`pyo3`

Ecosystem:
cargo

Package URL:
pkg:cargo/pyo3

Total PRs:
939 Dependabot PRs

Latest PR:
18 days ago

Unique Repositories:
452 repositories

Unique Repos (30 days):
9 repositories

Security Advisories

PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature

GHSA-47qc-857f-7w7f HIGH published 4 months ago • updated 2 months ago

PyO3 0.28.1 added support for `#[pyclass(extends=PyList)] struct NativeSub` (and other native types) when targeting Python 3.12 and up with the `ab...

Reference counting error in pyo3

GHSA-2vx6-fcw6-hpr6 CVE-2020-35917 MODERATE published almost 5 years ago • updated 29 days ago

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>.

Build corruption when using `PYO3_CONFIG_FILE` environment variable

GHSA-vxcf-c7mx-pg53 MODERATE published over 1 year ago • updated 2 months ago

In PyO3 0.23.0 the `PYO3_CONFIG_FILE` environment variable used to configure builds regressed such that changing the environment variable would no ...

PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references

GHSA-6jgw-rgmm-7cv6 CVE-2024-9979 MODERATE published over 1 year ago • updated 2 months ago

The family of functions to read "borrowed" values from Python weak references were fundamentally unsound, because the weak reference does itself no...

0.28.2 → 0.28.3 Patch PR

Open 18 days ago 2 comments

deps(rust): bump the rust-minor group across 1 directory with 16 updates

NikkeTryHard/tach-core #112

0.28.2 → 0.28.3 Patch PR

Closed 20 days ago 1 comment

build(deps): bump the rust-dependencies group across 1 directory with 33 updates

NextStat/nextstat.io #35

0.28.0 → 0.28.3 Patch PR

Closed 21 days ago 1 comment

deps(rust): bump the rust-dependencies group across 1 directory with 27 updates

reasonkit/reasonkit-core #43

0.28.2 → 0.28.3 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the prod-deps group across 1 directory with 14 updates

mozilla-services/syncstorage-rs #2287

0.28.2 → 0.28.3 Patch PR

Closed about 1 month ago 1 comment

Bump the cargo group across 1 directory with 2 updates

rhamenator/ai-scraping-defense #1795

0.28.0 → 0.28.2 Patch PR

Closed about 1 month ago 2 comments

chore(deps-rs): bump the patch group across 1 directory with 10 updates

Quantinuum/hugr #3045

0.28.2 → 0.28.3 Patch PR

Closed about 1 month ago 2 comments

Bump the version-updates group across 1 directory with 9 updates

opencloudtool/opencloudtool #593

0.28.2 → 0.28.3 Patch PR

Open about 2 months ago 1 comment

chore: bump the rust-dependencies group with 3 updates

pynenc/cistell #46

0.28.2 → 0.28.3 Patch PR

Open about 2 months ago 1 comment

Bump the minor-and-patch group with 5 updates

amaye15/JSON-Tools-rs #6

0.28.2 → 0.28.3 Patch PR

Open about 2 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.2

garnet-labs/monty #2

0.28.0 → 0.28.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the update group across 1 directory with 2 updates

dousu/maou #371

0.28.2 → 0.28.3 Patch PR

Closed about 2 months ago 2 comments

deps: bump the minor-and-patch group across 1 directory with 4 updates

AiBrush/mutagen-rs #48

0.28.0 → 0.28.3 Patch PR

Closed 2 months ago 2 comments

build(deps): bump pyo3 from 0.28.2 to 0.28.3

AndroZa0812/HyperInfer #83

0.28.2 → 0.28.3 Patch PR

Open 2 months ago 3 comments

chore(deps): bump the rust-dependencies group across 1 directory with 9 updates

Coldaine/ColdVox #390

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 3 comments

Bump pyo3 from 0.28.2 to 0.28.3

hyperlight-dev/hyperlight-sandbox #32

0.28.2 → 0.28.3 Patch PR

Open 2 months ago 1 comment

chore(deps-rs): bump the patch group across 1 directory with 7 updates

Quantinuum/hugr #3018

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 2 comments

build(deps): bump pyo3 from 0.28.2 to 0.28.3

systemslibrarian/meow-decoder #136

0.28.2 → 0.28.3 Patch PR

Open 2 months ago 1 comment

deps(rust): bump the rust-dependencies group across 1 directory with 9 updates

reasonkit/reasonkit-mem #29

0.28.2 → 0.28.3 Patch PR

Open 2 months ago 1 comment

deps(rust): bump the rust-dependencies group across 1 directory with 21 updates

reasonkit/reasonkit-core #37

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 2 comments

Bump the crates-io group with 3 updates

djc/pyrtls #170

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 1 comment

build(deps): bump pyo3 from 0.28.2 to 0.28.3

rodneylab/subsetter #236

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 1 comment

Bump the rust-deps group across 1 directory with 7 updates

coreyleavitt/ferrosync #191

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 1 comment

Bump pyo3 from 0.28.2 to 0.28.3

chingiztob/ferrobus #64

0.28.2 → 0.28.3 Patch PR

Open 2 months ago 1 comment

chore(deps): bump pyo3 from 0.28.2 to 0.28.3

tmke8/math-core #924

0.28.2 → 0.28.3 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the prod-deps group across 1 directory with 11 updates

mozilla-services/syncstorage-rs #2191

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the minor group with 17 updates

benbrandt/text-splitter #1092

0.28.2 → 0.28.3 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the rust-dependencies group with 20 updates

NextStat/nextstat.io #24

0.28.0 → 0.28.2 Patch PR

Closed 3 months ago 1 comment

Bump the version-updates group across 1 directory with 9 updates

opencloudtool/opencloudtool #581

0.28.0 → 0.28.2 Patch PR

Closed 3 months ago 2 comments

Bump pyo3 from 0.28.1 to 0.28.2 in the pyo3 group

RustPython/RustPython #7253

0.28.1 → 0.28.2 Patch PR

Closed 3 months ago 2 comments

Bump the version-updates group across 1 directory with 7 updates

opencloudtool/opencloudtool #580

0.28.0 → 0.28.2 Patch PR

Open 4 months ago 1 comment

chore(deps): Bump pyo3 from 0.28.1 to 0.28.2

sorairolake/abcrypt #966

0.28.1 → 0.28.2 Patch PR

Open 4 months ago 1 comment

deps(rust): bump the rust-minor group across 1 directory with 9 updates

NikkeTryHard/tach-core #102

0.28.0 → 0.28.2 Patch PR

Closed 4 months ago 1 comment

chore(deps): Bump pyo3 from 0.28.1 to 0.28.2

tachyon-beep/murk #32

0.28.1 → 0.28.2 Patch PR

Open 4 months ago 2 comments

build(deps): bump pyo3 from 0.28.1 to 0.28.2 in the cargo group across 1 directory

munich-quantum-toolkit/naviz #402

0.28.1 → 0.28.2 Patch PR

Closed 4 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.2 in /pydantic-core

pydantic/pydantic #12839

0.28.0 → 0.28.2 Patch PR

Open 4 months ago 3 comments

chore(deps): bump pyo3 from 0.28.0 to 0.28.2

cosmol-studio/COSMol-viewer #8

0.28.0 → 0.28.2 Patch PR

Closed 4 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.2

sockmaster27/qlit #14

0.28.0 → 0.28.2 Patch PR

Open 4 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

RustedBytes/scraper-rs #48

0.28.0 → 0.28.1 Patch PR

Open 4 months ago 4 comments

Bump the version-updates group with 6 updates

opencloudtool/opencloudtool #577

0.28.0 → 0.28.1 Patch PR

Open 4 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

sockmaster27/qlit #13

0.28.0 → 0.28.1 Patch PR

Closed 4 months ago 2 comments

Bump pyo3 from 0.28.0 to 0.28.1

G-Research/ahocorasick_rs #156

0.28.0 → 0.28.1 Patch PR

Closed 4 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

RustedBytes/fasttime #18

0.28.0 → 0.28.1 Patch PR

Closed 4 months ago 1 comment

Bump pyo3 from 0.28.0 to 0.28.1

jcmgray/cotengrust #49

0.28.0 → 0.28.1 Patch PR

Closed 4 months ago 1 comment

Bump the rust-dependencies group across 1 directory with 9 updates

NextStat/nextstat.io #16

0.28.0 → 0.28.1 Patch PR

Closed 4 months ago 1 comment

⬆️ Bump the all group across 1 directory with 4 updates

jawah/qh3 #101

0.27.1 → 0.27.2 Patch PR

Closed 5 months ago 1 comment

chore(dep): bump the deps group across 1 directory with 10 updates

clearloop/leetcode-cli #213

0.27.1 → 0.27.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the minor group across 1 directory with 52 updates

benbrandt/text-splitter #955

0.27.1 → 0.27.2 Patch PR

Closed 6 months ago 1 comment

Bump the all-rust-dependencies group across 1 directory with 19 updates

demhadais/cellnoor #307

0.27.1 → 0.27.2 Patch PR

Closed 6 months ago 1 comment

Bump the version-updates group across 1 directory with 5 updates

opencloudtool/opencloudtool #533

0.27.1 → 0.27.2 Patch PR

Open 6 months ago 2 comments

Package Details

Name:	`pyo3`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/pyo3`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 1

MODERATE 3

LOW 1

View All cargo Advisories

Package Information

Description:

Bindings to Python interpreter

Repository:	https://github.com/pyo3/pyo3
Homepage:	https://github.com/pyo3/pyo3
Latest Release:	`0.25.0` about 1 year ago
Dependent Repos:	2,349
Dependent Packages:	666
Downloads:	81,241,315
Ranking:	Top 0.8061% by dependent repos Top 0.354% by downloads Top 0.1269% by dependent pkgs

PR Status

Open 370 (39.4%)

Merged 159 (16.9%)

Closed 323 (34.4%)

PR Types

Minor 565 (60.2%)

Patch 211 (22.5%)

pyo3

Security Advisories

PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature

Reference counting error in pyo3

Build corruption when using `PYO3_CONFIG_FILE` environment variable

PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references

PyO3 Risk of buffer overflow in `PyString::from_object`

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`pyo3`