cargo / harna-mcp / 0.3.0

harna-mcp 0.3.0

5 vulnerabilities

processes: 181
operations: 20K
packages: 103
compiler runs: 77
connections: 1
job time: 45s
capture: 253 KB
records: 35K
bytes / record: 7.2

Build behaviourcompiled and nothing more

run 3e426f98-fcf4-4e9f-ba7f-15e84b3dcafd · built 2026-10-16 · complete Release

Artifact

binary · retained · product · graph v2

Checks

12 of 14 clear Known vulnerabilities Build-time dependency advisories

Build behavior✓✓✓✓✓✓✓✓

Supply chain▲▲✓✓✓

Pipeline✓

Detections

No detections

No abnormal activity detected across 20K flows.

Network

1 peers

static.crates.io:8080 the package manager · cargo (harna-mcp) via crates.io · 5,179 files · went into an output ecosystem

Dependencies105	Build behaviour
anyhow1.0.104	build script
base640.22.1
bytes1.12.1
cfg-if1.0.5
chrono0.4.45
dyn-clone1.0.20
errno0.3.14
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
harna-core0.3.0
iana-time-zone0.1.65
itoa1.0.18
ld-linux-x86-64.so.2	system library
libc0.2.190	build script
libc.so.6	system library
libgcc_s.so.1	system library
libm.so.6	system library
libmvec.so.1	system library
lock_api0.4.14
memchr2.8.3
mio1.2.4
num-traits0.2.19	build script
once_cell1.21.4
parking_lot0.12.5
parking_lot_core0.9.12	build script
pin-project-lite0.2.17
ref-cast1.0.27	build script
rmcp0.3.2
schemars1.2.3
scopeguard1.2.0
serde1.0.229	build script
serde_core1.0.229	build script
serde_json1.0.154	build script
serde_spanned1.1.2
signal-hook-registry1.4.8
slab0.4.12
smallvec1.16.3
socket20.6.5
thiserror2.0.21	build script
tokio1.53.3
tokio-util0.7.20
toml0.9.12+spec-1.1.0
toml_datetime0.7.5+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
toml_writer1.1.3+spec-1.1.0
tracing0.1.44
tracing-core0.1.36
winnow0.7.15
winnow1.0.4
zmij1.0.23	build script
unicode-ident1.0.27
android_system_properties0.1.6
autocfg1.5.1
bitflags2.13.2
bumpalo3.20.3
cc1.8.0
core-foundation-sys0.8.7
darling0.21.3
darling_core0.21.3
darling_macro0.21.3	proc macro
equivalent1.0.3
find-msvc-tools0.1.14
fnv1.0.7
futures-macro0.3.34	proc macro
hashbrown0.17.1
iana-time-zone-haiku0.1.2	build script, not run
ident_case1.0.1
indexmap2.14.2
js-sys0.3.106
log0.4.34
paste1.0.15	build scriptproc macro
proc-macro21.0.107	build script
quote1.0.47	build script
redox_syscall0.5.18
ref-cast-impl1.0.27	proc macro
rmcp-macros0.3.2	proc macro
rustversion1.0.23	build script, not runproc macro
schemars_derive1.2.3	proc macro
serde_derive1.0.229	proc macro
serde_derive_internals0.30.0
shlex2.0.1
strsim0.11.1
syn2.0.119
syn3.0.9
thiserror-impl2.0.21	proc macro
tokio-macros2.7.2	proc macro
tracing-attributes0.1.31	proc macro
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen0.2.129	build script, not run
wasm-bindgen-macro0.2.129	proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129	build script, not run
windows-core0.62.2
windows-implement0.60.2	proc macro
windows-interface0.59.3	proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.61.2

Vulnerabilities5	Package	Version	Fix	Severity	Title	Reach
CVE-2026-42559	rmcp	0.3.2	>=1.4.0	high	rmcp Streamable HTTP server transport has a DNS rebinding vulnerability	retained
CVE-2026-63127	rmcp	0.3.2	>=2.0.0	high	RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery	retained
CVE-2026-63128	rmcp	0.3.2	>=2.0.0	high	RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service	retained
CVE-2026-64684	rmcp	0.3.2	>=2.1.0	medium	RMCP: Custom HTTP headers leak to cross-origin redirect targets	retained
GHSA-c9xm-49cp-xcr9	rmcp	0.3.2	>=2.0.0	medium	rmcp OAuth client fetches server-controlled resource_metadata URLs	retained

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 3e426f98-fcf4-4e9f-ba7f-15e84b3dcafd

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2