Artifact
- a4binary · retained · product 20
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 76K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies383 | Build behaviour |
|---|---|
| ring0.17.14 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| wit-bindgen0.46.0 | |
| anyhow1.0.104 | |
| arete-macros0.41.0 | |
| async-stream-impl0.3.6 | |
| async-trait0.1.89 | |
| cap-primitives4.0.2 | |
| cap-std4.0.2 | |
| clap_derive4.5.49 | |
| crc32fast1.5.0 | |
| crossbeam-utils0.8.21 | |
| curve25519-dalek4.1.3 | |
| curve25519-dalek-derive0.1.1 | |
| darling_macro0.23.0 | |
| displaydoc0.2.5 | |
| futures-macro0.3.31 | |
| generic-array0.14.7 | |
| getrandom0.3.4 | |
| httparse1.10.1 | |
| iana-time-zone-haiku0.1.2 | |
| icu_normalizer_data2.1.1 | |
| icu_properties_data2.1.2 | |
| io-extras0.19.0 | |
| io-lifetimes2.0.4 | |
| io-lifetimes3.0.1 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.179 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| num-traits0.2.19 | |
| parking_lot_core0.9.12 | |
| pastey0.2.3 | |
| pin-project-internal1.1.10 | |
| portable-atomic1.13.0 | |
| proc-macro21.0.107 | |
| prost-derive0.13.5 | |
| prost-derive0.14.1 | |
| quinn0.11.9 | |
| quinn-udp0.5.14 | |
| quote1.0.47 | |
| ref-cast1.0.25 | |
| ref-cast-impl1.0.25 | |
| rmcp1.3.0 | |
| rmcp-macros1.3.0 | |
| rustix1.1.3 | |
| rustls0.22.4 | |
| rustls0.23.36 | |
| rustversion1.0.22 | |
| schemars_derive1.2.1 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_derive1.0.228 | |
| serde_json1.0.149 | |
| thiserror1.0.69 | |
| thiserror2.0.20 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.20 | |
| tokio-macros2.6.0 | |
| tracing-attributes0.1.31 | |
| typenum1.19.0 | |
| valuable0.1.1 | |
| wasm-bindgen0.2.106 | |
| wasm-bindgen-macro0.2.106 | |
| wasm-bindgen-shared0.2.106 | |
| winapi0.3.9 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| yoke-derive0.8.1 | |
| zerocopy0.8.31 | |
| zerocopy-derive0.8.31 | |
| zerofrom-derive0.1.6 | |
| zerovec-derive0.11.2 | |
| zmij1.0.12 | |
| aho-corasick1.1.4 | |
| allocator-api20.2.21 | |
| ambient-authority0.0.2 | |
| android_system_properties0.1.5 | |
| anstream0.6.21 | |
| anstyle1.0.13 | |
| anstyle-parse0.2.7 | |
| anstyle-query1.1.5 | |
| anstyle-wincon3.0.11 | |
| arete-a4-sdk0.41.0 | |
| arete-artifacts0.4.0 | |
| arete-hash0.5.3 | |
| arete-idl0.8.0 | |
| arete-interpreter0.41.0 | |
| arete-mcp0.41.0 | |
| arete-solana-contracts0.2.0 | |
| atomic-waker1.1.2 | |
| autocfg1.5.0 | |
| base640.22.1 | |
| bitflags2.10.0 | |
| block-buffer0.10.4 | |
| bs580.5.1 | |
| bumpalo3.19.1 | |
| byteorder1.5.0 | |
| bytes1.11.0 | |
| cc1.2.51 | |
| cfg-if1.0.4 | |
| cfg_aliases0.2.1 | |
| chrono0.4.42 | |
| clap4.5.54 | |
| clap_builder4.5.54 | |
| clap_complete4.5.65 | |
| clap_lex0.7.6 | |
| colorchoice1.0.4 | |
| colored2.2.0 | |
| console0.15.11 | |
| core-foundation0.9.4 | |
| core-foundation-sys0.8.7 | |
| cpufeatures0.2.17 | |
| crypto-common0.1.7 | |
| darling0.23.0 | |
| darling_core0.23.0 | |
| dashmap6.1.0 | |
| data-encoding2.9.0 | |
| dialoguer0.11.0 | |
| digest0.10.7 | |
| dirs5.0.1 | |
| dirs-sys0.4.1 | |
| dyn-clone1.0.20 | |
| either1.15.0 | |
| encode_unicode1.0.0 | |
| equivalent1.0.2 | |
| errno0.3.14 | |
| fastrand2.3.0 | |
| fiat-crypto0.2.9 | |
| filetime0.2.27 | |
| find-msvc-tools0.1.6 | |
| five80.2.1 | |
| five8_const0.1.4 | |
| five8_core0.1.2 | |
| flate21.1.5 | |
| fnv1.0.7 | |
| foldhash0.1.5 | |
| form_urlencoded1.2.2 | |
| fs-set-times0.20.3 | |
| fs20.4.3 | |
| futures0.3.31 | |
| futures-channel0.3.31 | |
| futures-core0.3.31 | |
| futures-executor0.3.31 | |
| futures-io0.3.31 | |
| futures-sink0.3.31 | |
| futures-task0.3.31 | |
| futures-util0.3.31 | |
| getrandom0.2.16 | |
| h20.4.13 | |
| hashbrown0.14.5 | |
| hashbrown0.15.5 | |
| hashbrown0.17.1 | |
| heck0.5.0 | |
| hex0.4.3 | |
| http1.4.0 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httpdate1.0.3 | |
| hyper1.8.1 | |
| hyper-rustls0.27.7 | |
| hyper-util0.1.19 | |
| iana-time-zone0.1.64 | |
| icu_collections2.1.1 | |
| icu_locale_core2.1.1 | |
| icu_normalizer2.1.1 | |
| icu_properties2.1.2 | |
| icu_provider2.1.1 | |
| ident_case1.0.1 | |
| idna1.1.0 | |
| idna_adapter1.2.1 | |
| indexmap2.14.2 | |
| indicatif0.17.11 | |
| ipnet2.11.0 | |
| iri-string0.7.10 | |
| is_terminal_polyfill1.70.2 | |
| itertools0.14.0 | |
| itoa1.0.17 | |
| js-sys0.3.83 | |
| jsonc-parser0.33.1 | |
| keccak0.1.6 | |
| lazy_static1.5.0 | |
| libredox0.1.12 | |
| linux-raw-sys0.11.0 | |
| litemap0.8.1 | |
| lock_api0.4.14 | |
| log0.4.29 | |
| lru0.12.5 | |
| lru-slab0.1.2 | |
| matchers0.2.0 | |
| maybe-owned0.3.4 | |
| memchr2.7.6 | |
| minisign-verify0.2.5 | |
| miniz_oxide0.8.9 | |
| mio1.1.1 | |
| nu-ansi-term0.50.3 | |
| number_prefix0.4.0 | |
| once_cell1.21.3 | |
| once_cell_polyfill1.70.2 | |
| openssl-probe0.1.6 | |
| option-ext0.2.0 | |
| parking_lot0.12.5 | |
| percent-encoding2.3.2 | |
| pin-project-lite0.2.16 | |
| pin-utils0.1.0 | |
| potential_utf0.1.4 | |
| ppv-lite860.2.21 | |
| prost0.13.5 | |
| prost-types0.13.5 | |
| quinn-proto0.11.13 | |
| r-efi5.3.0 | |
| rand0.8.5 | |
| rand0.9.2 | |
| rand_chacha0.3.1 | |
| rand_chacha0.9.0 | |
| rand_core0.6.4 | |
| rand_core0.9.3 | |
| redox_users0.4.6 | |
| regex1.12.2 | |
| regex-automata0.4.13 | |
| regex-syntax0.8.8 | |
| reqwest0.12.28 | |
| rustc-hash2.1.1 | |
| rustc_version0.4.1 | |
| rustix-linux-procfs0.1.1 | |
| rustls-native-certs0.7.3 | |
| rustls-pemfile2.2.0 | |
| rustls-pki-types1.13.2 | |
| rustls-webpki0.102.8 | |
| rustls-webpki0.103.8 | |
| ryu1.0.22 | |
| ryu-js1.0.3 | |
| schannel0.1.28 | |
| schemars1.2.1 | |
| scopeguard1.2.0 | |
| security-framework2.11.1 | |
| security-framework-sys2.15.0 | |
| self-replace1.5.0 | |
| semver1.0.27 | |
| serde_derive_internals0.29.1 | |
| serde_json_canonicalizer0.3.2 | |
| serde_spanned0.6.9 | |
| serde_urlencoded0.7.1 | |
| serde_yaml0.9.34+deprecated | |
| sha10.10.6 | |
| sha20.10.9 | |
| sha30.10.8 | |
| sharded-slab0.1.7 | |
| shell-words1.1.1 | |
| shlex1.3.0 | |
| signal-hook-registry1.4.8 | |
| simd-adler320.3.8 | |
| slab0.4.11 | |
| smallvec1.15.1 | |
| socket20.6.1 | |
| solana-atomic-u642.2.1 | |
| solana-decode-error2.3.0 | |
| solana-define-syscall2.3.0 | |
| solana-hash2.3.0 | |
| solana-pubkey2.4.0 | |
| solana-sanitize2.2.1 | |
| solana-sha256-hasher2.3.0 | |
| stable_deref_trait1.2.1 | |
| strsim0.11.1 | |
| subtle2.6.1 | |
| syn2.0.119 | |
| syn3.0.5 | |
| sync_wrapper1.0.2 | |
| synstructure0.13.2 | |
| tar0.4.44 | |
| tempfile3.24.0 | |
| thread_local1.1.9 | |
| tinystr0.8.2 | |
| tinyvec1.10.0 | |
| tinyvec_macros0.1.1 | |
| tokio1.49.0 | |
| tokio-rustls0.25.0 | |
| tokio-rustls0.26.4 | |
| tokio-stream0.1.18 | |
| tokio-tungstenite0.21.0 | |
| tokio-util0.7.18 | |
| toml0.8.23 | |
| toml_datetime0.6.11 | |
| toml_edit0.22.27 | |
| toml_write0.1.2 | |
| tower0.5.2 | |
| tower-http0.6.8 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-core0.1.36 | |
| tracing-log0.2.0 | |
| tracing-subscriber0.3.22 | |
| try-lock0.2.5 | |
| tungstenite0.21.0 | |
| unicode-ident1.0.22 | |
| unicode-normalization0.1.25 | |
| unicode-properties0.1.4 | |
| unicode-width0.2.0 | |
| unsafe-libyaml0.2.11 | |
| untrusted0.9.0 | |
| url2.5.8 | |
| utf-80.7.6 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| uuid1.19.0 | |
| version_check0.9.5 | |
| want0.3.1 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.1+wasi-0.2.4 | |
| wasm-bindgen-futures0.4.56 | |
| wasm-bindgen-macro-support0.2.106 | |
| web-sys0.3.83 | |
| web-time1.1.0 | |
| webpki-roots0.26.11 | |
| webpki-roots1.0.5 | |
| windows-core0.62.2 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| winnow0.7.14 | |
| winx0.36.4 | |
| writeable0.6.2 | |
| xattr1.6.1 | |
| yoke0.8.1 | |
| zerofrom0.1.6 | |
| zeroize1.8.2 | |
| zerotrie0.2.3 | |
| zerovec0.11.5 | |
| windows_aarch64_gnullvm0.48.5 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_gnullvm0.53.1 | |
| windows_aarch64_msvc0.48.5 | |
| windows_aarch64_msvc0.52.6 | |
| windows_aarch64_msvc0.53.1 | |
| windows_i686_gnu0.48.5 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnu0.53.1 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_gnullvm0.53.1 | |
| windows_i686_msvc0.48.5 | |
| windows_i686_msvc0.52.6 | |
| windows_i686_msvc0.53.1 | |
| windows_x86_64_gnu0.48.5 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnu0.53.1 | |
| windows_x86_64_gnullvm0.48.5 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_gnullvm0.53.1 | |
| windows_x86_64_msvc0.48.5 | |
| windows_x86_64_msvc0.52.6 | |
| windows_x86_64_msvc0.53.1 | |
| indexmap1.9.3 | |
| adler22.0.1 | |
| async-stream0.3.6 | |
| axum0.7.9 | |
| axum-core0.4.5 | |
| hashbrown0.12.3 | |
| hyper-timeout0.5.2 | |
| matchit0.7.3 | |
| mime0.3.17 | |
| pin-project1.1.10 | |
| prost0.14.1 | |
| prost-reflect0.16.3 | |
| prost-types0.14.1 | |
| redox_syscall0.5.18 | |
| redox_syscall0.7.0 | |
| rpassword7.4.0 | |
| rtoolbox0.0.3 | |
| socket20.5.10 | |
| tonic0.12.3 | |
| tower0.4.13 | |
| windows-sys0.48.0 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.60.2 | |
| windows-sys0.61.2 | |
| windows-targets0.48.5 | |
| windows-targets0.52.6 | |
| windows-targets0.53.5 |
| Vulnerabilities20 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0258 | h2 | 0.4.13 | >=0.4.16 | high | h2 unbounded empty DATA frames | retained |
| CVE-2026-42559 | rmcp | 1.3.0 | >=1.4.0 | high | rmcp Streamable HTTP server transport has a DNS rebinding vulnerability | retained |
| CVE-2026-63127 | rmcp | 1.3.0 | >=2.0.0 | high | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | retained |
| CVE-2026-63128 | rmcp | 1.3.0 | >=2.0.0 | high | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service | retained |
| CVE-2026-93599 | rustls-webpki | 0.102.8, 0.103.8 | >=0.103.13 | high | rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | retained |
| CVE-2026-25541 | bytes | 1.11.0 | >=1.11.1 | medium | bytes has integer overflow in BytesMut::reserve | retained |
| CVE-2026-64684 | rmcp | 1.3.0 | >=2.1.0 | medium | RMCP: Custom HTTP headers leak to cross-origin redirect targets | retained |
| GHSA-c9xm-49cp-xcr9 | rmcp | 1.3.0 | >=2.0.0 | medium | rmcp OAuth client fetches server-controlled resource_metadata URLs | retained |
| GHSA-2mjx-qc3c-rqvc | rustls | 0.23.36 | >=0.23.45 | medium | Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | retained |
| CVE-2026-93602 | rustls-webpki | 0.102.8, 0.103.8 | >=0.103.10 | medium | webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic | retained |
| CVE-2026-33055 | tar | 0.4.44 | >=0.4.45 | medium | tar-rs incorrectly ignores PAX size headers if header size is nonzero | retained |
| CVE-2026-33056 | tar | 0.4.44 | >=0.4.45 | medium | tar-rs `unpack_in` can chmod arbitrary directories by following symlinks | retained |
| GHSA-3pv8-6f4r-ffg2 | tar | 0.4.44 | >=0.4.46 | medium | tar has a PAX header desynchronization issue | retained |
| GHSA-rhfx-m35p-ff5j | lru | 0.12.5 | >=0.16.3 | low | `IterMut` violates Stacked Borrows by invalidating internal pointer | retained |
| RUSTSEC-2026-0253 | lru | 0.12.5 | >=0.18.2 | low | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | retained |
| RUSTSEC-2025-0119 | number_prefix | 0.4.0 | none published | low | number_prefix crate is unmaintained | retained |
| GHSA-cq8v-f236-94qc | rand | 0.8.5, 0.9.2 | >=0.8.6 | low | Rand is unsound with a custom logger using rand::rng() | retained |
| RUSTSEC-2025-0134 | rustls-pemfile | 2.2.0 | none published | low | rustls-pemfile is unmaintained | retained |
| CVE-2026-93600 | rustls-webpki | 0.102.8, 0.103.8 | >=0.103.12 | low | webpki: Name constraints for URI names were incorrectly accepted | retained |
| CVE-2026-93601 | rustls-webpki | 0.102.8, 0.103.8 | >=0.103.12 | low | webpki: Name constraints were accepted for certificates asserting a wildcard name | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run bd70eb0a-87b0-46ad-a8e7-0cff4aafc6dc
analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2