# SBOM for tatva-coloring 0.0.2 > Matrix coloring algorithms for tatva implemented in Rust. The Python package tatva-coloring 0.0.2 ships 13 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/tatva-coloring@0.0.2` - PyPI: https://pypi.org/project/tatva-coloring/0.0.2/ - Requires Python: \>=3.11 - repository: ## SBOMs ### tatva\_coloring-0.0.2-cp311-cp311-macosx\_11\_0\_arm64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/9cf32927-58c6-5087-816c-ad59c1be5601/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/8a6b0adb-40d4-5932-9a93-1c6f5a7a1cbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp311-cp311-win\_amd64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/ec82228a-9646-5622-8e8e-3d08602e8baa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp312-cp312-macosx\_11\_0\_arm64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/cbead971-2fa2-5177-af8d-2ecf0588a509/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/8c295cc3-c0ef-5063-8ea4-44fe85cf2ba9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp312-cp312-win\_amd64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/1d2d27c1-e3bf-54b6-ba18-720a59805f14/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp313-cp313-macosx\_11\_0\_arm64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/85893021-a8f1-5cb5-9fd5-fdd4efd7dab5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/76b66ba5-07b9-51ba-aae4-a71595b55f26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp313-cp313-win\_amd64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/5800cc05-b08a-5e04-af36-cd073237d167/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp314-cp314-macosx\_11\_0\_arm64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/50fb8388-e2b3-5b4a-a7d0-12fc40853107/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/b0fc5050-c56b-5397-a453-0c1e5a80ccfc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-cp314-cp314-win\_amd64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/94b3ed66-b711-58ff-9b75-cb5ac7fbf911/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tatva\_coloring-0.0.2-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tatva\_coloring-0.0.2.dist-info/sboms/tatva-coloring.cyclonedx.json](https://pypi.sbomify.com/artifact/51f8f2cb-62d9-523e-9e41-408e0a73bf24/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tatva-coloring@0.0.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tatva-coloring/0.0.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tatva-coloring/0.0.2