# SBOM for teanga-pyo3 0.1.1 > Teanga - Rust Implementation The Python package teanga-pyo3 0.1.1 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/teanga-pyo3@0.1.1` - PyPI: https://pypi.org/project/teanga-pyo3/0.1.1/ - License: Apache-2.0 - Requires Python: \>=3.10 - Documentation: - Homepage: ## SBOMs ### teanga\_pyo3-0.1.1-cp310-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a7897772-f8bf-55ed-b8ac-2ce2e9cd79cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### teanga\_pyo3-0.1.1-cp310-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/989f8f1c-cbc4-5415-a8cf-65154b958a23/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### teanga\_pyo3-0.1.1-cp310-abi3-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/aec200ea-aec4-5d6a-b5ca-0f47ea29206a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### teanga\_pyo3-0.1.1-cp310-abi3-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6e4df63b-8b4a-50f7-833d-26964d56cc37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### teanga\_pyo3-0.1.1-cp310-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b5ad8d75-bd9a-5e26-a0ea-dcbe64764131/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### teanga\_pyo3-0.1.1-cp310-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/1c2c3b41-cf8f-5c92-a16b-0036c45b30d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ### teanga\_pyo3-0.1.1-cp310-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, TeangaNLP/teanga.rs, workflow python-wheels.yml). - [teanga\_pyo3-0.1.1.dist-info/sboms/teanga-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2e01a81a-5a4b-5f81-9e6b-8a363e762e32/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 8 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2025-0067](https://osv.dev/vulnerability/RUSTSEC-2025-0067) | high (8.7) | libyml 0.0.5 (crates.io) | none listed | \`libyml::string::yaml\_string\_extend\` is unsound and unmaintained | | [RUSTSEC-2025-0068](https://osv.dev/vulnerability/RUSTSEC-2025-0068) | medium (6.9) | serde\_yml 0.0.12 (crates.io) | none listed | serde\_yml crate is unsound and unmaintained | | [RUSTSEC-2026-0002](https://osv.dev/vulnerability/RUSTSEC-2026-0002) | low (2.7) | lru 0.12.5 (crates.io) | 0.16.3 | \`IterMut\` violates Stacked Borrows by invalidating internal pointer | | [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained | | [RUSTSEC-2024-0384](https://osv.dev/vulnerability/RUSTSEC-2024-0384) | unknown | instant 0.1.13 (crates.io) | none listed | \`instant\` is unmaintained | | [RUSTSEC-2026-0253](https://osv.dev/vulnerability/RUSTSEC-2026-0253) | unknown | lru 0.12.5 (crates.io) | 0.18.2 | Potential use-after-free due to lack of panic safety in \`LruCache::pop()\` | | [RUSTSEC-2024-0449](https://osv.dev/vulnerability/RUSTSEC-2024-0449) | unknown | unsafe-libyaml 0.2.11 (crates.io) | none listed | unsafe-libyaml is unmaintained | | [RUSTSEC-2024-0320](https://osv.dev/vulnerability/RUSTSEC-2024-0320) | unknown | yaml-rust 0.4.5 (crates.io) | none listed | yaml-rust is unmaintained. | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/teanga-pyo3@0.1.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/teanga-pyo3/0.1.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/teanga-pyo3/0.1.1