b52d-1ab3-5293-b88c-30e295650ca0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/0a5d8d20-9cc8-531b-9087-5055f84d4d8e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/581a3a41-9560-51c1-842e-0d8feb7a044e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp314-cp314-win32.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/c9e69787-77fe-5e8e-ab54-2605eccf8b0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp314-cp314-win\_amd64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/eb405820-7563-5128-9efc-3df731eaa53b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp37-cp37m-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/ea8b9d0e-7dab-540a-a74a-489d72eb92c2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp38-cp38-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/19b60f9e-6608-57fd-bd1e-99dfd0fa9286/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/caf797fa-4fe2-5d39-ab38-1cc6d3aab7e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp38-cp38-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/ef730d08-6600-5914-855f-e708a893c3c1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp39-cp39-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/f0140876-220b-5b18-a850-928fb15055dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/3b0be153-9127-57cc-a5ff-ce3bea0dabaa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/d793fb3e-c51d-5e1e-ae79-c4246aefc42c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-pp310-pypy310\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/deb1b728-9056-5caa-a790-cbb832cc1e54/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-pp311-pypy311\_pp73-manylinux\_2\_12\_i686.manylinux2010\_i686.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/fa8fb81d-4bdf-5273-870b-ea88d010af70/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/44d0ec50-f5e5-554a-81cb-861ea5908f91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/b5837261-c71e-5422-af75-cc21b091aa53/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-pp38-pypy38\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/7a7cc998-6a0b-5ae0-9cb3-ebfeabf3c432/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### pycleora-3.2.1-pp39-pypy39\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pycleora-3.2.1.dist-info/sboms/pycleora.cyclonedx.json](https://pypi.sbomify.com/artifact/10d42313-71a8-5f4b-b4cf-5ec02b45bd21/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-115905](https://insights.sbomify.com/CVE-2026-115905/) | critical (10.0) | zip 0.5.13 (crates.io) | 9.0.5 | zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE | | [RUSTSEC-2026-0369](https://osv.dev/vulnerability/RUSTSEC-2026-0369) | critical (9.1) | zip 0.5.13 (crates.io) | 9.0.0 | ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target | | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.18.3 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [CVE-2026-115909](https://insights.sbomify.com/CVE-2026-115909/) | high (7.5) | zip 0.5.13 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` aborts the process on a symlink entry with a large declared size | | [RUSTSEC-2026-0367](https://osv.dev/vulnerability/RUSTSEC-2026-0367) | high (7.3) | zip 0.5.13 (crates.io) | 9.0.0 | Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.18.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.18.3 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | | [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 1.3.3 (crates.io) | none listed | Bincode is unmaintained | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0368](https://osv.dev/vulnerability/RUSTSEC-2026-0368) | unknown | zip 0.5.13 (crates.io) | 9.0.0 | zip: \`ZipArchive::extract\` creates symbolic links whose attacker-controlled targets are outside the destination directory | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pycleora@3.2.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pycleora/3.2.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pycleora/3.2.1