Artifact
- claudectlbinary · retained · product 8
- libclaudectl.rlibfile · retained · product
Checks
12 of 14 clear Known vulnerabilities Dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 85K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies175 | Build behaviour |
|---|---|
| allocator-api20.2.21 | |
| anstream1.0.0 | |
| anstyle1.0.14 | |
| anstyle-parse1.0.0 | |
| anstyle-query1.1.5 | |
| base640.22.1 | |
| bitflags2.13.2 | |
| bytes1.12.1 | |
| cassowary0.3.0 | |
| castaway0.2.4 | |
| cc1.8.0 | |
| cfg-if1.0.5 | |
| chrono0.4.45 | |
| clap4.6.7 | |
| clap_builder4.6.7 | |
| clap_complete4.6.11 | |
| clap_derive4.6.7 | |
| clap_lex1.1.1 | |
| clap_mangen0.2.33 | |
| claudectl-core0.72.0 | |
| claudectl-tui0.73.0 | |
| colorchoice1.0.5 | |
| compact_str0.8.2 | |
| crossterm0.28.1 | |
| ctrlc3.5.2 | |
| darling0.21.3 | |
| darling0.24.1 | |
| darling_core0.21.3 | |
| darling_core0.24.1 | |
| darling_macro0.21.3 | |
| darling_macro0.24.1 | |
| dyn-clone1.0.20 | |
| either1.19.0 | |
| equivalent1.0.3 | |
| errno0.3.14 | |
| fallible-iterator0.3.0 | |
| fallible-streaming-iterator0.1.9 | |
| find-msvc-tools0.1.14 | |
| fnv1.0.7 | |
| foldhash0.1.5 | |
| futures0.3.34 | |
| futures-channel0.3.34 | |
| futures-core0.3.34 | |
| futures-executor0.3.34 | |
| futures-io0.3.34 | |
| futures-macro0.3.34 | |
| futures-sink0.3.34 | |
| futures-task0.3.34 | |
| futures-util0.3.34 | |
| hashbrown0.15.5 | |
| hashlink0.10.0 | |
| heck0.5.0 | |
| iana-time-zone0.1.65 | |
| ident_case1.0.1 | |
| indoc2.0.8 | |
| instability0.3.14 | |
| is_terminal_polyfill1.70.2 | |
| itertools0.13.0 | |
| itoa1.0.18 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.190 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libsqlite3-sys0.31.0 | |
| linux-raw-sys0.4.15 | |
| lock_api0.4.14 | |
| log0.4.34 | |
| lru0.12.5 | |
| memchr2.8.3 | |
| mio1.2.4 | |
| nix0.31.3 | |
| num-traits0.2.19 | |
| once_cell1.21.4 | |
| parking_lot0.12.5 | |
| parking_lot_core0.9.12 | |
| paste1.0.15 | |
| pin-project-lite0.2.17 | |
| pkg-config0.3.34 | |
| proc-macro21.0.107 | |
| quote1.0.47 | |
| ratatui0.29.0 | |
| ref-cast1.0.27 | |
| ref-cast-impl1.0.27 | |
| rmcp0.3.2 | |
| rmcp-macros0.3.2 | |
| roff1.1.1 | |
| rusqlite0.33.0 | |
| rustix0.38.44 | |
| rustversion1.0.23 | |
| ryu1.0.23 | |
| schemars1.2.3 | |
| schemars_derive1.2.3 | |
| scopeguard1.2.0 | |
| serde1.0.229 | |
| serde_core1.0.229 | |
| serde_derive1.0.229 | |
| serde_derive_internals0.30.0 | |
| serde_json1.0.154 | |
| shlex2.0.1 | |
| signal-hook0.3.18 | |
| signal-hook-mio0.2.5 | |
| signal-hook-registry1.4.8 | |
| slab0.4.12 | |
| smallvec1.16.3 | |
| static_assertions1.1.0 | |
| strsim0.11.1 | |
| strum0.26.3 | |
| strum_macros0.26.4 | |
| syn2.0.119 | |
| syn3.0.9 | |
| thiserror2.0.21 | |
| thiserror-impl2.0.21 | |
| tokio1.53.3 | |
| tokio-macros2.7.2 | |
| tokio-util0.7.20 | |
| tracing0.1.44 | |
| tracing-attributes0.1.31 | |
| tracing-core0.1.36 | |
| unicode-ident1.0.27 | |
| unicode-segmentation1.13.3 | |
| unicode-truncate1.1.0 | |
| unicode-width0.1.14 | |
| unicode-width0.2.0 | |
| utf8parse0.2.2 | |
| vcpkg0.2.15 | |
| zmij1.0.23 | |
| fastrand2.5.0 | |
| getrandom0.4.3 | |
| linux-raw-sys0.12.1 | |
| rustix1.1.5 | |
| tempfile3.27.0 | |
| android_system_properties0.1.6 | |
| anstyle-wincon3.0.11 | |
| async-trait0.1.92 | |
| autocfg1.5.1 | |
| block20.6.2 | |
| bumpalo3.20.3 | |
| cfg_aliases0.2.2 | |
| core-foundation-sys0.8.7 | |
| crossterm_winapi0.9.1 | |
| dispatch20.3.1 | |
| iana-time-zone-haiku0.1.2 | |
| js-sys0.3.106 | |
| objc20.6.5 | |
| objc2-encode4.1.0 | |
| once_cell_polyfill1.70.2 | |
| r-efi6.0.0 | |
| redox_syscall0.5.18 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasm-bindgen0.2.129 | |
| wasm-bindgen-macro0.2.129 | |
| wasm-bindgen-macro-support0.2.129 | |
| wasm-bindgen-shared0.2.129 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.52.6 |
| Vulnerabilities8 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| CVE-2026-42559 | rmcp | 0.3.2 | >=1.4.0 | high | rmcp Streamable HTTP server transport has a DNS rebinding vulnerability | retained |
| CVE-2026-63127 | rmcp | 0.3.2 | >=2.0.0 | high | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | retained |
| CVE-2026-63128 | rmcp | 0.3.2 | >=2.0.0 | high | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service | retained |
| CVE-2026-64684 | rmcp | 0.3.2 | >=2.1.0 | medium | RMCP: Custom HTTP headers leak to cross-origin redirect targets | retained |
| GHSA-c9xm-49cp-xcr9 | rmcp | 0.3.2 | >=2.0.0 | medium | rmcp OAuth client fetches server-controlled resource_metadata URLs | retained |
| GHSA-rhfx-m35p-ff5j | lru | 0.12.5 | >=0.16.3 | low | `IterMut` violates Stacked Borrows by invalidating internal pointer | retained |
| RUSTSEC-2026-0253 | lru | 0.12.5 | >=0.18.2 | low | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | retained |
| RUSTSEC-2024-0436 | paste | 1.0.15 | none published | low | paste - no longer maintained | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run 79527a1a-bad1-42e7-8e69-ae804f7a97a7
analysis 0.1.0 · 2026-10-15 · 20a5b2e · graph v2