cargo / cargo-supply-chain / 0.3.8
Artifact
- cargo_supply_chainbinary · retained · product 14
Checks
12 of 14 clear Known vulnerabilities Dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 25K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Vulnerabilities14 | Package | Fix | Severity |
|---|---|---|---|
| RUSTSEC-2026-0346 | rustls 0.23.36 | >=0.23.46 | high |
| RUSTSEC-2026-0348 | rustls 0.23.36 | >=0.23.46 | high |
| RUSTSEC-2026-0349 | rustls 0.23.36 | >=0.23.46 | high |
| CVE-2026-93599 | rustls-webpki 0.103.9 | >=0.103.13 | high |
| GHSA-2mjx-qc3c-rqvc | rustls 0.23.36 | >=0.23.45 | medium |
| CVE-2026-93602 | rustls-webpki 0.103.9 | >=0.103.10 | medium |
| CVE-2026-33055 | tar 0.4.44 | >=0.4.45 | medium |
| CVE-2026-33056 | tar 0.4.44 | >=0.4.45 | medium |
| GHSA-3pv8-6f4r-ffg2 | tar 0.4.44 | >=0.4.46 | medium |
| RUSTSEC-2026-0190 | anyhow 1.0.100 | >=1.0.103 | low |
| RUSTSEC-2025-0119 | number_prefix 0.4.0 | none published | low |
| RUSTSEC-2025-0134 | rustls-pemfile 2.2.0 | none published | low |
| CVE-2026-93600 | rustls-webpki 0.103.9 | >=0.103.12 | low |
| CVE-2026-93601 | rustls-webpki 0.103.9 | >=0.103.12 | low |
| Dependencies138 | Build behaviour |
|---|---|
| anyhow1.0.100 | |
| base640.22.1 | |
| bitflags2.10.0 | |
| bpaf0.9.22 | |
| camino1.2.2 | |
| cargo-platform0.3.2 | |
| cargo_metadata0.23.1 | |
| cfg-if1.0.4 | |
| console0.15.11 | |
| crc32fast1.5.0 | |
| csv1.4.0 | |
| csv-core0.1.13 | |
| dirs6.0.0 | |
| dirs-sys0.5.0 | |
| filetime0.2.27 | |
| flate21.1.8 | |
| form_urlencoded1.2.2 | |
| getrandom0.2.17 | |
| humantime2.3.0 | |
| humantime-serde1.1.1 | |
| icu_collections2.1.1 | |
| icu_locale_core2.1.1 | |
| icu_normalizer2.1.1 | |
| icu_normalizer_data2.1.1 | |
| icu_properties2.1.2 | |
| icu_properties_data2.1.2 | |
| icu_provider2.1.1 | |
| idna1.1.0 | |
| idna_adapter1.2.1 | |
| indicatif0.17.11 | |
| is_ci1.2.0 | |
| itoa1.0.17 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.180 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| linux-raw-sys0.11.0 | |
| litemap0.8.1 | |
| log0.4.29 | |
| memchr2.7.6 | |
| miniz_oxide0.8.9 | |
| number_prefix0.4.0 | |
| once_cell1.21.3 | |
| openssl-probe0.1.6 | |
| option-ext0.2.0 | |
| owo-colors4.2.3 | |
| percent-encoding2.3.2 | |
| portable-atomic1.13.0 | |
| potential_utf0.1.4 | |
| ring0.17.14 | |
| rustix1.1.3 | |
| rustls0.23.36 | |
| rustls-native-certs0.7.3 | |
| rustls-pemfile2.2.0 | |
| rustls-pki-types1.14.0 | |
| rustls-webpki0.103.9 | |
| ryu1.0.22 | |
| semver1.0.27 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.149 | |
| simd-adler320.3.8 | |
| smallvec1.15.1 | |
| stable_deref_trait1.2.1 | |
| subtle2.6.1 | |
| supports-color3.0.2 | |
| tar0.4.44 | |
| thiserror2.0.18 | |
| tinystr0.8.2 | |
| unicode-width0.2.2 | |
| untrusted0.9.0 | |
| ureq2.12.1 | |
| url2.5.8 | |
| utf8_iter1.0.4 | |
| writeable0.6.2 | |
| xattr1.6.1 | |
| yoke0.8.1 | |
| zerofrom0.1.6 | |
| zeroize1.8.2 | |
| zerotrie0.2.3 | |
| zerovec0.11.5 | |
| zmij1.0.16 | |
| adler22.0.1 | |
| dyn-clone1.0.20 | |
| schemars0.8.22 | |
| unicode-ident1.0.22 | |
| webpki-roots0.26.11 | |
| webpki-roots1.0.5 | |
| bpaf_derive0.5.21 | |
| bumpalo3.19.1 | |
| cc1.2.53 | |
| core-foundation0.9.4 | |
| core-foundation-sys0.8.7 | |
| displaydoc0.2.5 | |
| encode_unicode1.0.0 | |
| errno0.3.14 | |
| find-msvc-tools0.1.8 | |
| js-sys0.3.85 | |
| libredox0.1.12 | |
| proc-macro21.0.106 | |
| quote1.0.43 | |
| redox_syscall0.7.0 | |
| redox_users0.5.2 | |
| rustversion1.0.22 | |
| schannel0.1.28 | |
| schemars_derive0.8.22 | |
| security-framework2.11.1 | |
| security-framework-sys2.15.0 | |
| serde_derive1.0.228 | |
| serde_derive_internals0.29.1 | |
| shlex1.3.0 | |
| syn2.0.114 | |
| synstructure0.13.2 | |
| thiserror-impl2.0.18 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasm-bindgen0.2.108 | |
| wasm-bindgen-macro0.2.108 | |
| wasm-bindgen-macro-support0.2.108 | |
| wasm-bindgen-shared0.2.108 | |
| web-time1.1.0 | |
| windows-link0.2.1 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.52.6 | |
| yoke-derive0.8.1 | |
| zerofrom-derive0.1.6 | |
| zerovec-derive0.11.2 |
| Versions22 | Risk | Vulns | Published |
|---|---|---|---|
| 0.3.7 | not analyzed | 2026-02-05 | |
| 0.3.6 | not analyzed | 2026-01-22 | |
| 0.3.5 | not analyzed | 2025-09-18 | |
| 0.3.4 | not analyzed | 2025-06-04 | |
| 0.3.3 | not analyzed | 2023-05-08 | |
| 0.3.2 | not analyzed | 2022-11-04 | |
| 0.3.1 | not analyzed | 2022-03-18 | |
| 0.3.0yanked | not analyzed | 2022-03-18 | |
| 0.3.0-alpha.2 | not analyzed | 2022-03-18 | |
| 0.3.0-alpha.1 | not analyzed | 2022-03-18 | |
| 0.2.0 | not analyzed | 2021-05-21 | |
| 0.2.0-beta1 | not analyzed | 2021-05-19 | |
| 0.1.2 | not analyzed | 2021-02-24 | |
| 0.1.1 | not analyzed | 2021-02-18 | |
| 0.1.0 | not analyzed | 2021-02-18 | |
| 0.1.0-rc2 | not analyzed | 2021-02-14 | |
| 0.1.0-rc1 | not analyzed | 2021-02-10 | |
| 0.0.4 | not analyzed | 2021-01-01 | |
| 0.0.3 | not analyzed | 2020-12-28 | |
| 0.0.2 | not analyzed | 2020-10-15 | |
| 0.0.1 | not analyzed | 2020-10-02 | |
| 0.3.8 | none | high | |
1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run fe0bf339-d143-42eb-bb5b-0c23aad4cc9b
analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2
