`pyo3`

Ecosystem:
cargo

Package URL:
pkg:cargo/pyo3

Total PRs:
873 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
415 repositories

Unique Repos (30 days):
44 repositories

Security Advisories

Build corruption when using `PYO3_CONFIG_FILE` environment variable

GHSA-vxcf-c7mx-pg53 MODERATE published over 1 year ago • updated 2 days ago

In PyO3 0.23.0 the `PYO3_CONFIG_FILE` environment variable used to configure builds regressed such that changing the environment variable would no ...

PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature

GHSA-47qc-857f-7w7f HIGH published 19 days ago • updated 6 days ago

PyO3 0.28.1 added support for `#[pyclass(extends=PyList)] struct NativeSub` (and other native types) when targeting Python 3.12 and up with the `ab...

PyO3 Risk of buffer overflow in `PyString::from_object`

GHSA-pph8-gcv7-4qj5 LOW published 11 months ago • updated 3 days ago

`PyString::from_object` took `&str` arguments and forwarded them directly to the Python C API without checking for terminating nul bytes. This coul...

PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references

GHSA-6jgw-rgmm-7cv6 CVE-2024-9979 MODERATE published over 1 year ago • updated 2 days ago

The family of functions to read "borrowed" values from Python weak references were fundamentally unsound, because the weak reference does itself no...

0.28.0 → 0.28.2 Patch PR

Closed 5 days ago 1 comment

Bump the version-updates group across 1 directory with 9 updates

opencloudtool/opencloudtool #581

0.28.0 → 0.28.2 Patch PR

Closed 8 days ago 2 comments

Bump pyo3 from 0.28.1 to 0.28.2 in the pyo3 group

RustPython/RustPython #7253

0.28.1 → 0.28.2 Patch PR

Closed 11 days ago 2 comments

Bump the version-updates group across 1 directory with 7 updates

opencloudtool/opencloudtool #580

0.28.0 → 0.28.2 Patch PR

Open 15 days ago 1 comment

chore(deps): Bump pyo3 from 0.28.1 to 0.28.2

sorairolake/abcrypt #966

0.28.1 → 0.28.2 Patch PR

Open 15 days ago 1 comment

deps(rust): bump the rust-minor group across 1 directory with 9 updates

NikkeTryHard/tach-core #102

0.28.0 → 0.28.2 Patch PR

Closed 18 days ago 1 comment

chore(deps): Bump pyo3 from 0.28.1 to 0.28.2

tachyon-beep/murk #32

0.28.1 → 0.28.2 Patch PR

Open 18 days ago 2 comments

build(deps): bump pyo3 from 0.28.1 to 0.28.2 in the cargo group across 1 directory

munich-quantum-toolkit/naviz #402

0.28.1 → 0.28.2 Patch PR

Closed 18 days ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.2 in /pydantic-core

pydantic/pydantic #12839

0.28.0 → 0.28.2 Patch PR

Open 18 days ago 3 comments

chore(deps): bump pyo3 from 0.28.0 to 0.28.2

cosmol-studio/COSMol-viewer #8

0.28.0 → 0.28.2 Patch PR

Closed 18 days ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.2

sockmaster27/qlit #14

0.28.0 → 0.28.2 Patch PR

Open 18 days ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

RustedBytes/scraper-rs #48

0.28.0 → 0.28.1 Patch PR

Open 22 days ago 4 comments

Bump the version-updates group with 6 updates

opencloudtool/opencloudtool #577

0.28.0 → 0.28.1 Patch PR

Open 22 days ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

sockmaster27/qlit #13

0.28.0 → 0.28.1 Patch PR

Closed 22 days ago 2 comments

Bump pyo3 from 0.28.0 to 0.28.1

G-Research/ahocorasick_rs #156

0.28.0 → 0.28.1 Patch PR

Closed 23 days ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

RustedBytes/fasttime #18

0.28.0 → 0.28.1 Patch PR

Closed 23 days ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

jcmgray/cotengrust #49

0.28.0 → 0.28.1 Patch PR

Closed 23 days ago 1 comment

Bump the rust-dependencies group across 1 directory with 9 updates

NextStat/nextstat.io #16

0.28.0 → 0.28.1 Patch PR

Closed 24 days ago 1 comment

⬆️ Bump the all group across 1 directory with 4 updates

jawah/qh3 #101

0.27.1 → 0.27.2 Patch PR

Closed 2 months ago 1 comment

chore(dep): bump the deps group across 1 directory with 10 updates

clearloop/leetcode-cli #213

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the minor group across 1 directory with 52 updates

benbrandt/text-splitter #955

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

Bump the all-rust-dependencies group across 1 directory with 19 updates

demhadais/cellnoor #307

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

Bump the version-updates group across 1 directory with 5 updates

opencloudtool/opencloudtool #533

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 2 comments

Bump the rust group across 1 directory with 3 updates

egraphs-good/egglog-python #385

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the minor group across 1 directory with 44 updates

Eventual-Inc/Daft #5732

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the minor group across 1 directory with 43 updates

Eventual-Inc/Daft #5729

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 3 comments

Bump pyo3 from 0.27.1 to 0.27.2

Qiskit/qiskit #15408

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 2 comments

Bump the version-updates group with 2 updates

opencloudtool/opencloudtool #532

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the minor group with 40 updates

Eventual-Inc/Daft #5715

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 3 comments

chore(deps): Bump pyo3 from 0.27.1 to 0.27.2

sorairolake/abcrypt #897

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 1 comment

chore(deps): Bump pyo3 from 0.27.1 to 0.27.2 in the rust-dependencies group across 1 directory

PostHog/hogtrace #14

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

Bump the dependencies group with 3 updates

Jij-Inc/ommx #686

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

Bump the all-rust-dependencies group across 1 directory with 15 updates

demhadais/scamplers #303

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

Bump pyo3 from 0.27.1 to 0.27.2

AayushSarkar/quantum-algorithms-for-chemistry #8

0.27.1 → 0.27.2 Patch PR

Open 3 months ago 1 comment

chore(deps-rs): bump pyo3 from 0.27.1 to 0.27.2 in the patch group

Quantinuum/hugr-qir #158

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

Bump the rust-version-updates group across 1 directory with 43 updates

pantsbuild/pants #22922

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

⬆️ Bump the all group with 3 updates

jawah/qh3 #98

0.27.1 → 0.27.2 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump pyo3 from 0.27.0 to 0.27.1

RaulCatalinas/LogKeeper-Python #1

0.27.0 → 0.27.1 Patch PR

Open 4 months ago 1 comment

Bump the rust-version-updates group in /src/rust with 40 updates

pantsbuild/pants #22793

0.27.0 → 0.27.1 Patch PR

Closed 5 months ago 2 comments

Update pyo3 requirement from >=0.24, <0.27 to >=0.24, <0.28

jelmer/debversion-rs #58

>=0.24, <0.27 → >=0.24, <0.28 Patch PR

Open 5 months ago 2 comments

Bump the rust-deps group across 1 directory with 3 updates

magnuswatn/sertifikatsok #752

0.24.1 → 0.24.2 Patch PR

Closed 5 months ago 2 comments

Bump the cargo group across 1 directory with 2 updates

kdbrooks/datafusion-python #2

0.16.5 → 0.16.6 Patch PR

Open 6 months ago

chore(deps): bump pyo3 from 0.24.0 to 0.24.1 in /machine_dialect_vm in the cargo group across 1 directory

kennylajara/machine-dialect #4

0.24.0 → 0.24.1 Patch PR

Open 6 months ago

Update pyo3 requirement from >=0.24, <0.26 to >=0.24, <0.27

jelmer/debversion-rs #56

>=0.24, <0.26 → >=0.24, <0.27 Patch PR

Merged 6 months ago

build(deps): Bump pyo3 from 0.25.0 to 0.25.1

brianmay/robotica-rust #897

0.25.0 → 0.25.1 Patch PR

Merged 7 months ago

Bump pyo3 from 0.20.0 to 0.20.3

langkebo/synapse-friends #2

0.20.0 → 0.20.3 Patch PR

Open 7 months ago

Bump pyo3 from 0.23.2 to 0.23.5

mpiannucci/gribberish #80

0.23.2 → 0.23.5 Patch PR

Open 7 months ago

build(deps): bump pyo3 from 0.24.0 to 0.24.2 in the cargo group

kand-ta/kand #30

0.24.0 → 0.24.2 Patch PR

Open 7 months ago

Bump pyo3 from 0.25.0 to 0.25.1 in /rust

jfolz/ducer #33

0.25.0 → 0.25.1 Patch PR

Open 8 months ago

Bump the dependencies group with 8 updates

mitmproxy/mitmproxy_rs #271

0.25.0 → 0.25.1 Patch PR

Merged 8 months ago

Package Details

Name:	`pyo3`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/pyo3`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 1

MODERATE 3

LOW 1

View All cargo Advisories

Package Information

Description:

Bindings to Python interpreter

Repository:	https://github.com/pyo3/pyo3
Homepage:	https://github.com/pyo3/pyo3
Latest Release:	`0.25.0` 10 months ago
Dependent Repos:	2,349
Dependent Packages:	666
Downloads:	81,241,315
Ranking:	Top 0.8061% by dependent repos Top 0.354% by downloads Top 0.1269% by dependent pkgs

PR Status

Open 344 (39.4%)

Merged 159 (18.2%)

Closed 283 (32.4%)

PR Types

Minor 532 (60.9%)

Patch 184 (21.1%)

pyo3

Security Advisories

Build corruption when using `PYO3_CONFIG_FILE` environment variable

PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature

PyO3 Risk of buffer overflow in `PyString::from_object`

PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references

Reference counting error in pyo3

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`pyo3`