{"url":"https://pypi.sbomify.com/package/pyrust-native/0.0.5","markdown_url":"https://pypi.sbomify.com/package/pyrust-native/0.0.5.md","name":"pyrust-native","version":"0.0.5","purl":"pkg:pypi/pyrust-native@0.0.5","summary":"Python-first auto-optimizer that rustifies hotspots (skeleton repo)","author":"PyRust Contributors","project_urls":{"Changelog":"https://github.com/pyrust-dev/pyrust/blob/main/CHANGELOG.md","Discussions":"https://github.com/pyrust-dev/pyrust/discussions","Documentation":"https://pyrust-dev.github.io/pyrust/","Homepage":"https://github.com/pyrust-dev/pyrust","Issues":"https://github.com/pyrust-dev/pyrust/issues","Release Notes":"https://github.com/pyrust-dev/pyrust/releases","Repository":"https://github.com/pyrust-dev/pyrust"},"requires_python":">=3.10","license":"MIT","classifiers":["License :: OSI Approved :: MIT License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Rust"],"wheels":[{"filename":"pyrust_native-0.0.5-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/0e/01/d59873e945618755102314d3c4bffffd853c5a488e811d40beb8946ff971/pyrust_native-0.0.5-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"1725decb-352b-5535-afa8-20767d58ae2a","path":"pyrust_native-0.0.5.dist-info/sboms/pyrust-native.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1725decb-352b-5535-afa8-20767d58ae2a/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":1,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.21.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.21.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["pyrust_native-0.0.5-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.21.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.21.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["pyrust_native-0.0.5-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.21.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.21.2","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["pyrust_native-0.0.5-cp311-cp311-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":1,"total_sboms":1,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1}}}