# SBOM for quizx 0.4.0

> Quantum Circuit Optimisation and Compilation using the ZX-calculus

The Python package quizx 0.4.0 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/quizx@0.4.0`
- PyPI: https://pypi.org/project/quizx/0.4.0/
- Requires Python: \>=3.9
- Homepage: <https://github.com/zxcalc/quizx>
- repository: <https://github.com/zxcalc/quizx>

## SBOMs

### quizx-0.4.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/b3df0bce-7f35-5ee7-81ba-5388d4fb9862/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-macosx\_11\_0\_arm64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/addd639a-f1ea-5944-9b24-2a19bf7e90d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-manylinux\_2\_28\_aarch64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/40e40662-5081-5f8a-b175-a94484e33d40/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-manylinux\_2\_28\_armv7l.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/123ba11c-cf87-5d28-81ec-fa0b04c25457/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-manylinux\_2\_28\_i686.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/e6a5495a-2dc6-53bc-abe4-bf2585fab095/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-manylinux\_2\_28\_ppc64le.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/eaf0da15-7b3d-54d8-8e99-23a60cdbdaa5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-manylinux\_2\_28\_s390x.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/61b02305-c3c8-5ccf-8f1d-e9bd0b780af1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/32fa1449-2d30-52ad-aa94-e2074bdda8dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/1a752970-197a-5487-b712-4552f9bded9a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-musllinux\_1\_2\_armv7l.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/807eac54-58fe-5529-b30f-f49a8a2a081c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-musllinux\_1\_2\_i686.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/9033498c-1487-5d77-8bfe-8b7d53965db0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/89189730-87f2-572d-8cb3-1396d83d3874/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-win32.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/e17335ae-28fd-51f3-81d0-c25226940a7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-win\_amd64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/43370a0d-5a54-56f7-911e-ef38089b74fb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp314-cp314t-win\_arm64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/fb539c5a-ad95-5419-a10f-8f08e766bc0d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-macosx\_10\_12\_x86\_64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/e359b78f-8557-5abc-87d4-1079ca4fb0ab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-macosx\_11\_0\_arm64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/0e12e6ba-abf1-54b6-84ff-9305bc0c41af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-manylinux\_2\_28\_aarch64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/52720900-64dd-574b-9f01-04d8364985d3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-manylinux\_2\_28\_armv7l.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/2723becd-2dd1-5b0d-b7f6-5e22020b4e86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-manylinux\_2\_28\_i686.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/1a59411a-f497-5e07-894a-6ce8d569e96f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-manylinux\_2\_28\_ppc64le.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/fb182874-b934-5818-b166-a9f5bb18d620/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-manylinux\_2\_28\_s390x.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/00851a27-15f6-5833-bc00-36110c8b1fa0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-manylinux\_2\_28\_x86\_64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/fe0b371e-6b9c-55d8-8348-e19f9606305b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-musllinux\_1\_2\_aarch64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/71396d01-3e0f-5e30-8707-0c30f22dc444/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-musllinux\_1\_2\_armv7l.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/e4ff12d1-ee9f-5949-87e3-000c2ca5624a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-musllinux\_1\_2\_i686.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/3179ea41-30f2-551b-ac43-94bcd0fc1c8f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-musllinux\_1\_2\_x86\_64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/05806f47-fc68-55d5-9dcb-a99880d96d7c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-win32.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/00de5a37-a24f-5836-93a0-c54691cdff4d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-win\_amd64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/86ff1030-7423-5e4d-bc2e-04347055dcbc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### quizx-0.4.0-cp39-abi3-win\_arm64.whl

- [quizx-0.4.0.dist-info/sboms/quizx\_pybindings.cyclonedx.json](https://pypi.sbomify.com/artifact/d471af9b-8ba3-57dd-b8eb-864b4e8a3fc1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/quizx@0.4.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/quizx/0.4.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/quizx/0.4.0