# SBOM for trainingsample 0.3.2

> High-performance Rust reimplementation of GIL-blocking video/image operations

The Python package trainingsample 0.3.2 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/trainingsample@0.3.2`
- PyPI: https://pypi.org/project/trainingsample/0.3.2/
- License: MIT
- Requires Python: \>=3.11

## SBOMs

### trainingsample-0.3.2-cp311-cp311-macosx\_11\_0\_arm64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/d263182b-fa79-5480-9105-abc17d4127fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp311-cp311-manylinux\_2\_35\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/e8043bfb-bd98-5663-8f0e-c2135c3325db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp311-cp311-manylinux\_2\_38\_aarch64.manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/b89bdd0b-d9ae-5ef1-9295-8742ce05723d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp311-cp311-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/7e88d6b3-71b8-5201-9f38-417f4ae3baf6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp311-cp311-manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/d7495ebd-d803-5528-9eee-606c33513aec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp311-cp311-manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/d6c97130-3d84-5bcd-80a0-084eda8da4e6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp312-cp312-macosx\_11\_0\_arm64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/984eca2e-4857-5658-9548-3047e058b14f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp312-cp312-manylinux\_2\_35\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/ef43674b-9cb0-5391-a079-daf6c6ab93c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp312-cp312-manylinux\_2\_38\_aarch64.manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/4f34a11e-54f0-5f44-9132-de5d242692d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp312-cp312-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/f076b9a3-2202-5852-bee5-553490bc9dbf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp312-cp312-manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/5691db22-b65e-5ecf-bba9-b0846918a2e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp312-cp312-manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/f39d2399-679d-5434-a87d-662d10a6072f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp313-cp313-macosx\_11\_0\_arm64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/d646801a-0d29-5168-b2da-b5507f85bef0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp313-cp313-manylinux\_2\_35\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/eca3a323-08b7-5740-8ad8-3489e6e9b913/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp313-cp313-manylinux\_2\_38\_aarch64.manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/90c50456-8519-5a92-936a-8f50aecb2bc2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp313-cp313-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/5924872d-6bda-5878-90fc-6489dabfbf3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp313-cp313-manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/b819e577-e41e-5fd7-9b55-f3c6dfbb49f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp313-cp313-manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/08746dbe-739e-55fe-8ffe-fa3812a3b091/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp314-cp314-macosx\_11\_0\_arm64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/51bbe1a2-12d6-5eba-aa60-414e7b37e5c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp314-cp314-manylinux\_2\_35\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/fd623965-7881-5dbd-b816-0b009674ac7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp314-cp314-manylinux\_2\_38\_aarch64.manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/474e956a-1f99-574a-bdc0-1df12cddeaa4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp314-cp314-manylinux\_2\_38\_x86\_64.manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/ce774755-c148-572d-aa6b-cdc128daa06c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp314-cp314-manylinux\_2\_39\_aarch64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/ff9a5dc5-b214-5ef4-9ac0-f58a903e2a5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### trainingsample-0.3.2-cp314-cp314-manylinux\_2\_39\_x86\_64.whl

- [trainingsample-0.3.2.dist-info/sboms/trainingsample.cyclonedx.json](https://pypi.sbomify.com/artifact/80de3cc5-a0f2-58b0-a256-0960e2e666a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2026-0192](https://osv.dev/vulnerability/RUSTSEC-2026-0192) | unknown | ttf-parser 0.25.1 (crates.io) | none listed | \`ttf-parser\` is unmaintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/trainingsample@0.3.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/trainingsample/0.3.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/trainingsample/0.3.2