Artifact
- craxbinary · retained · product 18
- libcrax.rlibfile · retained · product
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 346K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies405 | Build behaviour |
|---|---|
| ahash0.8.12 | |
| aho-corasick1.1.3 | |
| allocator-api20.2.21 | |
| annotate-snippets0.12.5 | |
| ansi-str0.9.0 | |
| ansitok0.3.0 | |
| anstream0.6.17 | |
| anstyle1.0.10 | |
| anstyle-parse0.2.6 | |
| anstyle-query1.1.2 | |
| anyhow1.0.98 | |
| arraydeque0.5.1 | |
| arrayvec0.7.6 | |
| atomic-waker1.1.2 | |
| base640.22.1 | |
| bitflags2.9.0 | |
| bstr1.10.0 | |
| bytecount0.6.8 | |
| bytes1.8.0 | |
| cassowary0.3.0 | |
| castaway0.2.3 | |
| cfg-if1.0.0 | |
| clap4.5.41 | |
| clap-cargo0.16.0 | |
| clap_builder4.5.41 | |
| clap_lex0.7.4 | |
| colorchoice1.0.3 | |
| compact_str0.8.0 | |
| console0.15.8 | |
| console0.16.0 | |
| const_format0.2.33 | |
| crax_dts0.2.4 | |
| crax_monorepo0.2.4 | |
| crax_utils0.2.4 | |
| crossbeam0.8.4 | |
| crossbeam-channel0.5.13 | |
| crossbeam-deque0.8.5 | |
| crossbeam-epoch0.9.18 | |
| crossbeam-queue0.3.11 | |
| crossbeam-utils0.8.20 | |
| crossterm0.28.1 | |
| crossterm0.29.0 | |
| ctrlc3.4.7 | |
| delete1.0.1 | |
| derive_builder0.20.2 | |
| derive_more2.0.1 | |
| dialoguer0.11.0 | |
| dirs6.0.0 | |
| dirs-sys0.5.0 | |
| dyn-fmt0.4.3 | |
| either1.13.0 | |
| encoding_rs0.8.35 | |
| encoding_rs_io0.1.7 | |
| env_home0.1.0 | |
| equivalent1.0.1 | |
| fastrand2.1.1 | |
| fnv1.0.7 | |
| foldhash0.1.3 | |
| foreign-types0.3.2 | |
| foreign-types-shared0.1.1 | |
| form_urlencoded1.2.1 | |
| futures0.3.31 | |
| futures-channel0.3.31 | |
| futures-core0.3.31 | |
| futures-executor0.3.31 | |
| futures-io0.3.31 | |
| futures-sink0.3.31 | |
| futures-task0.3.31 | |
| futures-util0.3.31 | |
| getrandom0.3.4 | |
| globset0.4.18 | |
| granit-parser0.0.2 | |
| grep0.4.1 | |
| grep-cli0.1.12 | |
| grep-matcher0.1.8 | |
| grep-printer0.3.1 | |
| grep-regex0.1.14 | |
| grep-searcher0.1.16 | |
| h20.4.7 | |
| hashbrown0.15.0 | |
| http1.1.0 | |
| http-body1.0.1 | |
| http-body-util0.1.2 | |
| httparse1.9.5 | |
| hyper1.6.0 | |
| hyper-tls0.6.0 | |
| hyper-util0.1.16 | |
| icu_collections1.5.0 | |
| icu_locid1.5.0 | |
| icu_locid_transform1.5.0 | |
| icu_locid_transform_data1.5.0 | |
| icu_normalizer1.5.0 | |
| icu_normalizer_data1.5.0 | |
| icu_properties1.5.1 | |
| icu_properties_data1.5.0 | |
| icu_provider1.5.0 | |
| idna1.0.3 | |
| idna_adapter1.2.0 | |
| indexmap2.6.0 | |
| indicatif0.18.0 | |
| ipnet2.10.1 | |
| iri-string0.7.8 | |
| is_terminal_polyfill1.70.1 | |
| itertools0.11.0 | |
| itertools0.13.0 | |
| itoa1.0.11 | |
| json-patch4.0.0 | |
| jsonptr0.7.1 | |
| jwalk0.6.2 | |
| jwalk0.8.1 | |
| kill_tree0.2.4 | |
| lazy_static1.5.0 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.171 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| linux-raw-sys0.4.14 | |
| linux-raw-sys0.9.4 | |
| litemap0.7.3 | |
| loading0.4.0 | |
| lock_api0.4.12 | |
| log0.4.22 | |
| lru0.12.5 | |
| memchr2.7.4 | |
| memmap20.9.10 | |
| mime0.3.17 | |
| mio1.0.2 | |
| native-tls0.2.12 | |
| nix0.27.1 | |
| nix0.30.1 | |
| nohash-hasher0.2.0 | |
| nom7.1.3 | |
| num-traits0.2.19 | |
| once_cell1.20.2 | |
| openssl0.10.73 | |
| openssl-probe0.1.5 | |
| openssl-sys0.9.109 | |
| option-ext0.2.0 | |
| owo-colors4.2.2 | |
| papergrid0.17.0 | |
| parking_lot0.12.3 | |
| parking_lot_core0.9.10 | |
| path-absolutize3.1.1 | |
| path-dedot3.1.1 | |
| percent-encoding2.3.1 | |
| pin-project-lite0.2.15 | |
| pin-utils0.1.0 | |
| pori0.0.0 | |
| portable-atomic1.9.0 | |
| ratatui0.29.0 | |
| rayon1.10.0 | |
| rayon-core1.12.1 | |
| regex1.11.1 | |
| regex-automata0.4.8 | |
| regex-syntax0.8.5 | |
| reqwest0.12.22 | |
| rustix0.38.38 | |
| rustix1.0.5 | |
| rustls-pki-types1.10.0 | |
| ryu1.0.18 | |
| same-file1.0.6 | |
| scopeguard1.2.0 | |
| semver1.0.26 | |
| serde1.0.219 | |
| serde-saphyr0.0.26 | |
| serde_json1.0.141 | |
| serde_spanned1.0.0 | |
| serde_urlencoded0.7.1 | |
| shell-words1.1.0 | |
| signal-hook0.3.17 | |
| signal-hook-mio0.2.4 | |
| signal-hook-registry1.4.2 | |
| slab0.4.9 | |
| smallvec1.13.2 | |
| socket20.5.10 | |
| stable_deref_trait1.2.0 | |
| static_assertions1.1.0 | |
| strsim0.11.1 | |
| strum0.26.3 | |
| sugar_path1.2.0 | |
| sync_wrapper1.0.2 | |
| tabled0.20.0 | |
| tempfile3.13.0 | |
| termcolor1.4.1 | |
| testing_table0.3.0 | |
| thiserror1.0.67 | |
| tinystr0.7.6 | |
| tokio1.46.1 | |
| tokio-native-tls0.3.1 | |
| tokio-util0.7.12 | |
| toml0.9.2 | |
| toml_datetime0.7.0 | |
| toml_parser1.0.1 | |
| toml_writer1.0.2 | |
| tower0.5.2 | |
| tower-http0.6.6 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.41 | |
| tracing-core0.1.33 | |
| try-lock0.2.5 | |
| unicode-segmentation1.12.0 | |
| unicode-truncate1.1.0 | |
| unicode-width0.1.11 | |
| unicode-width0.2.0 | |
| unit-prefix0.5.1 | |
| url2.5.3 | |
| utf16_iter1.0.5 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| vte0.14.1 | |
| walkdir2.5.0 | |
| want0.3.1 | |
| wax0.6.0 | |
| webbrowser1.0.5 | |
| which8.0.0 | |
| winnow0.7.12 | |
| write161.0.0 | |
| writeable0.5.5 | |
| yoke0.7.4 | |
| zerocopy0.8.27 | |
| zerofrom0.1.4 | |
| zeroize1.8.1 | |
| zerovec0.10.4 | |
| zmij1.0.21 | |
| addr2line0.24.2 | |
| adler22.0.0 | |
| backtrace0.3.74 | |
| getrandom0.2.15 | |
| gimli0.31.1 | |
| human-panic2.0.3 | |
| minimal-lexical0.2.1 | |
| miniz_oxide0.8.0 | |
| nix0.29.0 | |
| nu-ansi-term0.46.0 | |
| object0.36.5 | |
| os_info3.8.2 | |
| overload0.1.1 | |
| process-wrap8.2.0 | |
| rustc-demangle0.1.24 | |
| sharded-slab0.1.7 | |
| thread_local1.1.8 | |
| tracing-log0.2.0 | |
| tracing-subscriber0.3.19 | |
| uuid1.11.0 | |
| anstyle-wincon3.0.6 | |
| autocfg1.4.0 | |
| bindgen0.69.5 | |
| bumpalo3.16.0 | |
| cc1.1.34 | |
| cesu81.1.0 | |
| cexpr0.6.0 | |
| cfg_aliases0.2.1 | |
| chrono0.4.45 | |
| clang-sys1.8.1 | |
| clap_derive4.5.41 | |
| combine4.6.7 | |
| const_format_proc_macros0.2.33 | |
| convert_case0.7.1 | |
| core-foundation0.10.0 | |
| core-foundation0.9.4 | |
| core-foundation-sys0.8.7 | |
| crossterm_winapi0.9.1 | |
| darling0.20.10 | |
| darling_core0.20.10 | |
| darling_macro0.20.10 | |
| derive_builder_core0.20.2 | |
| derive_builder_macro0.20.2 | |
| derive_more-impl2.0.1 | |
| diff0.1.13 | |
| displaydoc0.2.5 | |
| document-features0.2.11 | |
| encode_unicode0.3.6 | |
| encode_unicode1.0.0 | |
| errno0.3.11 | |
| futures-macro0.3.31 | |
| glob0.3.1 | |
| heck0.5.0 | |
| hermit-abi0.3.9 | |
| home0.5.9 | |
| hyper-rustls0.27.3 | |
| icu_provider_macros1.5.0 | |
| ident_case1.0.1 | |
| indoc2.0.5 | |
| instability0.3.3 | |
| io-uring0.7.9 | |
| jni0.21.1 | |
| jni-sys0.3.0 | |
| js-sys0.3.77 | |
| lazycell1.3.0 | |
| libloading0.8.6 | |
| libredox0.1.3 | |
| litrs0.4.1 | |
| ndk-context0.1.1 | |
| objc20.6.0 | |
| objc2-encode4.1.0 | |
| objc2-foundation0.3.0 | |
| openssl-macros0.1.1 | |
| openssl-src300.4.1+3.4.0 | |
| paste1.0.15 | |
| pkg-config0.3.31 | |
| pretty_assertions1.4.1 | |
| prettyplease0.2.25 | |
| proc-macro-error-attr22.0.0 | |
| proc-macro-error22.0.1 | |
| proc-macro21.0.89 | |
| quote1.0.37 | |
| r-efi5.3.0 | |
| redox_syscall0.5.7 | |
| redox_users0.5.0 | |
| ring0.17.8 | |
| rustc-hash1.1.0 | |
| rustls0.23.17 | |
| rustls-webpki0.102.8 | |
| rustversion1.0.18 | |
| schannel0.1.26 | |
| security-framework2.11.1 | |
| security-framework-sys2.12.1 | |
| serde_derive1.0.219 | |
| shlex1.3.0 | |
| spin0.9.8 | |
| strum_macros0.26.4 | |
| subtle2.6.1 | |
| syn2.0.87 | |
| synstructure0.13.1 | |
| system-configuration0.6.1 | |
| system-configuration-sys0.6.0 | |
| tabled_derive0.11.0 | |
| thiserror2.0.12 | |
| thiserror-impl1.0.67 | |
| thiserror-impl2.0.12 | |
| tokio-macros2.5.0 | |
| tokio-rustls0.26.0 | |
| tracing-attributes0.1.28 | |
| unicode-ident1.0.13 | |
| unicode-xid0.2.6 | |
| untrusted0.9.0 | |
| valuable0.1.0 | |
| vcpkg0.2.15 | |
| version_check0.9.5 | |
| wasi0.11.0+wasi-snapshot-preview1 | |
| wasip21.0.3+wasi-0.2.9 | |
| wasm-bindgen0.2.100 | |
| wasm-bindgen-backend0.2.100 | |
| wasm-bindgen-futures0.4.45 | |
| wasm-bindgen-macro0.2.100 | |
| wasm-bindgen-macro-support0.2.100 | |
| wasm-bindgen-shared0.2.100 | |
| web-sys0.3.72 | |
| web-time1.1.0 | |
| which4.4.2 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-util0.1.9 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows0.52.0 | |
| windows0.59.0 | |
| windows-core0.52.0 | |
| windows-core0.59.0 | |
| windows-implement0.59.0 | |
| windows-interface0.59.1 | |
| windows-link0.1.1 | |
| windows-registry0.5.2 | |
| windows-result0.3.4 | |
| windows-strings0.3.1 | |
| windows-strings0.4.2 | |
| windows-sys0.45.0 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.60.2 | |
| windows-targets0.42.2 | |
| windows-targets0.52.6 | |
| windows-targets0.53.2 | |
| windows_aarch64_gnullvm0.42.2 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_gnullvm0.53.0 | |
| windows_aarch64_msvc0.42.2 | |
| windows_aarch64_msvc0.52.6 | |
| windows_aarch64_msvc0.53.0 | |
| windows_i686_gnu0.42.2 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnu0.53.0 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_gnullvm0.53.0 | |
| windows_i686_msvc0.42.2 | |
| windows_i686_msvc0.52.6 | |
| windows_i686_msvc0.53.0 | |
| windows_x86_64_gnu0.42.2 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnu0.53.0 | |
| windows_x86_64_gnullvm0.42.2 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_gnullvm0.53.0 | |
| windows_x86_64_msvc0.42.2 | |
| windows_x86_64_msvc0.52.6 | |
| windows_x86_64_msvc0.53.0 | |
| winsafe0.0.19 | |
| wit-bindgen0.57.1 | |
| yansi1.0.1 | |
| yoke-derive0.7.4 | |
| zerocopy-derive0.8.27 | |
| zerofrom-derive0.1.4 | |
| zerovec-derive0.10.3 |
| Vulnerabilities18 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0204 | crossbeam-epoch | 0.9.18 | >=0.9.20 | high | Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid | retained |
| RUSTSEC-2026-0258 | h2 | 0.4.7 | >=0.4.16 | high | h2 unbounded empty DATA frames | retained |
| GHSA-wwq9-3cpr-mm53 | hashbrown | 0.15.0 | >=0.15.1 | high | Borsh serialization of HashMap is non-canonical | retained |
| CVE-2026-41676 | openssl | 0.10.73 | >=0.10.78 | high | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 | retained |
| CVE-2026-41678 | openssl | 0.10.73 | >=0.10.78 | high | rust-openssl has incorrect bounds assertion in aes key wrap | retained |
| CVE-2026-41681 | openssl | 0.10.73 | >=0.10.78 | high | rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check | retained |
| CVE-2026-41898 | openssl | 0.10.73 | >=0.10.78 | high | rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer | retained |
| CVE-2026-42327 | openssl | 0.10.73 | >=0.10.79 | high | rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs | retained |
| RUSTSEC-2026-0257 | webbrowser | 1.0.5 | >=1.2.2 | high | Unix `BROWSER` handling allows browser argument injection | retained |
| CVE-2026-25541 | bytes | 1.8.0 | >=1.11.1 | medium | bytes has integer overflow in BytesMut::reserve | retained |
| CVE-2025-4574 | crossbeam-channel | 0.5.13 | >=0.5.15 | medium | crossbeam-channel Vulnerable to Double Free on Drop | retained |
| CVE-2026-44662 | openssl | 0.10.73 | >=0.10.79 | medium | rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding | retained |
| CVE-2026-45784 | openssl | 0.10.73 | >=0.10.80 | medium | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | retained |
| RUSTSEC-2026-0190 | anyhow | 1.0.98 | >=1.0.103 | low | Unsoundness in `Error::downcast_mut()` | retained |
| GHSA-rhfx-m35p-ff5j | lru | 0.12.5 | >=0.16.3 | low | `IterMut` violates Stacked Borrows by invalidating internal pointer | retained |
| RUSTSEC-2026-0253 | lru | 0.12.5 | >=0.18.2 | low | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | retained |
| RUSTSEC-2026-0186 | memmap2 | 0.9.10 | >=0.9.11 | low | Unchecked pointer offset in crate `memmap2` | retained |
| CVE-2026-41677 | openssl | 0.10.73 | >=0.10.78 | low | rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 1afe4d4d-8514-4184-b19d-0f6db5d4afff
analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2
