# SBOM for rusty-tags 0.7.0

> Core HTML generation library with Rust-based Python extension - high performance, minimal dependencies

The Python package rusty-tags 0.7.0 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/rusty-tags@0.7.0`
- PyPI: https://pypi.org/project/rusty-tags/0.7.0/
- Author: RustyTags Contributors
- License: MIT
- Requires Python: \>=3.10
- Homepage: <https://github.com/ndendic/rustyTags>
- Issues: <https://github.com/ndendic/rustyTags/issues>
- Repository: <https://github.com/ndendic/rustyTags>

## SBOMs

### rusty\_tags-0.7.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/ff2f5294-1f7e-5d24-aa16-0ee47ae37074/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/a2192926-7787-54a4-9ab2-8d94673d78e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp310-cp310-win\_amd64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/ef95606b-232e-595b-90be-a0edc243c793/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp311-cp311-macosx\_11\_0\_arm64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/0730a7f7-7d25-5c3b-81df-8ab04558f0c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/905bc1e5-5c33-5efe-b5a3-da680d32a3db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/cb947b43-b1e4-56ac-9119-901d9612db25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp311-cp311-win\_amd64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/24bcabaf-5aee-5b19-9118-9b5a4337db12/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp312-cp312-macosx\_11\_0\_arm64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/f620d662-7c9e-5ec9-92b3-0a052b423e8f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/b0d3daf7-f381-5069-a7f4-63b1296bcea8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/6c55951a-0886-5c7a-8dd6-a8221c5203af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp312-cp312-win\_amd64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/09c536a0-abb6-5d20-9c5a-e06aa9de3226/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp313-cp313-macosx\_11\_0\_arm64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/a3f881bf-ece1-556c-b5eb-4ae64f994d8d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/40d1e049-0a78-5626-abf9-320bcf80528f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/9915658c-b392-500c-9de6-fd0dc5171401/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp313-cp313-win\_amd64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/fde89254-5ec1-5e1f-97a0-cd3d07e85d71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/321dec14-a736-5eaf-a614-b1d3d15dcb20/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp314-cp314-macosx\_11\_0\_arm64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/fdd5810f-237a-5513-9a6e-b30660ad58a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/e3b76e2e-518a-5028-9798-5678e0f357d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/5893e6c2-cfd4-56e7-a8c4-f78502c3f9d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp314-cp314-win\_amd64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/2a147707-e66b-51d5-9d12-f083593983dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/a5eb2f87-cc92-5731-83a8-4bc27ce510e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-pp310-pypy310\_pp73-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/eab1597b-70e7-5bf6-9378-489debc1d949/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/60272af7-6029-5b5f-85f0-e0bce53f7b5a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### rusty\_tags-0.7.0-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl

- [rusty\_tags-0.7.0.dist-info/sboms/rusty-tags.cyclonedx.json](https://pypi.sbomify.com/artifact/36472745-ceb3-551d-96d1-1044653b6771/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.26.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.26.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained |
| [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rusty-tags@0.7.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rusty-tags/0.7.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rusty-tags/0.7.0