SBOM for rustworkx 0.18.1

A High-Performance Graph Library for Python

CycloneDX PEP 740 attested 5 known vulnerabilities

Package information

Requires Python
>=3.10
PyPI
rustworkx 0.18.1
documentation
https://www.rustworkx.org/
issues
https://github.com/Qiskit/rustworkx/issues
releasenotes
https://www.rustworkx.org/release_notes.html
source
https://github.com/Qiskit/rustworkx

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

rustworkx-0.18.1-cp310-abi3-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-manylinux_2_28_s390x.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-pyemscripten_2026_0_wasm32.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-win32.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 4 known vulnerabilities
Download

rustworkx-0.18.1-cp310-abi3-win_amd64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-macosx_10_15_x86_64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

rustworkx-0.18.1-cp314-cp314t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Qiskit/rustworkx Workflow: wheels.yml Environment: release
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
rustworkx.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0194
Quadratic run time when checking a start tag for duplicate attribute names
High 7.5 quick-xml 0.37.5
crates.io
0.41.0
RUSTSEC-2026-0195
Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
High 7.5 quick-xml 0.37.5
crates.io
0.41.0
RUSTSEC-2026-0190
Unsoundness in `Error::downcast_mut()`
Unknown anyhow 1.0.102
crates.io · 16 of 18 wheels
1.0.103
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Unknown crossbeam-epoch 0.9.18
crates.io
0.9.20
RUSTSEC-2024-0436
paste - no longer maintained
Unknown paste 1.0.15
crates.io
—

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]