# SBOM for reasonable 0.4.4 > Python bindings for Reasonable, a reasonably fast OWL 2 RL reasoner The Python package reasonable 0.4.4 ships 44 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/reasonable@0.4.4` - PyPI: https://pypi.org/project/reasonable/0.4.4/ - Requires Python: \>=3.8 - Homepage: ## SBOMs ### reasonable-0.4.4-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/f14dc1ef-9352-50cd-ac0f-375f4ba96276/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/7daa3e61-2685-5a42-9bd7-2923337ea8d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp310-cp310-musllinux\_1\_2\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6bd5a5e7-8edc-5eee-97ae-7abf3537fd59/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/92f0be0b-90c3-5a1c-8e15-b75ed206d829/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2afeb89f-d98b-514f-a886-c61220d96054/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/e66085c9-7080-5d80-8784-091108a4762f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/bea093fe-dc1d-582d-b90c-0d9d2aed6edc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/4d795cc1-d6a2-57fb-9942-5ff5fc119d31/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3657136e-0ac1-5d6c-a8ec-20303ca85a6f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/d32f73c5-c8e2-5676-abd2-c1586009826b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a09a668f-3fd3-594b-a1c9-51e8765a1bc8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/01f89c73-2ba9-5705-9f00-6b239437fa9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/4afc7411-ab42-5f55-ac93-889d58845a44/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/f48e192b-40cc-5d57-b830-36ddc9861702/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c7e9444f-17d5-5cef-8ffd-8b726713444d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/bbf63459-317d-5e39-a4c2-36ea0a23fe38/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ae681904-90c1-5728-9c45-9a8fbfe7d4c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/8d132ed8-7bbd-5523-83ca-7b0bb4de870b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/d614d570-da1a-57d4-aac2-a8917630d881/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp38-cp38-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/93093a00-401a-5312-b2eb-fa10f513c45b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp38-cp38-musllinux\_1\_2\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/055b3a87-d7f2-5c09-b0b7-f83739f41270/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/7fe015c4-bee1-5a3e-af2f-8ac3dc62c899/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp38-cp38-musllinux\_1\_2\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/139a1e7e-827e-577a-82ea-5c1ef3d3ca66/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/4910d5dd-a6c8-5084-a6e6-52c9d7d71f57/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-macosx\_10\_14\_x86\_64.macosx\_11\_0\_arm64.macosx\_10\_14\_universal2.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/30ca3f70-1d8e-55ca-b73e-4a1c3dd0919f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-macosx\_10\_14\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/3be3e17a-3b7e-5af3-8eba-73600dddfbd5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-macosx\_11\_0\_arm64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/c9e8d4fe-ffb2-564c-82d7-28895c97cd01/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/e659e475-1328-59fd-a8f4-d5e25cf071a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/a99ea3a8-16db-5fb3-971f-287707f915e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-musllinux\_1\_2\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1d7abd41-98d0-56bb-be7d-70e701f5b8ac/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/7b51fe96-8eb3-5306-b9c4-76ed94cfa6bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-musllinux\_1\_2\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bf2e30f9-0031-55eb-9105-f078fb6698fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/3119ff7e-d7ae-55b4-ad34-6c25b3ccafbb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-abi3-win\_amd64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/3aec64cc-18e9-581d-b6aa-460a4c77d612/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/e5340de8-db74-5fd2-adbb-bf79570a2979/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/bd9355e4-05f9-5113-b304-76b232b53b58/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-cp39-musllinux\_1\_2\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a90e94f-967a-50a3-b2ed-49e4a9b37444/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/cbb3b81c-a04a-5c77-ab08-2b0254599df5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/320951ac-d3e3-510b-a66e-a75e2cb642b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/6da4419e-acdd-5b4c-8487-3bcf08c3055a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-pp310-pypy310\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/2e45b2d6-b398-538d-a8df-d7d463c97522/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-pp310-pypy310\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/f0930184-2915-592c-aa2d-f3177ef5a453/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-pp39-pypy39\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/ce4a8478-d193-580e-b8d9-7b84d0449d78/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### reasonable-0.4.4-pp39-pypy39\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [reasonable-0.4.4.dist-info/sboms/pyreasonable.cyclonedx.json](https://pypi.sbomify.com/artifact/095f6ef2-267d-5fb3-8787-4f8c0e3322c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0194](https://osv.dev/vulnerability/RUSTSEC-2026-0194) | high (7.5) | quick-xml 0.36.2 (crates.io) | 0.41.0 | Quadratic run time when checking a start tag for duplicate attribute names | | [RUSTSEC-2026-0195](https://osv.dev/vulnerability/RUSTSEC-2026-0195) | high (7.5) | quick-xml 0.36.2 (crates.io) | 0.41.0 | Unbounded namespace-declaration allocation in \`NsReader\` enables memory-exhaustion denial of service | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/reasonable@0.4.4 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/reasonable/0.4.4.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/reasonable/0.4.4