Artifact
- gitgripbinary · retained · product 20
- grbinary · retained · product 20
- gr1binary · retained · product 20
- libgitgrip.rlibfile · retained · product
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 144K flows.
Network
0 peerscargo fetched 26,770 files from static.crates.io
| Dependencies339 | Build behaviour |
|---|---|
| libssh2-sys0.3.1 | |
| ring0.17.14 | |
| vcpkg0.2.15 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.52.6 | |
| wit-bindgen0.51.0 | |
| anyhow1.0.102 | |
| assert_cmd2.2.0 | |
| async-trait0.1.89 | |
| clap_derive4.6.0 | |
| crossbeam-utils0.8.21 | |
| crunchy0.2.4 | |
| displaydoc0.2.5 | |
| futures-macro0.3.32 | |
| getrandom0.3.4 | |
| getrandom0.4.2 | |
| httparse1.10.1 | |
| iana-time-zone-haiku0.1.2 | |
| icu_normalizer_data2.2.0 | |
| icu_properties_data2.2.0 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.185 | |
| libc.so.6 | |
| libcrypto.so.3 | |
| libgcc_s.so.1 | |
| libgit2-sys0.17.0+1.8.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libsqlite3-sys0.37.0 | |
| libssl.so.3 | |
| libz-sys1.1.28 | |
| native-tls0.2.18 | |
| num-traits0.2.19 | |
| openssl0.10.77 | |
| openssl-macros0.1.1 | |
| openssl-sys0.9.113 | |
| pin-project-internal1.1.11 | |
| portable-atomic1.13.1 | |
| prettyplease0.2.37 | |
| proc-macro21.0.106 | |
| quote1.0.45 | |
| rayon-core1.13.0 | |
| rustix1.1.4 | |
| rustls0.23.38 | |
| rustversion1.0.22 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_derive1.0.228 | |
| serde_json1.0.149 | |
| snafu-derive0.8.9 | |
| sqlite-wasm-rs0.5.2 | |
| system-configuration-sys0.6.0 | |
| thiserror1.0.69 | |
| thiserror2.0.18 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.18 | |
| time-macros0.2.27 | |
| tokio-macros2.7.0 | |
| tracing-attributes0.1.31 | |
| valuable0.1.1 | |
| wasm-bindgen0.2.118 | |
| wasm-bindgen-macro0.2.118 | |
| wasm-bindgen-shared0.2.118 | |
| winapi0.3.9 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| wit-bindgen-rust0.51.0 | |
| wit-bindgen-rust-macro0.51.0 | |
| yoke-derive0.8.2 | |
| zerocopy0.8.48 | |
| zerocopy-derive0.8.48 | |
| zerofrom-derive0.1.7 | |
| zerovec-derive0.11.3 | |
| zmij1.0.21 | |
| aho-corasick1.1.4 | |
| android_system_properties0.1.5 | |
| anes0.1.6 | |
| anstream1.0.0 | |
| anstyle1.0.14 | |
| anstyle-parse1.0.0 | |
| anstyle-query1.1.5 | |
| anstyle-wincon3.0.11 | |
| arc-swap1.9.1 | |
| assert-json-diff2.0.2 | |
| atomic-waker1.1.2 | |
| autocfg1.5.0 | |
| base640.22.1 | |
| bitflags2.11.1 | |
| bstr1.12.1 | |
| bumpalo3.20.2 | |
| bytes1.11.1 | |
| cast0.3.0 | |
| cc1.2.60 | |
| cfg-if1.0.4 | |
| chrono0.4.44 | |
| ciborium0.2.2 | |
| ciborium-io0.2.2 | |
| ciborium-ll0.2.2 | |
| clap4.6.0 | |
| clap_builder4.6.0 | |
| clap_complete4.6.2 | |
| clap_lex1.1.0 | |
| colorchoice1.0.5 | |
| colored2.2.0 | |
| console0.15.11 | |
| core-foundation-sys0.8.7 | |
| criterion0.5.1 | |
| criterion-plot0.5.0 | |
| crossbeam-deque0.8.6 | |
| crossbeam-epoch0.9.18 | |
| deadpool0.12.3 | |
| deadpool-runtime0.1.4 | |
| deranged0.5.8 | |
| dialoguer0.11.0 | |
| difflib0.4.0 | |
| either1.15.0 | |
| encode_unicode1.0.0 | |
| encoding_rs0.8.35 | |
| equivalent1.0.2 | |
| errno0.3.14 | |
| fallible-iterator0.3.0 | |
| fallible-streaming-iterator0.1.9 | |
| fastrand2.4.1 | |
| find-msvc-tools0.1.9 | |
| float-cmp0.10.0 | |
| fnv1.0.7 | |
| foldhash0.1.5 | |
| foldhash0.2.0 | |
| foreign-types0.3.2 | |
| foreign-types-shared0.1.1 | |
| form_urlencoded1.2.2 | |
| fs20.4.3 | |
| futures0.3.32 | |
| futures-channel0.3.32 | |
| futures-core0.3.32 | |
| futures-executor0.3.32 | |
| futures-io0.3.32 | |
| futures-sink0.3.32 | |
| futures-task0.3.32 | |
| futures-util0.3.32 | |
| getrandom0.2.17 | |
| git20.19.0 | |
| glob0.3.3 | |
| h20.4.13 | |
| half2.7.1 | |
| hashbrown0.15.5 | |
| hashbrown0.16.1 | |
| hashbrown0.17.0 | |
| hashlink0.11.0 | |
| heck0.5.0 | |
| hermit-abi0.5.2 | |
| http1.4.0 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httpdate1.0.3 | |
| hyper1.9.0 | |
| hyper-rustls0.27.9 | |
| hyper-timeout0.5.2 | |
| hyper-tls0.6.0 | |
| hyper-util0.1.20 | |
| iana-time-zone0.1.65 | |
| icu_collections2.2.0 | |
| icu_locale_core2.2.0 | |
| icu_normalizer2.2.0 | |
| icu_properties2.2.0 | |
| icu_provider2.2.0 | |
| id-arena2.3.0 | |
| idna1.1.0 | |
| idna_adapter1.2.1 | |
| indexmap2.14.0 | |
| indicatif0.17.11 | |
| ipnet2.12.0 | |
| iri-string0.7.12 | |
| is-terminal0.4.17 | |
| is_terminal_polyfill1.70.2 | |
| itertools0.10.5 | |
| itoa1.0.18 | |
| jobserver0.1.34 | |
| js-sys0.3.95 | |
| jsonwebtoken9.3.1 | |
| lazy_static1.5.0 | |
| leb128fmt0.1.0 | |
| linux-raw-sys0.12.1 | |
| litemap0.8.2 | |
| log0.4.29 | |
| matchers0.2.0 | |
| memchr2.8.0 | |
| mime0.3.17 | |
| mio1.2.0 | |
| normalize-line-endings0.3.0 | |
| nu-ansi-term0.50.3 | |
| num-bigint0.4.6 | |
| num-conv0.2.1 | |
| num-integer0.1.46 | |
| num_cpus1.17.0 | |
| number_prefix0.4.0 | |
| octocrab0.41.2 | |
| once_cell1.21.4 | |
| once_cell_polyfill1.70.2 | |
| oorandom11.1.5 | |
| openssl-probe0.1.6 | |
| openssl-probe0.2.1 | |
| pem3.0.6 | |
| percent-encoding2.3.2 | |
| pin-project-lite0.2.17 | |
| pkg-config0.3.33 | |
| plotters0.3.7 | |
| plotters-backend0.3.7 | |
| plotters-svg0.3.7 | |
| potential_utf0.1.5 | |
| powerfmt0.2.0 | |
| predicates3.1.4 | |
| predicates-core1.0.10 | |
| predicates-tree1.0.13 | |
| quick-xml0.37.5 | |
| r-efi5.3.0 | |
| rayon1.12.0 | |
| regex1.12.3 | |
| regex-automata0.4.14 | |
| regex-syntax0.8.10 | |
| reqwest0.12.28 | |
| rsqlite-vfs0.1.0 | |
| rusqlite0.39.0 | |
| rustls-native-certs0.8.3 | |
| rustls-pki-types1.14.0 | |
| rustls-webpki0.103.12 | |
| ryu1.0.23 | |
| same-file1.0.6 | |
| schannel0.1.29 | |
| secrecy0.10.3 | |
| security-framework3.7.0 | |
| security-framework-sys2.17.0 | |
| semver1.0.28 | |
| serde_path_to_error0.1.20 | |
| serde_spanned0.6.9 | |
| serde_urlencoded0.7.1 | |
| serde_yaml0.9.34+deprecated | |
| sharded-slab0.1.7 | |
| shell-words1.1.1 | |
| shlex1.3.0 | |
| signal-hook-registry1.4.8 | |
| simple_asn10.6.4 | |
| slab0.4.12 | |
| smallvec1.15.1 | |
| snafu0.8.9 | |
| socket20.6.3 | |
| stable_deref_trait1.2.1 | |
| strsim0.11.1 | |
| subtle2.6.1 | |
| syn2.0.117 | |
| sync_wrapper1.0.2 | |
| synstructure0.13.2 | |
| system-configuration0.7.0 | |
| tempfile3.27.0 | |
| termtree0.5.1 | |
| thread_local1.1.9 | |
| time0.3.47 | |
| time-core0.1.8 | |
| tinystr0.8.3 | |
| tinytemplate1.2.1 | |
| tokio1.52.0 | |
| tokio-native-tls0.3.1 | |
| tokio-rustls0.26.4 | |
| tokio-stream0.1.18 | |
| tokio-test0.4.5 | |
| tokio-util0.7.18 | |
| toml0.8.23 | |
| toml_datetime0.6.11 | |
| toml_edit0.22.27 | |
| toml_write0.1.2 | |
| tower0.5.3 | |
| tower-http0.6.8 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-core0.1.36 | |
| tracing-log0.2.0 | |
| tracing-subscriber0.3.23 | |
| try-lock0.2.5 | |
| unicode-ident1.0.24 | |
| unicode-width0.2.2 | |
| unicode-xid0.2.6 | |
| unsafe-libyaml0.2.11 | |
| untrusted0.9.0 | |
| url2.5.8 | |
| urlencoding2.1.3 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| wait-timeout0.2.1 | |
| walkdir2.5.0 | |
| want0.3.1 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.2+wasi-0.2.9 | |
| wasip30.4.0+wasi-0.3.0-rc-2026-01-06 | |
| wasm-bindgen-futures0.4.68 | |
| wasm-bindgen-macro-support0.2.118 | |
| wasm-encoder0.244.0 | |
| wasm-metadata0.244.0 | |
| wasmparser0.244.0 | |
| web-sys0.3.95 | |
| web-time1.1.0 | |
| webpki-roots1.0.6 | |
| winapi-util0.1.11 | |
| windows-core0.62.2 | |
| windows-link0.2.1 | |
| windows-registry0.6.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-targets0.52.6 | |
| winnow0.7.15 | |
| winsafe0.0.19 | |
| wiremock0.6.5 | |
| wit-bindgen-core0.51.0 | |
| wit-component0.244.0 | |
| wit-parser0.244.0 | |
| writeable0.6.3 | |
| yoke0.8.2 | |
| zerofrom0.1.7 | |
| zeroize1.8.2 | |
| zerotrie0.2.4 | |
| zerovec0.11.6 | |
| core-foundation0.10.1 | |
| core-foundation0.9.4 | |
| env_home0.1.0 | |
| pin-project1.1.11 | |
| r-efi6.0.0 | |
| uuid1.23.0 | |
| which7.0.3 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 |
| Vulnerabilities20 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0258 | h2 | 0.4.13 | >=0.4.16 | high | h2 unbounded empty DATA frames | retained |
| CVE-2026-41676 | openssl | 0.10.77 | >=0.10.78 | high | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 | retained |
| CVE-2026-41678 | openssl | 0.10.77 | >=0.10.78 | high | rust-openssl has incorrect bounds assertion in aes key wrap | retained |
| CVE-2026-41681 | openssl | 0.10.77 | >=0.10.78 | high | rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check | retained |
| CVE-2026-41898 | openssl | 0.10.77 | >=0.10.78 | high | rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer | retained |
| CVE-2026-42327 | openssl | 0.10.77 | >=0.10.79 | high | rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs | retained |
| RUSTSEC-2026-0194 | quick-xml | 0.37.5 | >=0.41.0 | high | Quadratic run time when checking a start tag for duplicate attribute names | retained |
| RUSTSEC-2026-0195 | quick-xml | 0.37.5 | >=0.41.0 | high | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | retained |
| CVE-2026-93599 | rustls-webpki | 0.103.12 | >=0.103.13 | high | rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | retained |
| CVE-2026-25537 | jsonwebtoken | 9.3.1 | >=10.3.0 | medium | jsonwebtoken has Type Confusion that leads to potential authorization bypass | retained |
| CVE-2026-44662 | openssl | 0.10.77 | >=0.10.79 | medium | rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding | retained |
| CVE-2026-45784 | openssl | 0.10.77 | >=0.10.80 | medium | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | retained |
| GHSA-2mjx-qc3c-rqvc | rustls | 0.23.38 | >=0.23.45 | medium | Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | retained |
| RUSTSEC-2026-0190 | anyhow | 1.0.102 | >=1.0.103 | low | Unsoundness in `Error::downcast_mut()` | retained |
| GHSA-j39j-6gw9-jw6h | git2 | 0.19.0 | >=0.20.4 | low | git2 has potential undefined behavior when dereferencing Buf struct | retained |
| RUSTSEC-2026-0183 | git2 | 0.19.0 | >=0.21.0 | low | Potential undefined behavior when calling Remote::list() | retained |
| RUSTSEC-2026-0184 | git2 | 0.19.0 | >=0.21.0 | low | Potential undefined behavior with Signature from a buffer-created BlameHunk | retained |
| RUSTSEC-2025-0119 | number_prefix | 0.4.0 | none published | low | number_prefix crate is unmaintained | retained |
| CVE-2026-41677 | openssl | 0.10.77 | >=0.10.78 | low | rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length | retained |
| RUSTSEC-0000-0000 | unsafe-libyaml | 0.2.11 | none published | low | unsafe-libyaml is unmaintained | retained |
2 of 2 jobs captured: build-test failure, build-test success · Generated 2026-10-12 · run 3170ddad-0e0e-43e0-8c54-3ba6b2278d09
analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2
