# SBOM for rust-chess 0.4.3 > A bridge between the Rust chess crate and Python. The Python package rust-chess 0.4.3 ships 32 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/rust-chess@0.4.3` - PyPI: https://pypi.org/project/rust-chess/0.4.3/ - Requires Python: \>=3.10 - Repository: ## SBOMs ### rust\_chess-0.4.3-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/79cecd47-4163-5c1f-825d-c3cb03117b02/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/a6fa0d0c-1a85-5d80-817b-9e49aac15f46/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp310-cp310-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/f014a929-b905-5610-9901-48727e47e708/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp310-cp310-win\_amd64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/23b3c2e3-ca5e-55a0-ba89-8ad1ff6e3819/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/975336be-50dc-52c9-8224-7e4eb0cd28e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp311-cp311-macosx\_11\_0\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/d856b4d8-ef93-5565-9da8-c18cc7c8ebc2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/ac6426da-0b59-5146-a8e6-f5921beb0c2b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/b78175e3-e602-5c70-ba3f-7af68fba6072/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp311-cp311-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/158d9c57-fe83-575d-8d75-b496ed6a9050/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp311-cp311-win\_amd64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/50ac0b5c-c27d-5ce1-87a8-032287186dbf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/3af66fa7-be91-596c-9ec6-2e345cf6ea8e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-macosx\_11\_0\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/db4448b2-cd75-5c75-bd8e-1661eb8debbe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/095d3619-0660-57cd-9a2c-d15933c778e6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/5b924512-61aa-5d46-a668-260125444a3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/09694b55-18be-5a36-9a7a-3291ff21e2da/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-win\_amd64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/7baf8598-fccb-5841-ae07-d60a9f5d9def/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp312-cp312-win\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/3a36aa0e-8ea1-5970-87a5-d7d9ac76b908/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/ead1e04f-89b2-53ff-9f6c-93cacb86c4cd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-macosx\_11\_0\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/8c4f488a-e0c6-5cb5-847c-6f0f2d913891/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/4e104cc8-ae11-5432-8124-de696660ccfa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/f5b7748e-b117-5d6a-9030-7af56ec5ba17/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/c93d9a29-9f66-5603-ad65-e7d9d66bac54/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-win32.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/17a01807-2045-54c6-b99b-8ff85fbeedbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-win\_amd64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/3a794602-fec3-58e7-9842-34edcaa7bd80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp313-cp313-win\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/ee77aba4-80b7-569d-8ce8-77af278ca414/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/f5d3b86a-8b51-5baf-bea0-3476b7726b25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-macosx\_11\_0\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/22ab0234-10fc-5045-90a8-8961e579257b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/045240d3-3dea-5adc-9cd1-693ea06b02b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/04094e5c-82ce-540a-919a-642e5ec83ff3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/30fa429d-5cdb-54b9-819a-df40b05cb205/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-win\_amd64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/55a002c7-67f3-50d3-8d85-20f18f2dfe37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ### rust\_chess-0.4.3-cp314-cp314-win\_arm64.whl - [rust\_chess-0.4.3.dist-info/sboms/rust-chess.cyclonedx.json](https://pypi.sbomify.com/artifact/725b527e-a0fd-5f7b-8149-3dc5d783ff1e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 11 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2019-25010](https://insights.sbomify.com/CVE-2019-25010/) | critical (9.8) | failure 0.1.8 (crates.io) | none listed | Type confusion if \_\_private\_get\_type\_id\_\_ is overridden | | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.7.3 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2025-0081](https://osv.dev/vulnerability/RUSTSEC-2025-0081) | unknown | unic-char-property 0.9.0 (crates.io) | none listed | \`unic-char-property\` is unmaintained | | [RUSTSEC-2025-0075](https://osv.dev/vulnerability/RUSTSEC-2025-0075) | unknown | unic-char-range 0.9.0 (crates.io) | none listed | \`unic-char-range\` is unmaintained | | [RUSTSEC-2025-0080](https://osv.dev/vulnerability/RUSTSEC-2025-0080) | unknown | unic-common 0.9.0 (crates.io) | none listed | \`unic-common\` is unmaintained | | [RUSTSEC-2025-0090](https://osv.dev/vulnerability/RUSTSEC-2025-0090) | unknown | unic-emoji-char 0.9.0 (crates.io) | none listed | \`unic-emoji-char\` is unmaintained | | [RUSTSEC-2025-0100](https://osv.dev/vulnerability/RUSTSEC-2025-0100) | unknown | unic-ucd-ident 0.9.0 (crates.io) | none listed | \`unic-ucd-ident\` is unmaintained | | [RUSTSEC-2025-0098](https://osv.dev/vulnerability/RUSTSEC-2025-0098) | unknown | unic-ucd-version 0.9.0 (crates.io) | none listed | \`unic-ucd-version\` is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rust-chess@0.4.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rust-chess/0.4.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rust-chess/0.4.3