# SBOM for rust-just 1.59.0 The Python package rust-just 1.59.0 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/rust-just@1.59.0` - PyPI: https://pypi.org/project/rust-just/1.59.0/ - Requires Python: \>=3.7 - Changelog: - Documentation: - Homepage: - Repository: ## SBOMs ### rust\_just-1.59.0-py3-none-macosx\_10\_12\_x86\_64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/2873a497-23e9-5295-8739-1046f1117616/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-macosx\_11\_0\_arm64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/2041f59a-35bb-5307-bbf6-00136c2cee93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/5429caf4-721a-55cb-a254-1158a6e37613/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/dd23fb3f-0d26-5c0b-8789-3807a424f117/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/9defc464-fef3-5fc6-8a90-a5662e6091cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/a8620092-65b2-5722-a2c6-1338290e1dfd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/0a4352b3-04e9-518a-86cf-f3b36a8fdfdf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/10e924ef-fb15-5361-8dd7-b5e33f346324/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-manylinux\_2\_31\_riscv64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/832683da-226e-502e-b7c9-f5f08146bea7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-musllinux\_1\_2\_aarch64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/3ff4f707-aeee-5185-b6a1-073aebe66195/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-musllinux\_1\_2\_armv7l.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/903ccce2-8da5-5848-a529-bdb8c5c90492/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-musllinux\_1\_2\_i686.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/8bce16ff-0928-5d95-9efe-bc2bdf17d17a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-musllinux\_1\_2\_riscv64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/bb433252-026e-5f53-9093-d920e3dd9153/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-musllinux\_1\_2\_x86\_64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/21b1a560-940e-5f2e-86cf-63639a66251e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-win32.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/85f66806-7c7b-56e4-8e7b-5fc1b1699500/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rust\_just-1.59.0-py3-none-win\_amd64.whl - [rust\_just-1.59.0.dist-info/sboms/just.cyclonedx.json](https://pypi.sbomify.com/artifact/57ff23ff-8726-578d-9c10-fa01b4d95fb1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0414](https://osv.dev/vulnerability/RUSTSEC-2026-0414) | high (7.5) | pulldown-cmark 0.13.4 (crates.io) | 0.13.5 | Exponential event growth with \`ENABLE\_WIKILINKS\` | | [RUSTSEC-2026-0433](https://osv.dev/vulnerability/RUSTSEC-2026-0433) | high (7.5) | pulldown-cmark 0.13.4 (crates.io) | 0.13.6 | Quadratic parsing of nested image wikilinks with \`ENABLE\_WIKILINKS\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rust-just@1.59.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rust-just/1.59.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rust-just/1.59.0