cargo / bux-serve

bux-serve 0.9.0

Riskhigh Vulnsnone

processes: 597
operations: 116K
packages: 307
compiler runs: 220
connections: 3
build time: 2m 16s
job time: 2m 16s
capture: 995 KB
records: 183K
bytes / record: 5.4

HTTP worker for hosted bux agent sandboxes

37 downloads · Apache-2.0 OR MIT · published 2026-09-04 · source ai http sandbox vm View on crates.io Release

Graph

egress · high · in libbux_serve.rlib

Checks

14 of 17 clear Network activity Data flow analysis +1 more

Build behavior▲✓✓✓✓✓✓✓▲✓✓

Supply chain✓▲✓✓✓

Pipeline✓

Detections

Build script fetched what the build compiled, linked or ran

bux-bwrap 0.3.0 › github.com:443, release-assets.githubusercontent.com:443

high
5 uncompiled libraries linked

bux-e2fs 0.3.0 › github.com, release-assets.githubusercontent.com

high

Network

3 peers

github.com:443 build code of bux-bwrap · build-script-build (bux) · Microsoft Corporation · 25 files · went into an output undeclared
release-assets.githubusercontent.com:443 build code of bux-bwrap · build-script-build (bux) · Fastly, Inc. · 25 files · went into an output undeclared
static.crates.io:8080 the package manager · cargo (bux) via crates.io · 16,960 files · went into an output ecosystem

Vulnerabilities10		Fix	Severity
Dependencies
quinn-proto 0.11.17		>=0.11.18
RUSTSEC-2026-0338	Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads		high
RUSTSEC-2026-0340	Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled		high
RUSTSEC-2026-0343	Outgoing datagram buffer accounting can panic the sender in quinn-proto		high
rustls-webpki 0.103.15		>=0.103.16
CVE-2026-111943	Important: ignition security update		high
rustls 0.23.43		>=0.23.46
GHSA-2mjx-qc3c-rqvc	Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries		medium
GHSA-c8m5-c952-6cm4	Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs		medium
GHSA-h2v8-394m-p7vv	Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.		low
GHSA-w44r-93j7-qv28	rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share		low
atomic-polyfill 1.0.3		none published
RUSTSEC-2023-0089	atomic-polyfill is unmaintained		info
tokio 1.53.1		>=1.53.3
RUSTSEC-2026-0386	`AsyncFd::new` and related constructors violate I/O safety		info

Dependencies315	Build behaviour
adler22.0.1
aho-corasick1.1.5
android_system_properties0.1.6
asn1-rs0.7.2
asn1-rs-derive0.6.0	proc macro
asn1-rs-impl0.2.0	proc macro
atomic-polyfill1.0.3	build script, not run
atomic-waker1.1.2
autocfg1.5.1
aws-lc-rs1.18.0	build script
aws-lc-sys0.44.0	build scriptprebuilt objects
axum0.8.9
axum-core0.5.6
base640.22.1
base640.23.1
bit-vec0.9.1
bitflags2.13.1
block-buffer0.12.1
bumpalo3.20.3
bux0.9.0
bux-bwrap0.3.0	build scriptnetworkgithub.com, release-assets.githubusercontent.com
bux-e2fs0.3.0	build scriptnetworkgithub.com, release-assets.githubusercontent.com
bux-jail0.2.0
bux-landlock0.2.0
bux-oci0.9.0
bux-proto0.9.0
bux-qcow20.2.0
bux-shim0.2.0
byteorder1.5.0
bytes1.12.1
cc1.4.4
cfg-if1.0.4
cfg_aliases0.2.2
chacha200.10.1
chrono0.4.45
cmake0.1.58
cobs0.3.0
combine4.6.8
const-oid0.10.2
const_format0.2.36
const_format_proc_macros0.2.34	proc macro
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.3.0
crc32fast1.5.1	build script
critical-section1.2.0
crypto-common0.2.2
darling0.20.11
darling_core0.20.11
darling_macro0.20.11	proc macro
data-encoding2.11.1
der-parser10.0.0
deranged0.5.8
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2	proc macro
digest0.11.3
dirs6.0.0
dirs-sys0.5.0
displaydoc0.2.7	proc macro
dunce1.0.5
embedded-io0.4.0
embedded-io0.6.1
enumflags20.7.12
enumflags2_derive0.7.12	proc macro
equivalent1.0.2
errno0.3.14
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fastrand2.5.0
filetime0.2.29
find-msvc-tools0.1.11
flate21.1.9
fnv1.0.7
foldhash0.2.0
form_urlencoded1.2.2
fs_extra1.3.0
futures-channel0.3.34
futures-core0.3.34
futures-io0.3.34
futures-macro0.3.34	proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.4.3	build script
getset0.1.7	proc macro
hash320.2.1
hashbrown0.16.1
hashbrown0.17.1
hashlink0.12.1
heapless0.7.17	build script
heck0.5.0
hex0.4.3
http1.5.0
http-auth0.1.10
http-body1.1.0
http-body-util0.1.5
httparse1.10.1	build script
httpdate1.0.3
hybrid-array0.4.14
hyper1.11.0
hyper-rustls0.27.9
hyper-util0.1.20
iana-time-zone0.1.65
iana-time-zone-haiku0.1.2	build script, not run
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0	build script
icu_properties2.3.0
icu_properties_data2.3.0	build script
icu_provider2.3.1
ident_case1.0.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.1
ipnet2.12.1
itoa1.0.18
jni0.22.4	build script, not run
jni-macros0.22.4	build script, not runproc macro
jni-sys0.4.1
jni-sys-macros0.4.1	proc macro
jobserver0.1.35
js-sys0.3.104
jsonwebtoken10.4.0
konst0.2.20
konst_macro_rules0.2.19
landlock0.4.7
lazy_static1.5.0
ld-linux-x86-64.so.2	system library
libc0.2.189	build script
libc.so.6	system library
libgcc_s.so.1	system library
libm.so.6	system library
libmvec.so.1	system library
libredox0.1.20
libsqlite3-sys0.38.2	build script
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
lru-slab0.1.2
matchit0.8.4
memchr2.8.3
mime0.3.17
minimal-lexical0.2.1
miniz_oxide0.8.9
mio1.2.2
nix0.31.3	build script
nom7.1.3
num-bigint0.4.8
num-conv0.2.2
num-integer0.1.47
num-traits0.2.19	build script
oci-client0.17.0
oci-spec0.9.0
oid-registry0.8.1	build script, not run
olpc-cjson0.1.4
once_cell1.21.4
openssl-probe0.2.1
option-ext0.2.0
pem3.0.6
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
postcard1.1.3
potential_utf0.1.6
powerfmt0.2.0
proc-macro21.0.107	build script
quinn0.11.11	build script, not run
quinn-proto0.11.17
quinn-udp0.5.15	build script, not run
quote1.0.47	build script
r-efi6.0.0
rand0.10.2
rand_core0.10.1
rand_core0.6.4
rand_pcg0.10.2
rcgen0.14.9
redox_users0.5.2
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
reqwest0.13.4
ring0.17.14	build scriptprebuilt objects
rsqlite-vfs0.1.1
rusqlite0.40.2
rustc-hash2.1.3
rustc_version0.4.1
rusticata-macros4.1.0
rustix1.1.4	build script
rustls0.23.43	build script
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-platform-verifier0.7.0
rustls-platform-verifier-android0.1.1
rustls-webpki0.103.15
rustversion1.0.23	build script, not runproc macro
ryu1.0.23
same-file1.0.6
schannel0.1.29
scopeguard1.2.0
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde1.0.229	build script
serde_core1.0.229	build script
serde_derive1.0.229	proc macro
serde_json1.0.151	build script
serde_path_to_error0.1.20
serde_urlencoded0.7.1
sha20.11.0
shlex2.0.1
signal-hook-registry1.4.8
signature2.2.0
simd-adler320.3.10
simd_cesu81.2.0
simdutf80.1.5
slab0.4.12
smallvec1.15.2
socket20.6.5
spin0.9.9
sqlite-wasm-rs0.5.5	build script, not run
stable_deref_trait1.2.1
strsim0.11.1
strum0.27.2
strum_macros0.27.2	proc macro
subtle2.6.1
syn2.0.119
syn3.0.4
sync_wrapper1.0.2
synstructure0.13.2
tar0.4.46
tempfile3.27.0
thiserror2.0.20	build script
thiserror-impl2.0.20	proc macro
time0.3.55
time-core0.1.9
time-macros0.2.32	proc macro
tinystr0.8.4
tinyvec1.12.0
tinyvec_macros0.1.1
tokio1.53.1
tokio-macros2.7.2	proc macro
tokio-rustls0.26.4
tokio-util0.7.19
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31	proc macro
tracing-core0.1.36
try-lock0.2.5
typenum1.20.1
unicase2.9.0
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-xid0.2.6
untrusted0.7.1
untrusted0.9.0
ureq3.4.0
ureq-proto0.6.1
url2.5.8
utf8-zero0.8.1
utf8_iter1.0.4
utoipa5.5.0
utoipa-gen5.5.0	proc macro
vcpkg0.2.15	prebuilt objects
walkdir2.5.0
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen0.2.127	build script, not run
wasm-bindgen-futures0.4.77
wasm-bindgen-macro0.2.127	proc macro
wasm-bindgen-macro-support0.2.127
wasm-bindgen-shared0.2.127	build script, not run
wasm-streams0.5.0
web-sys0.3.104
web-time1.1.0
webpki-root-certs1.0.9
webpki-roots1.0.9
winapi-util0.1.11
windows-core0.62.2
windows-implement0.60.2	proc macro
windows-interface0.59.3	proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6	build script, not runprebuilt objects
windows_aarch64_msvc0.52.6	build script, not runprebuilt objects
windows_i686_gnu0.52.6	build script, not runprebuilt objects
windows_i686_gnullvm0.52.6	build script, not runprebuilt objects
windows_i686_msvc0.52.6	build script, not runprebuilt objects
windows_x86_64_gnu0.52.6	build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6	build script, not runprebuilt objects
windows_x86_64_msvc0.52.6	build script, not runprebuilt objects
writeable0.6.4
x509-parser0.18.1
xattr1.6.1
yasna0.6.0
yoke0.8.3
yoke-derive0.8.2	proc macro
zerofrom0.1.8
zerofrom-derive0.1.7	proc macro
zeroize1.9.0
zeroize_derive1.5.0	proc macro
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6	proc macro
zmij1.0.23	build script

Versions1

1 of 1 jobs captured: build-test success · Generated 2026-11-06 · run 966588ae-976c-48bb-b5a7-4a2a092704fb

analysis 0.1.0 · 2026-11-06 · 4346b99 · graph v2

bux-serve's dependencies download prebuilt e2fsprogs libraries and a bubblewrap binary without hash or signature verification

Conclusion: unverified-download
Covers: 0.9.0
Reviewed by: Bitbison
Updated: 2026-11-06

Compiling bux-serve fetches prebuilt e2fsprogs static libraries (linked in) and a bubblewrap binary (executed at runtime) from the project's GitHub releases, pinned only by version, with no hash or signature check.

bux-serve is the HTTP worker crate for bux, an embedded micro-VM isolation layer for running AI agents, published on crates.io as version 0.9.0 by the account gitctrlx, with source at github.com/qntx/bux. It is not malicious: it is a server library with no outbound networking of its own. However, compiling it runs the build scripts of its bux-e2fs and bux-bwrap dependencies, which download prebuilt native binaries from GitHub releases without checking a hash or verifying a signature, so the package cannot be verified end-to-end from its published source.

What bux-serve does

bux-serve is a Rust library (bux_serve) that implements the HTTP worker for hosted bux agents. It opens one bux Runtime (an exclusive flock on the data directory), binds TCP on loopback (or non-loopback with --public) and a Unix socket, sweeps idle VMs every 30 seconds, and serves /v1/health publicly plus Bearer-protected /v1/me, /v1/metrics, VM, exec, files, images, logs, snapshot, clone and restore routes. At least one API key is required to start. The crate itself sends no telemetry and makes no outbound requests; the network activity described here happens in the build scripts of two dependencies, whose versions are pinned in bux-serve's Cargo.lock (bux-e2fs 0.3.0 and bux-bwrap 0.3.0).

What the code does

bux-e2fs-0.3.0/build.rs:236-256 — download_libs() fetches https://github.com/qntx/bux/releases/download/e2fs-v1.47.4/bux-e2fs-{target}.tar.gz with ureq, unpacks it into the output directory, and only asserts that libext2fs.a exists. No hash is shipped or checked and no signature is verified.
bux-e2fs-0.3.0/build.rs:70-75 — the downloaded archives libext2fs.a, libcom_err.a, libe2p.a, libuuid_e2fs.a and libcreate_inode.a are then linked statically into the crate via cargo:rustc-link-lib=static.
bux-bwrap-0.3.0/build.rs:143-165 — download_binary() fetches https://github.com/qntx/bux/releases/download/bwrap-v0.12.0/bux-bwrap-{target}.tar.gz with ureq, unpacks bwrap, makes it executable (0755) and copies it beside the built binaries; again no hash is checked and no signature is verified.
bux-bwrap-0.3.0/build.rs:60-63 — the path to that binary is exposed for use at runtime, and bux-bwrap's BwrapCommand spawns it with std::process::Command to provide unprivileged Linux namespace isolation.
bux-e2fs-0.3.0/build.rs:218-222 and bux-bwrap-0.3.0/build.rs:127-137 — the downloads can be skipped by pointing BUX_E2FS_DIR / BUX_BWRAP_DIR at locally supplied libraries or a locally built binary.

Timeline (UTC)

When	What
September 4, 2026	bux-serve 0.9.0 published to crates.io
November 6, 2026	Still served (not yanked), about two months after publication

If you installed it

Treat the bundled e2fsprogs libraries and bubblewrap binary as unverified. They are fetched from the project's GitHub releases over HTTPS, but the code does not compare them against a hash or a signature, so a compromised release or repository would be silently linked into the crate (e2fsprogs) or executed as an isolation helper (bubblewrap). To avoid the downloads, supply your own copies through the BUX_E2FS_DIR and BUX_BWRAP_DIR environment variables, or compile e2fsprogs and bubblewrap from their upstream sources and pin and verify the release archives yourself.

Indicators

hosts: github.comrelease-assets.githubusercontent.com
files: libext2fs.alibcom_err.alibe2p.alibuuid_e2fs.alibcreate_inode.abwrap
processes

What was examined

0.9.0: sha256:2982ee5268f972f3343dfb6ee3a90a6644228ef142a1a58b5e87e3c2b01027ff