# SBOM for symb-anafis 0.8.1 > Fast symbolic differentiation library - Rust-powered Python bindings The Python package symb-anafis 0.8.1 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/symb-anafis@0.8.1` - PyPI: https://pypi.org/project/symb-anafis/0.8.1/ - Author: CokieMiner - License: Apache-2.0 - Requires Python: \>=3.9 - Documentation: - Homepage: - Repository: ## SBOMs ### symb\_anafis-0.8.1-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/81bc8deb-e25a-5590-9243-5df660ab0151/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp310-cp310-macosx\_11\_0\_arm64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/46329040-e7a7-5a75-802f-5ed7c14370bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/2ac0504a-68e6-5504-a1b9-d921b70b6817/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp310-cp310-manylinux\_2\_35\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/715a547d-81c8-50c0-95bd-ff59c49f3600/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp310-cp310-win\_amd64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/0574e05b-d903-5fc2-a863-8c46e23b966b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/5589fd67-e559-59a5-9507-0fa1d5ad808c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/29d52c52-9259-509a-a59a-e062da6a0d34/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/e932124d-2f21-5742-bdcc-06651d195060/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp311-cp311-manylinux\_2\_35\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/685a9990-aa09-5a9c-a427-d2384e8bdd3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp311-cp311-win\_amd64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/5b98a698-9266-5e7d-aed1-43fa5911ed60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/398c7c19-3cb4-569d-aa65-a7679f137abc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/feb1cf10-c25f-5879-9226-18119183b211/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/d49fe228-6522-5954-8452-1c4909a95084/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp312-cp312-manylinux\_2\_35\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/2cd09224-1fe0-5d60-acf5-7573ed696d58/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp312-cp312-win\_amd64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/f4318110-b6ec-5d18-8c0a-87406edc1807/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/6654c6ed-5532-5e4b-8d71-7a73c796fc94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/d8e719aa-db72-56b9-b4df-f89a4c4c6477/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/b6f99d74-d304-56c1-ad25-4b6122857adf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp313-cp313-manylinux\_2\_35\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/85945663-bdb9-5e85-a81f-0708cd7ab353/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp313-cp313-win\_amd64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/a35ac4db-3a21-5701-9234-24da31fc9605/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/e27b50ab-8951-5ae4-9d10-efe71e88ff9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp314-cp314-macosx\_11\_0\_arm64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/6fddb862-1795-5ae1-8ba1-15bde6ec6254/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/40533a80-6ccc-526a-a208-81a6b6f7c360/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp314-cp314-manylinux\_2\_35\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/eb53efca-fa49-5243-bbce-1dbacc90f5d3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp314-cp314-win\_amd64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/7a8caf9e-e827-501d-975c-aad1226aeed8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp39-cp39-macosx\_10\_12\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/de58c7d9-9a27-5962-803f-1e4415f75ee1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp39-cp39-macosx\_11\_0\_arm64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/724fd26d-7594-5486-a9b6-c27fcc84768f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/6d802901-7b64-5550-9868-29d5b3ffb53e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp39-cp39-manylinux\_2\_35\_x86\_64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/d162f752-32b8-5f3c-aeec-e74591179e83/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### symb\_anafis-0.8.1-cp39-cp39-win\_amd64.whl - [symb\_anafis-0.8.1.dist-info/sboms/symb\_anafis.cyclonedx.json](https://pypi.sbomify.com/artifact/4ca4faec-c074-53f5-8c7f-0fcdc37488fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0013](https://osv.dev/vulnerability/RUSTSEC-2026-0013) | high (7.2) | pyo3 0.28.1 (crates.io) | 0.28.2 | Type confusion when accessing data from sublasses of subclasses of native types with \`abi3\` feature targeting Python 3.12 and up | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/symb-anafis@0.8.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/symb-anafis/0.8.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/symb-anafis/0.8.1