# SBOM for rateslib 2.7.1

> A fixed income library for trading interest rates

The Python package rateslib 2.7.1 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/rateslib@2.7.1`
- PyPI: https://pypi.org/project/rateslib/2.7.1/
- Author: J H M Darbyshire
- Requires Python: \>=3.10
- Homepage: <https://github.com/attack68/rateslib>

## SBOMs

### rateslib-2.7.1-cp310-abi3-macosx\_10\_12\_x86\_64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/2b8f7129-c3f0-5ce2-ac50-5809c0862478/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-macosx\_11\_0\_arm64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/d5d6e001-6f70-5e2b-84d2-5c6793774e57/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/b2fb89ba-45cd-5c65-8636-c86820ac56c1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/1ac99080-632f-57f8-b894-231ff54052a2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/7557776c-dd01-56df-beb6-70f2daf17ab5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/6d04fe9c-19c0-5a1a-9352-e7d8ef9a9e9d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/a87c1615-7a93-53f0-9222-ebf4433b77e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/c678f3c3-7e9d-5259-abd4-57614c7a23c9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-musllinux\_1\_2\_aarch64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/cf5fe285-675a-5f94-9701-4a5831e94af3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-musllinux\_1\_2\_armv7l.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/19579eaa-9451-5b54-92c5-ddd641bf23cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-musllinux\_1\_2\_i686.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/06927d1a-24c3-56df-ae22-99d166b709ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-musllinux\_1\_2\_x86\_64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/3eba6c54-5428-5850-8858-d8a088be02b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-win32.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/4ffd5075-dc56-5bd0-929e-7c1037a1274e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-win\_amd64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/cf5a7fc1-bb02-5784-97a5-bff9573ff8d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp310-abi3-win\_arm64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/28672d91-0e77-5d05-bd52-96881fac35c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-macosx\_10\_12\_x86\_64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/ad66d045-56de-53d2-b7ab-459966ebb6ed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-macosx\_11\_0\_arm64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/ff0fea41-167a-5b22-af13-27997bb54555/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/39b6f92f-c85e-57a8-b300-f036e0d88a3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/1d52341d-c185-5fa8-b28d-478b52b67294/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/8f847510-7e04-5058-80b4-39d53b66e044/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/c6b00a34-0dba-50ef-a37c-f82427173c70/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/0f1f326e-2c88-52e1-8ca2-49ed58db9d89/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/a2057389-ae68-5bd3-9be8-e1d58fc7780d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/1f910314-0d21-534e-888b-09730477f661/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-musllinux\_1\_2\_armv7l.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/42a6c0c2-6b7c-5cf0-ba0b-2bb6c84fd3ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-musllinux\_1\_2\_i686.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/a0579d01-bdf5-594d-989c-d55cfd7070ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/656239bb-f2a4-5ca3-87d4-67400eae3101/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-win32.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/903f8282-8426-5036-9f29-2e645f564922/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-win\_amd64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/e04d10d7-ecda-5e9e-b9d5-bf84260c54f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rateslib-2.7.1-cp314-cp314t-win\_arm64.whl

- [rateslib-2.7.1.dist-info/sboms/rateslib.cyclonedx.json](https://pypi.sbomify.com/artifact/b6e528a7-6089-56eb-a562-b03333f74611/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 2.0.1 (crates.io) | none listed | Bincode is unmaintained |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rateslib@2.7.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rateslib/2.7.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rateslib/2.7.1