# SBOM for rust-fatigue 0.1.9

> A damage equivalent load calculator for Python written in Rust.

The Python package rust-fatigue 0.1.9 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/rust-fatigue@0.1.9`
- PyPI: https://pypi.org/project/rust-fatigue/0.1.9/
- Requires Python: \>=3.8

## SBOMs

### rust\_fatigue-0.1.9-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/bb1095f3-68a7-5df5-a6c3-2cf01b5a7f0f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp310-cp310-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/632038af-9112-5c30-b1c9-7d602bb9ccd6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/9351ac2a-17c2-5474-85e1-4adaf22477b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp311-cp311-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/56f48a5e-7a76-5b33-a685-48d5b23f967e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/7b6c69f0-2225-5ec8-ae10-d9d84a2c46ba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp312-cp312-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/b9e2f1ef-7461-518d-a83b-f60d8226df7c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/b439dbfb-4d97-5e7e-9721-011a78c5bbd3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp313-cp313-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/b9904eb0-806e-5fe8-ac2c-da2771284c71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/e85ca6c0-79fe-514f-bb80-a6c0b133e399/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp314-cp314-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/aa8b696b-b2ea-5c0c-a02e-a05fd4016141/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp38-cp38-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/7c8619d4-6bd6-551d-9b74-7be485a17445/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp38-cp38-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/d228f162-e0c5-5e31-a000-9676fdbcbff0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp39-cp39-manylinux\_2\_28\_x86\_64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/193e2ae5-479c-50e0-9e6e-f99e1637c9e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_fatigue-0.1.9-cp39-cp39-win\_amd64.whl

- [rust\_fatigue-0.1.9.dist-info/sboms/rustfatigue.cyclonedx.json](https://pypi.sbomify.com/artifact/912e00d2-1c6c-581c-977c-289b97e1ed3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rust-fatigue@0.1.9
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rust-fatigue/0.1.9.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rust-fatigue/0.1.9