# SBOM for rustest 0.18.0

> Rust powered pytest-compatible runner

The Python package rustest 0.18.0 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/rustest@0.18.0`
- PyPI: https://pypi.org/project/rustest/0.18.0/
- Author: rustest contributors
- Requires Python: \>=3.10
- Documentation: <https://apex-engineers-inc.github.io/rustest>
- Homepage: <https://github.com/Apex-Engineers-Inc/rustest>
- Repository: <https://github.com/Apex-Engineers-Inc/rustest>

## SBOMs

### rustest-0.18.0-cp310-cp310-macosx\_11\_0\_arm64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/8e895b57-bb5e-590b-930c-0131c1ea7135/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/bb1e1dd4-d6b5-5aed-b9cc-7c5d4faae1a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp310-cp310-win\_amd64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b46847b6-dee7-5516-9752-a5694095e1f8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp311-cp311-macosx\_11\_0\_arm64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4b060e2f-58cc-56e6-836a-9355ec5f1829/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/c0948efb-cef6-5a62-ab45-85a57fa3b67d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp311-cp311-win\_amd64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0c16c425-6448-5cf4-a4d8-604ccc126a9c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp312-cp312-macosx\_11\_0\_arm64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/65b0662e-a4b6-5630-9347-59908dbb20e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/51ae3fc5-922b-5173-a910-1a26e5f173e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp312-cp312-win\_amd64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/22861eaa-e8f7-56a9-911e-a21db11f50e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp313-cp313-macosx\_11\_0\_arm64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/f040ca6e-760f-54db-b81e-3b9675e1e1af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/c56bb66d-9073-54d5-89da-3d8a1b039daf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

### rustest-0.18.0-cp313-cp313-win\_amd64.whl

- [rustest-0.18.0.dist-info/sboms/rustest-core.cyclonedx.json](https://pypi.sbomify.com/artifact/6561d875-4955-5de5-9758-1b93ea235d6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |
| [RUSTSEC-2025-0119](https://osv.dev/vulnerability/RUSTSEC-2025-0119) | unknown | number\_prefix 0.4.0 (crates.io) | none listed | number\_prefix crate is unmaintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rustest@0.18.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rustest/0.18.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rustest/0.18.0