# SBOM for pysupercluster-rust 0.1.3

The Python package pysupercluster-rust 0.1.3 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pysupercluster-rust@0.1.3`
- PyPI: https://pypi.org/project/pysupercluster-rust/0.1.3/
- Requires Python: \>=3.8

## SBOMs

### pysupercluster\_rust-0.1.3-cp313-cp313t-macosx\_11\_0\_arm64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/886028b5-62fb-5310-accf-b6c05982bafc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/413ba882-2e54-5418-86fb-85d1e9e266d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/7f4f34c2-3123-5e33-9fd2-a1c03c94e48f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/c2b0d8d0-5d63-56aa-a966-5e2303932768/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/2e9ff5c7-e279-5123-a669-91576f8953a6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/75a03aba-cf83-53d1-ba1c-25bdb40e5e7a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-manylinux\_2\_5\_i686.manylinux1\_i686.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/4df3e2a1-bb96-5b7d-ba62-d5cf18d8d25f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp313-cp313t-win\_amd64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/b96cf8ef-60f0-54a5-8b51-f9aca85d68ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-macosx\_11\_0\_arm64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/799d9a86-8cdf-5891-aca4-657ebf0eb2fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/777b5272-e836-5142-adcb-dde7a3d95be2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/33fe4d17-03b0-57a9-b673-8f36c4af772b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/04ad703c-e879-5bb4-b217-a183ca3e6122/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/99e07287-a264-5810-850b-6e82aa3d38c2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/fc677e3f-6061-5926-b6f0-3653baf41aa1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-manylinux\_2\_5\_i686.manylinux1\_i686.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/66910919-6e14-5949-b1bb-2a8c55cebe04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### pysupercluster\_rust-0.1.3-cp38-abi3-win\_amd64.whl

- [pysupercluster\_rust-0.1.3.dist-info/sboms/pysupercluster-rust.cyclonedx.json](https://pypi.sbomify.com/artifact/3e12d5ad-2073-5c92-8f52-8e5022b58a8f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.23.5 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.23.5 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.23.5 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pysupercluster-rust@0.1.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pysupercluster-rust/0.1.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pysupercluster-rust/0.1.3