# SBOM for pysui-fastcrypto 0.7.7 > Python wrapper for MystenLab/fastcrypto Rust crate The Python package pysui-fastcrypto 0.7.7 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pysui-fastcrypto@0.7.7` - PyPI: https://pypi.org/project/pysui-fastcrypto/0.7.7/ - Requires Python: \>=3.10 - changelog: - homepage: - repository: ## SBOMs ### pysui\_fastcrypto-0.7.7-cp310-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, FrankC01/pysui-fastcrypto, workflow build\_release.yml). - [pysui\_fastcrypto-0.7.7.dist-info/sboms/pysui-fastcrypto.cyclonedx.json](https://pypi.sbomify.com/artifact/b919ae44-82f8-5e76-9d90-178ca2597cf9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### pysui\_fastcrypto-0.7.7-cp310-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, FrankC01/pysui-fastcrypto, workflow build\_release.yml). - [pysui\_fastcrypto-0.7.7.dist-info/sboms/pysui-fastcrypto.cyclonedx.json](https://pypi.sbomify.com/artifact/bc91154e-f46a-5165-8fca-52974a984b1d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### pysui\_fastcrypto-0.7.7-cp310-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, FrankC01/pysui-fastcrypto, workflow build\_release.yml). - [pysui\_fastcrypto-0.7.7.dist-info/sboms/pysui-fastcrypto.cyclonedx.json](https://pypi.sbomify.com/artifact/afc68352-94a6-5529-b894-f87067df3c7e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### pysui\_fastcrypto-0.7.7-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, FrankC01/pysui-fastcrypto, workflow build\_release.yml). - [pysui\_fastcrypto-0.7.7.dist-info/sboms/pysui-fastcrypto.cyclonedx.json](https://pypi.sbomify.com/artifact/b299ec29-8be4-5e10-ac51-6e2a0f3467b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### pysui\_fastcrypto-0.7.7-cp310-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, FrankC01/pysui-fastcrypto, workflow build\_release.yml). - [pysui\_fastcrypto-0.7.7.dist-info/sboms/pysui-fastcrypto.cyclonedx.json](https://pypi.sbomify.com/artifact/85fe7f6a-1e9e-5e20-856f-f010182243cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2023-49092](https://insights.sbomify.com/CVE-2023-49092/) | medium (5.9) | rsa 0.9.10 (crates.io) | 0.10.0 | Marvin Attack: potential key recovery through timing sidechannels | | [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` | | [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 1.3.3 (crates.io) | none listed | Bincode is unmaintained | | [RUSTSEC-2026-0283](https://osv.dev/vulnerability/RUSTSEC-2026-0283) | unknown | clear\_on\_drop 0.2.5 (crates.io) | none listed | clear\_on\_drop is unmaintained | | [RUSTSEC-2026-0387](https://osv.dev/vulnerability/RUSTSEC-2026-0387) | unknown | crypto-bigint 0.5.5 (crates.io) | 0.7.6 | Multiple timing variability issues in operations intended to be constant-time | | [RUSTSEC-2024-0388](https://osv.dev/vulnerability/RUSTSEC-2024-0388) | unknown | derivative 2.2.0 (crates.io) | none listed | \`derivative\` is unmaintained; consider using an alternative | | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.52.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pysui-fastcrypto@0.7.7 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pysui-fastcrypto/0.7.7.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pysui-fastcrypto/0.7.7