# SBOM for rdatacompy 1.1.3 > Lightning-fast dataframe comparison library built in Rust with Python bindings The Python package rdatacompy 1.1.3 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/rdatacompy@1.1.3` - PyPI: https://pypi.org/project/rdatacompy/1.1.3/ - License: Apache-2.0 - Requires Python: \>=3.8 - Documentation: - Homepage: - Issues: - Repository: ## SBOMs ### rdatacompy-1.1.3-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/c54aca58-8cc5-5d1c-9321-ffbd82e1154e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp310-cp310-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/920a8124-90da-57a3-ae10-43dcbabd1ca9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/8928c456-da09-5a3f-a293-6e956b47ea18/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp311-cp311-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/8da4eafc-ddcb-5362-ad24-f271ff49aff7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/e4bb3bdf-2c03-5fe4-b06a-af9f8ea2c863/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp312-cp312-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/8d0372a1-1d6e-522c-b84c-0f86286b87cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/a8947246-4fbc-53fd-a590-ab42e5a56939/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp313-cp313-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/436e836c-b30f-5e95-bc47-b6582e4b6f2d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/ee150748-95bb-5559-a827-efade93e24c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp314-cp314-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/51f2121d-b4ce-5b35-bfb0-62b1e72ce94f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp38-cp38-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/30d7e15d-ba8e-52d9-8dab-50b4bb165d3a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp38-cp38-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/691a7088-6b14-5f93-a632-4379c7a284ed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/f0b5c9a5-05c7-59be-a345-807b45deb000/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### rdatacompy-1.1.3-cp39-cp39-win\_amd64.whl - [rdatacompy-1.1.3.dist-info/sboms/rdatacompy.cyclonedx.json](https://pypi.sbomify.com/artifact/70629091-6d4c-5475-aa1e-768b554a4847/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.22.6 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.22.6 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.22.6 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | | [CVE-2026-111959](https://insights.sbomify.com/CVE-2026-111959/) | unknown | arrow-data 53.4.1 (crates.io) | 57.3.2 | Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rdatacompy@1.1.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rdatacompy/1.1.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rdatacompy/1.1.3