# SBOM for pyhgf 0.3.2 > Dynamic neural networks for predictive coding The Python package pyhgf 0.3.2 ships 37 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/pyhgf@0.3.2` - PyPI: https://pypi.org/project/pyhgf/0.3.2/ - Requires Python: \<3.14,\>=3.12 - documentation: - homepage: - repository: ## SBOMs ### pyhgf-0.3.2-cp312-abi3-macosx\_10\_12\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/ed8dc308-ac01-59ad-9c28-8c64065f6cb2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-macosx\_11\_0\_arm64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/befdbb02-a611-51a3-b2a3-3708ae98caf3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/76d615fb-ceef-5bfd-946b-e369ca479079/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/da11de71-fbf9-5aa1-8332-2ddf03b9165d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/fed6288e-2ab3-56f7-a70f-4f56076f2124/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/a2de403b-7cb3-58b4-aa70-4023d7fa5e80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/d9e0393a-a9e6-5871-aa9d-a1364ac14996/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/744765e7-596c-59be-b80c-a6e13ea95053/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-musllinux\_1\_2\_aarch64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/e5df382f-4a12-5950-814f-3d076025561a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-musllinux\_1\_2\_armv7l.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/1a61e998-2e13-5090-a499-3bbfba90af6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-musllinux\_1\_2\_i686.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/e2bedd14-4315-53e5-99c2-ef43e9210416/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-musllinux\_1\_2\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/d2306418-b369-5f87-99f7-b0c7bb2a9a20/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-win32.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/0ffe9274-a55a-55d4-bc2f-93d2012ca80b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-win\_amd64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/9e3f50dc-049b-5185-b550-20d2d60704ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp312-abi3-win\_arm64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/99fd3662-c72f-59af-b541-83b429bdf336/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp313-cp313t-musllinux\_1\_2\_aarch64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/ebb379df-e800-55e8-90a3-4c40df7bb0aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp313-cp313t-musllinux\_1\_2\_armv7l.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/427f7dfa-47d6-52aa-8aa9-015279c96682/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp313-cp313t-musllinux\_1\_2\_i686.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/b04466d8-de03-511e-afd1-728a5fe34208/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/8083f801-eea7-5245-8109-1a2df39746d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-macosx\_10\_12\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/bc83a511-8541-5fa9-b8c1-ac2061b6fce7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-macosx\_11\_0\_arm64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/2613ff9b-2ea4-5962-814d-0aa25cab4f93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/30c5cac3-799a-5064-8ec2-7e593dc53434/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/36f78f93-9913-579d-836a-4134b87a40e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/dc068ac1-6bdc-5a1c-a18c-2898963c010c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/2267e275-009e-5b68-91f5-5271573e600c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/bb4777eb-b7ad-5094-9eb8-87d9fc046293/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/0e8086c2-0a9b-51b7-8f51-60b91c0a8cf8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/07b4a2b2-1629-5ac3-9942-dfcc3f1eeeb5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-musllinux\_1\_2\_armv7l.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/5509a27b-63a1-5c26-8030-9777bc55c22f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-musllinux\_1\_2\_i686.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/c472e98e-bff3-55dc-b290-98168aa6fbde/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/afb9f647-d3bc-5a05-9203-29c12fcdb532/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-win32.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/0398b27f-6a09-56c9-ba94-74e7baae53e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-cp314-cp314t-win\_amd64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/8e77d1db-8023-521a-a1fc-121d23440042/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/fddbf2be-d9ce-5e3a-a697-8d149bdf4cca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-pp311-pypy311\_pp73-musllinux\_1\_2\_armv7l.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/604b975c-23a3-5a16-99ac-ee889e3cd08b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/98d8002e-124d-5cb0-9101-971545634c54/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyhgf-0.3.2-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl - [pyhgf-0.3.2.dist-info/sboms/rshgf.cyclonedx.json](https://pypi.sbomify.com/artifact/ce4688e4-e89a-5d70-acf6-df905d555053/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0013](https://osv.dev/vulnerability/RUSTSEC-2026-0013) | high (7.2) | pyo3 0.28.1 (crates.io) | 0.28.2 | Type confusion when accessing data from sublasses of subclasses of native types with \`abi3\` feature targeting Python 3.12 and up | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.2 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pyhgf@0.3.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pyhgf/0.3.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyhgf/0.3.2