Skip to content

SBOM for pytrees-rs 2.2.0

Optimal and greedy decision trees in Rust, with a scikit-learn API.

CycloneDX PEP 740 attested 4 known vulnerabilities

Requires Python: >=3.10
PyPI: pytrees-rs 2.2.0
Documentation: https://haroldks.github.io/pytrees-rs/
Homepage: https://github.com/haroldks/pytrees-rs

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

pytrees_rs-2.2.0-cp310-abi3-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: haroldks/pytrees-rs Workflow: release.yml Environment: pypi

pytrees-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

pytrees_rs-2.2.0-cp310-abi3-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: haroldks/pytrees-rs Workflow: release.yml Environment: pypi

pytrees-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

pytrees_rs-2.2.0-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: haroldks/pytrees-rs Workflow: release.yml Environment: pypi

pytrees-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

pytrees_rs-2.2.0-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: haroldks/pytrees-rs Workflow: release.yml Environment: pypi

pytrees-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

pytrees_rs-2.2.0-cp310-abi3-win_amd64.whl

Attested

Publisher: GitHub Source: haroldks/pytrees-rs Workflow: release.yml Environment: pypi

pytrees-py.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0176 Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators	High 8.7	pyo3 0.26.0 crates.io	0.29.0
RUSTSEC-2026-0177 Missing `Sync` bound on `PyCFunction::new_closure` closures	Medium 6.3	pyo3 0.26.0 crates.io	0.29.0
RUSTSEC-2024-0436 paste - no longer maintained	Unknown	paste 1.0.15 crates.io	—
RUSTSEC-2026-0097 Rand is unsound with a custom logger using `rand::rng()`	Unknown	rand 0.9.2 crates.io	0.9.3

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]