cargo / acknowledgements-rs
acknowledgements-rs 2.0.0
21 vulnerabilities- processes
- 491
- operations
- 116K
- packages
- 395
- compiler runs
- 1,508
- connections
- 1
- job time
- 3m 35s
- capture
- 1.1 MB
- records
- 185K
- bytes / record
- 5.9
acknowledge is a simple CLI tool to analyze dependencies of a Cargo (rust) project and produce an ACKNOWLEDMENTS.md file listing (major) contributors of your dependencies
Artifact
- acknowledgebinary · retained · product 21
Checks
11 of 14 clear · 1 not checked Known vulnerabilities Dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲○▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 116K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies448 | Build behaviour |
|---|---|
| aho-corasick1.1.5 | |
| anstream0.6.21 | |
| anstyle1.0.13 | |
| anstyle-parse0.2.7 | |
| anstyle-query1.1.4 | |
| anyhow1.0.100 | |
| arc-swap1.7.1 | |
| arraydeque0.5.1 | |
| async-compression0.4.50 | |
| atomic-waker1.1.2 | |
| aws-lc-rs1.18.2 | |
| aws-lc-sys0.46.0 | |
| base640.21.7 | |
| base640.22.1 | |
| base640.23.1 | |
| bitflags2.10.0 | |
| block-buffer0.10.4 | |
| boxcar0.2.14 | |
| bstr1.9.1 | |
| bytecount0.6.9 | |
| bytes1.10.1 | |
| cacache13.1.0 | |
| cargo_toml0.20.5 | |
| cfg-if1.0.4 | |
| chrono0.4.42 | |
| clap4.5.50 | |
| clap_builder4.5.50 | |
| clap_lex0.7.6 | |
| colorchoice1.0.4 | |
| compression-codecs0.4.45 | |
| compression-core0.4.33 | |
| cpufeatures0.2.17 | |
| crates_io_api0.11.0 | |
| crc32fast1.5.2 | |
| crossbeam-utils0.8.23 | |
| crypto-common0.1.6 | |
| dashmap6.2.1 | |
| deps-bundler2.0.0 | |
| deps-composer2.0.0 | |
| deps-core2.0.0 | |
| deps-go2.0.0 | |
| deps-maven2.0.0 | |
| deps-npm2.0.0 | |
| deps-nuget2.0.0 | |
| deps-pypi2.0.0 | |
| deranged0.3.11 | |
| digest0.10.7 | |
| dirs5.0.1 | |
| dirs7.0.0 | |
| dirs-sys0.4.1 | |
| dirs-sys0.5.0 | |
| either1.15.0 | |
| encoding_rs0.8.35 | |
| equivalent1.0.2 | |
| fastrand2.3.0 | |
| flate21.1.10 | |
| fnv1.0.7 | |
| foldhash0.2.0 | |
| foreign-types0.3.2 | |
| foreign-types-shared0.1.1 | |
| form_urlencoded1.2.2 | |
| futures0.3.31 | |
| futures-channel0.3.31 | |
| futures-core0.3.31 | |
| futures-executor0.3.31 | |
| futures-io0.3.31 | |
| futures-sink0.3.31 | |
| futures-task0.3.31 | |
| futures-util0.3.31 | |
| generic-array0.14.9 | |
| getrandom0.2.16 | |
| getrandom0.3.4 | |
| h20.4.12 | |
| handlebars5.1.2 | |
| hashbrown0.14.5 | |
| hashbrown0.16.0 | |
| hashbrown0.17.1 | |
| hashlink0.12.2 | |
| hex0.4.3 | |
| http1.3.1 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httparse1.10.1 | |
| hyper1.7.0 | |
| hyper-rustls0.26.0 | |
| hyper-rustls0.27.7 | |
| hyper-timeout0.5.1 | |
| hyper-tls0.6.0 | |
| hyper-util0.1.17 | |
| iana-time-zone0.1.64 | |
| icu_collections2.0.0 | |
| icu_locale_core2.0.0 | |
| icu_normalizer2.0.0 | |
| icu_normalizer_data2.0.0 | |
| icu_properties2.0.1 | |
| icu_properties_data2.0.1 | |
| icu_provider2.0.0 | |
| idna1.1.0 | |
| idna_adapter1.2.1 | |
| indexmap2.12.0 | |
| ipnet2.11.0 | |
| iri-string0.7.8 | |
| is_terminal_polyfill1.70.2 | |
| itertools0.13.0 | |
| itoa1.0.15 | |
| jsonc-parser0.33.2 | |
| jsonwebtoken9.3.0 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.190 | |
| libc.so.6 | |
| libcrypto.so.3 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libssl.so.3 | |
| linux-raw-sys0.11.0 | |
| litemap0.8.0 | |
| lock_api0.4.14 | |
| log0.4.28 | |
| memchr2.7.6 | |
| memmap20.5.10 | |
| miette5.10.0 | |
| miette7.6.0 | |
| mime0.3.17 | |
| miniz_oxide0.9.1 | |
| mio1.2.4 | |
| native-tls0.2.14 | |
| node-semver2.2.0 | |
| nom7.1.3 | |
| num-bigint0.4.5 | |
| num-conv0.1.0 | |
| num-integer0.1.46 | |
| num-traits0.2.19 | |
| octocrab0.38.0 | |
| once_cell1.21.4 | |
| openssl0.10.74 | |
| openssl-probe0.1.6 | |
| openssl-probe0.2.1 | |
| openssl-sys0.9.110 | |
| option-ext0.2.0 | |
| parking_lot_core0.9.12 | |
| pem3.0.4 | |
| pep440_rs0.7.3 | |
| pep508_rs0.9.2 | |
| percent-encoding2.3.2 | |
| pest2.7.10 | |
| pin-project1.1.5 | |
| pin-project-lite0.2.16 | |
| pin-utils0.1.0 | |
| potential_utf0.1.3 | |
| powerfmt0.2.0 | |
| quick-xml0.42.0 | |
| reflink-copy0.1.28 | |
| regex1.13.1 | |
| regex-automata0.4.18 | |
| regex-syntax0.8.11 | |
| reqwest0.12.24 | |
| reqwest0.13.5 | |
| ring0.17.14 | |
| rustc-hash2.1.3 | |
| rustix1.1.2 | |
| rustls0.22.4 | |
| rustls0.23.34 | |
| rustls-native-certs0.7.0 | |
| rustls-native-certs0.8.5 | |
| rustls-pemfile2.1.2 | |
| rustls-pki-types1.12.0 | |
| rustls-platform-verifier0.7.1 | |
| rustls-webpki0.102.8 | |
| rustls-webpki0.103.7 | |
| ryu1.0.20 | |
| same-file1.0.6 | |
| scopeguard1.2.0 | |
| secrecy0.8.0 | |
| semver1.0.28 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.145 | |
| serde_path_to_error0.1.16 | |
| serde_spanned0.6.9 | |
| serde_urlencoded0.7.1 | |
| sha-10.10.1 | |
| sha10.10.6 | |
| sha20.10.9 | |
| simd-adler320.3.10 | |
| simple_asn10.6.2 | |
| slab0.4.11 | |
| smallvec1.15.1 | |
| snafu0.8.3 | |
| socket20.6.5 | |
| ssri9.2.0 | |
| stable_deref_trait1.2.1 | |
| strsim0.11.1 | |
| strum0.26.2 | |
| subtle2.6.1 | |
| sync_wrapper1.0.2 | |
| tempfile3.23.0 | |
| thiserror1.0.69 | |
| thiserror2.0.21 | |
| time0.3.36 | |
| time-core0.1.2 | |
| tinystr0.8.1 | |
| tokio1.53.3 | |
| tokio-native-tls0.3.1 | |
| tokio-rustls0.25.0 | |
| tokio-rustls0.26.4 | |
| tokio-stream0.1.17 | |
| tokio-util0.7.16 | |
| toml0.8.23 | |
| toml-span0.7.2 | |
| toml_datetime0.6.11 | |
| toml_edit0.22.27 | |
| toml_write0.1.2 | |
| tower0.4.13 | |
| tower0.5.2 | |
| tower-http0.5.2 | |
| tower-http0.6.11 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.41 | |
| tracing-core0.1.34 | |
| try-lock0.2.5 | |
| typenum1.19.0 | |
| ucd-trie0.1.6 | |
| unfmt0.2.2 | |
| unicode-general-category1.1.0 | |
| unicode-width0.1.14 | |
| unicode-width0.2.2 | |
| unscanny0.1.0 | |
| untrusted0.9.0 | |
| url2.5.7 | |
| urlencoding2.1.3 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| version-ranges0.1.3 | |
| walkdir2.5.0 | |
| want0.3.1 | |
| winnow0.7.13 | |
| writeable0.6.1 | |
| xxhash-rust0.8.15 | |
| yaml-rust20.13.0 | |
| yoke0.8.0 | |
| zerofrom0.1.6 | |
| zeroize1.9.1 | |
| zerotrie0.2.2 | |
| zerovec0.11.4 | |
| adler22.0.1 | |
| minimal-lexical0.2.1 | |
| unicode-ident1.0.20 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.10 | |
| async-trait0.1.80 | |
| autocfg1.5.0 | |
| bumpalo3.19.0 | |
| cc1.8.0 | |
| cfg_aliases0.2.2 | |
| chacha200.10.2 | |
| clap_derive4.5.49 | |
| cmake0.1.58 | |
| com.google.code.maven-replacer-plugin:replacer1.5.3 | |
| combine4.6.8 | |
| console0.15.11 | |
| core-foundation0.10.1 | |
| core-foundation0.9.4 | |
| core-foundation-sys0.8.7 | |
| cpufeatures0.3.1 | |
| deps-core-macros2.0.0 | |
| displaydoc0.2.5 | |
| dunce1.0.5 | |
| encode_unicode1.0.0 | |
| errno0.3.14 | |
| find-msvc-tools0.1.14 | |
| fs_extra1.3.0 | |
| futures-macro0.3.31 | |
| getrandom0.4.3 | |
| github.com/bytedance/gopkgv0.1.3 | |
| github.com/bytedance/sonicv1.15.0 | |
| github.com/bytedance/sonic/loaderv0.5.0 | |
| github.com/cloudwego/base64xv0.1.6 | |
| github.com/gabriel-vasile/mimetypev1.4.13 | |
| github.com/gin-contrib/ssev1.1.0 | |
| github.com/go-playground/localesv0.14.1 | |
| github.com/go-playground/universal-translatorv0.18.1 | |
| github.com/go-playground/validator/v10v10.30.3 | |
| github.com/goccy/go-jsonv0.10.6 | |
| github.com/goccy/go-yamlv1.19.2 | |
| github.com/json-iterator/gov1.1.12 | |
| github.com/klauspost/cpuid/v2v2.3.0 | |
| github.com/leodido/go-urnv1.4.0 | |
| github.com/mattn/go-isattyv0.0.20 | |
| github.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1dd | |
| github.com/modern-go/reflect2v1.0.2 | |
| github.com/pelletier/go-toml/v2v2.2.4 | |
| github.com/quic-go/qpackv0.6.0 | |
| github.com/quic-go/quic-gov0.60.0 | |
| github.com/stretchr/testifyv1.12.1 | |
| github.com/twitchyliquid64/golang-asmv0.15.1 | |
| github.com/ugorji/go/codecv1.3.1 | |
| go.mongodb.org/mongo-driver/v2v2.5.0 | |
| go.uber.org/mockv0.6.0 | |
| go.yaml.in/yaml/v3v3.0.5 | |
| golang.org/x/archv0.25.0 | |
| golang.org/x/cryptov0.56.0 | |
| golang.org/x/netv0.57.0 | |
| golang.org/x/sysv0.47.0 | |
| golang.org/x/textv0.41.0 | |
| google.golang.org/protobufv1.36.11 | |
| heck0.5.0 | |
| iana-time-zone-haiku0.1.2 | |
| insta1.43.2 | |
| jni0.22.4 | |
| jni-macros0.22.4 | |
| jni-sys0.4.1 | |
| jni-sys-macros0.4.1 | |
| jobserver0.1.35 | |
| js-sys0.3.81 | |
| libredox0.1.3 | |
| lru-slab0.1.3 | |
| miette-derive5.10.0 | |
| miette-derive7.6.0 | |
| once_cell_polyfill1.70.1 | |
| openssl-macros0.1.1 | |
| org.apache.maven.doxia:doxia-module-markdown1.5 | |
| org.apache.maven.plugins:maven-clean-plugin2.6.1 | |
| org.apache.maven.plugins:maven-compiler-plugin3.3 | |
| org.apache.maven.plugins:maven-deploy-plugin2.8.2 | |
| org.apache.maven.plugins:maven-enforcer-plugin1.5 | |
| org.apache.maven.plugins:maven-install-plugin2.5.2 | |
| org.apache.maven.plugins:maven-jar-plugin2.6 | |
| org.apache.maven.plugins:maven-javadoc-pluginfalse | |
| org.apache.maven.plugins:maven-release-plugin2.5.2 | |
| org.apache.maven.plugins:maven-resources-plugin2.7 | |
| org.apache.maven.plugins:maven-source-plugin2.4 | |
| org.apache.maven.surefire:surefire-junit472.19.1 | |
| org.codehaus.mojo.signature:java151.0 | |
| org.hamcrest:hamcrest-core1.3 | |
| org.hamcrest:hamcrest-library1.3 | |
| org.sonatype.central:central-publishing-maven-plugin0.7.0 | |
| pest_derive2.7.10 | |
| pest_generator2.7.10 | |
| pest_meta2.7.10 | |
| pin-project-internal1.1.5 | |
| pkg-config0.3.32 | |
| proc-macro21.0.107 | |
| quinn0.11.12 | |
| quinn-proto0.11.19 | |
| quinn-udp0.5.16 | |
| quote1.0.47 | |
| r-efi5.3.0 | |
| r-efi6.0.0 | |
| rand0.10.3 | |
| rand_core0.10.1 | |
| rand_pcg0.10.2 | |
| redox_syscall0.5.18 | |
| redox_users0.4.5 | |
| redox_users0.5.3 | |
| rustc_version0.4.1 | |
| rustls-platform-verifier-android0.2.0 | |
| rustversion1.0.22 | |
| schannel0.1.27 | |
| security-framework2.11.1 | |
| security-framework3.5.1 | |
| security-framework-sys2.15.0 | |
| serde_derive1.0.228 | |
| shlex2.0.1 | |
| simd_cesu81.2.0 | |
| simdutf80.1.5 | |
| similar2.5.0 | |
| snafu-derive0.8.3 | |
| strum_macros0.26.4 | |
| syn2.0.108 | |
| syn3.0.9 | |
| synstructure0.13.2 | |
| system-configuration0.6.1 | |
| system-configuration-sys0.6.0 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.21 | |
| time-macros0.2.18 | |
| tinyvec1.13.3 | |
| tokio-macros2.7.2 | |
| tracing-attributes0.1.30 | |
| unfmt_macros0.2.2 | |
| vcpkg0.2.15 | |
| version_check0.9.5 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.1+wasi-0.2.4 | |
| wasm-bindgen0.2.104 | |
| wasm-bindgen-backend0.2.104 | |
| wasm-bindgen-futures0.4.54 | |
| wasm-bindgen-macro0.2.104 | |
| wasm-bindgen-macro-support0.2.104 | |
| wasm-bindgen-shared0.2.104 | |
| web-sys0.3.81 | |
| web-time1.1.0 | |
| webpki-root-certs1.0.9 | |
| winapi-util0.1.11 | |
| windows0.61.3 | |
| windows-collections0.2.0 | |
| windows-core0.61.2 | |
| windows-core0.62.2 | |
| windows-future0.2.1 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.1.3 | |
| windows-link0.2.1 | |
| windows-numerics0.2.0 | |
| windows-registry0.5.3 | |
| windows-result0.3.4 | |
| windows-result0.4.1 | |
| windows-strings0.4.2 | |
| windows-strings0.5.1 | |
| windows-sys0.48.0 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.60.2 | |
| windows-sys0.61.2 | |
| windows-targets0.48.5 | |
| windows-targets0.52.6 | |
| windows-targets0.53.5 | |
| windows-threading0.1.0 | |
| windows_aarch64_gnullvm0.48.5 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_gnullvm0.53.1 | |
| windows_aarch64_msvc0.48.5 | |
| windows_aarch64_msvc0.52.6 | |
| windows_aarch64_msvc0.53.1 | |
| windows_i686_gnu0.48.5 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnu0.53.1 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_gnullvm0.53.1 | |
| windows_i686_msvc0.48.5 | |
| windows_i686_msvc0.52.6 | |
| windows_i686_msvc0.53.1 | |
| windows_x86_64_gnu0.48.5 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnu0.53.1 | |
| windows_x86_64_gnullvm0.48.5 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_gnullvm0.53.1 | |
| windows_x86_64_msvc0.48.5 | |
| windows_x86_64_msvc0.52.6 | |
| windows_x86_64_msvc0.53.1 | |
| wit-bindgen0.46.0 | |
| yoke-derive0.8.0 | |
| zerofrom-derive0.1.6 | |
| zerovec-derive0.11.1 | |
| zlib-rs0.6.8 |
| Vulnerabilities21 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0258 | h2 | 0.4.12 | >=0.4.16 | high | h2 unbounded empty DATA frames | retained |
| CVE-2026-41676 | openssl | 0.10.74 | >=0.10.78 | high | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 | retained |
| CVE-2026-41678 | openssl | 0.10.74 | >=0.10.78 | high | rust-openssl has incorrect bounds assertion in aes key wrap | retained |
| CVE-2026-41681 | openssl | 0.10.74 | >=0.10.78 | high | rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check | retained |
| CVE-2026-41898 | openssl | 0.10.74 | >=0.10.78 | high | rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer | retained |
| CVE-2026-42327 | openssl | 0.10.74 | >=0.10.79 | high | rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs | retained |
| CVE-2026-93599 | rustls-webpki | 0.102.8, 0.103.7 | >=0.103.13 | high | rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | retained |
| CVE-2026-25541 | bytes | 1.10.1 | >=1.11.1 | medium | bytes has integer overflow in BytesMut::reserve | retained |
| CVE-2026-25537 | jsonwebtoken | 9.3.0 | >=10.3.0 | medium | jsonwebtoken has Type Confusion that leads to potential authorization bypass | retained |
| CVE-2026-44662 | openssl | 0.10.74 | >=0.10.79 | medium | rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding | retained |
| CVE-2026-45784 | openssl | 0.10.74 | >=0.10.80 | medium | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | retained |
| GHSA-2mjx-qc3c-rqvc | rustls | 0.23.34 | >=0.23.45 | medium | Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | retained |
| CVE-2026-93602 | rustls-webpki | 0.102.8, 0.103.7 | >=0.103.10 | medium | webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic | retained |
| CVE-2026-25727 | time | 0.3.36 | >=0.3.47 | medium | time vulnerable to stack exhaustion Denial of Service attack | retained |
| RUSTSEC-2026-0190 | anyhow | 1.0.100 | >=1.0.103 | low | Unsoundness in `Error::downcast_mut()` | retained |
| RUSTSEC-2026-0186 | memmap2 | 0.5.10 | >=0.9.11 | low | Unchecked pointer offset in crate `memmap2` | retained |
| CVE-2026-41677 | openssl | 0.10.74 | >=0.10.78 | low | rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length | retained |
| RUSTSEC-2025-0134 | rustls-pemfile | 2.1.2 | none published | low | rustls-pemfile is unmaintained | retained |
| CVE-2026-93600 | rustls-webpki | 0.102.8, 0.103.7 | >=0.103.12 | low | webpki: Name constraints for URI names were incorrectly accepted | retained |
| CVE-2026-93601 | rustls-webpki | 0.102.8, 0.103.7 | >=0.103.12 | low | webpki: Name constraints were accepted for certificates asserting a wildcard name | retained |
| GHSA-6g2r-675j-hx59 | xxhash-rust | 0.8.15 | >=0.8.16 | low | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run 3757b1f3-efdd-4d47-b504-44693915eb65
analysis 0.1.0 · 2026-10-14 · afb437c · graph v2
