Artifact
- idx-mcpbinary · retained · product 10
Checks
13 of 14 clear Known vulnerabilitiesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓✓✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 40K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies221 | Build behaviour |
|---|---|
| ahash0.8.12 | |
| anstream0.6.21 | |
| anstyle1.0.13 | |
| anstyle-parse0.2.7 | |
| anstyle-query1.1.5 | |
| base640.22.1 | |
| bitflags2.11.0 | |
| block-buffer0.10.4 | |
| bumpalo3.20.2 | |
| bytes1.11.1 | |
| cfg-if1.0.4 | |
| chrono0.4.44 | |
| clap4.5.60 | |
| clap_builder4.5.60 | |
| clap_lex1.0.0 | |
| colorchoice1.0.4 | |
| cookie0.18.1 | |
| cookie_store0.22.1 | |
| cpufeatures0.2.17 | |
| crc32fast1.5.0 | |
| crypto-common0.1.7 | |
| csv1.4.0 | |
| csv-core0.1.13 | |
| deranged0.5.8 | |
| digest0.10.7 | |
| directories5.0.1 | |
| dirs-sys0.4.1 | |
| dyn-clone1.0.20 | |
| equivalent1.0.2 | |
| fallible-iterator0.3.0 | |
| fallible-streaming-iterator0.1.9 | |
| fastrand2.3.0 | |
| flate21.1.9 | |
| form_urlencoded1.2.2 | |
| futures0.3.34 | |
| futures-channel0.3.34 | |
| futures-core0.3.34 | |
| futures-executor0.3.34 | |
| futures-io0.3.34 | |
| futures-sink0.3.34 | |
| futures-task0.3.34 | |
| futures-util0.3.34 | |
| generic-array0.14.7 | |
| getrandom0.2.17 | |
| getrandom0.4.3 | |
| hashbrown0.14.5 | |
| hashbrown0.16.1 | |
| hashlink0.9.1 | |
| http1.4.0 | |
| httparse1.10.1 | |
| iana-time-zone0.1.65 | |
| icu_collections2.1.1 | |
| icu_locale_core2.1.1 | |
| icu_normalizer2.1.1 | |
| icu_normalizer_data2.1.1 | |
| icu_properties2.1.2 | |
| icu_properties_data2.1.2 | |
| icu_provider2.1.1 | |
| idna1.1.0 | |
| idna_adapter1.2.1 | |
| idx-core0.3.1 | |
| indexmap2.13.0 | |
| is_terminal_polyfill1.70.2 | |
| itoa1.0.17 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.182 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libsqlite3-sys0.30.1 | |
| litemap0.8.1 | |
| log0.4.29 | |
| memchr2.8.0 | |
| miniz_oxide0.8.9 | |
| num-conv0.2.0 | |
| num-traits0.2.19 | |
| once_cell1.21.3 | |
| option-ext0.2.0 | |
| percent-encoding2.3.2 | |
| pin-project-lite0.2.17 | |
| potential_utf0.1.4 | |
| powerfmt0.2.0 | |
| quick-xml0.37.5 | |
| ref-cast1.0.27 | |
| ring0.17.14 | |
| rmcp3.5.1 | |
| rusqlite0.32.1 | |
| rustls0.23.37 | |
| rustls-pki-types1.14.0 | |
| rustls-webpki0.103.9 | |
| ryu1.0.23 | |
| schemars1.2.3 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.149 | |
| serde_spanned0.6.9 | |
| sha20.10.9 | |
| simd-adler320.3.8 | |
| slab0.4.12 | |
| smallvec1.15.1 | |
| stable_deref_trait1.2.1 | |
| strsim0.11.1 | |
| subtle2.6.1 | |
| thiserror2.0.18 | |
| time0.3.47 | |
| time-core0.1.8 | |
| tinystr0.8.2 | |
| tokio1.53.3 | |
| tokio-util0.7.20 | |
| toml0.8.23 | |
| toml_datetime0.6.11 | |
| toml_edit0.22.27 | |
| toml_write0.1.2 | |
| tracing0.1.44 | |
| tracing-core0.1.36 | |
| typenum1.19.0 | |
| untrusted0.9.0 | |
| ureq3.2.0 | |
| ureq-proto0.5.3 | |
| url2.5.8 | |
| utf-80.7.6 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| uuid1.22.0 | |
| webpki-roots1.0.6 | |
| winnow0.7.14 | |
| writeable0.6.2 | |
| yoke0.8.1 | |
| zerocopy0.8.40 | |
| zerofrom0.1.6 | |
| zeroize1.8.2 | |
| zerotrie0.2.3 | |
| zerovec0.11.5 | |
| zip2.4.2 | |
| zmij1.0.21 | |
| zopfli0.8.3 | |
| adler22.0.1 | |
| unicode-ident1.0.24 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.11 | |
| arbitrary1.4.2 | |
| autocfg1.5.0 | |
| cc1.2.56 | |
| clap_derive4.5.55 | |
| core-foundation-sys0.8.7 | |
| crossbeam-utils0.8.21 | |
| darling0.24.1 | |
| darling_core0.24.1 | |
| darling_macro0.24.1 | |
| derive_arbitrary1.4.2 | |
| displaydoc0.2.5 | |
| document-features0.2.12 | |
| find-msvc-tools0.1.9 | |
| futures-macro0.3.34 | |
| heck0.5.0 | |
| iana-time-zone-haiku0.1.2 | |
| ident_case1.0.1 | |
| js-sys0.3.91 | |
| libredox0.1.14 | |
| litrs1.0.0 | |
| once_cell_polyfill1.70.2 | |
| pastey0.2.3 | |
| pkg-config0.3.32 | |
| proc-macro21.0.106 | |
| quote1.0.45 | |
| r-efi6.0.0 | |
| redox_users0.4.6 | |
| ref-cast-impl1.0.27 | |
| rmcp-macros3.5.1 | |
| rustversion1.0.22 | |
| schemars_derive1.2.3 | |
| serde_derive1.0.228 | |
| serde_derive_internals0.30.0 | |
| shlex1.3.0 | |
| syn2.0.117 | |
| syn3.0.9 | |
| synstructure0.13.2 | |
| thiserror1.0.69 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.18 | |
| time-macros0.2.27 | |
| tokio-macros2.7.2 | |
| tracing-attributes0.1.31 | |
| vcpkg0.2.15 | |
| version_check0.9.5 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasm-bindgen0.2.114 | |
| wasm-bindgen-macro0.2.114 | |
| wasm-bindgen-macro-support0.2.114 | |
| wasm-bindgen-shared0.2.114 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.48.0 | |
| windows-sys0.52.0 | |
| windows-sys0.61.2 | |
| windows-targets0.48.5 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.48.5 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.48.5 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.48.5 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.48.5 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.48.5 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.48.5 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.48.5 | |
| windows_x86_64_msvc0.52.6 | |
| yoke-derive0.8.1 | |
| zerocopy-derive0.8.40 | |
| zerofrom-derive0.1.6 | |
| zerovec-derive0.11.2 |
| Vulnerabilities10 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0194 | quick-xml | 0.37.5 | >=0.41.0 | high | Quadratic run time when checking a start tag for duplicate attribute names | retained |
| RUSTSEC-2026-0195 | quick-xml | 0.37.5 | >=0.41.0 | high | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | retained |
| RUSTSEC-2026-0346 | rustls | 0.23.37 | >=0.23.46 | high | `Debug` impls for client session values expose TLS secrets | retained |
| RUSTSEC-2026-0348 | rustls | 0.23.37 | >=0.23.46 | high | Brotli certificate decompression can allocate up to 1 GiB before authentication | retained |
| RUSTSEC-2026-0349 | rustls | 0.23.37 | >=0.23.46 | high | Unauthenticated ServerHello can downgrade later connections to classical key exchange | retained |
| CVE-2026-93599 | rustls-webpki | 0.103.9 | >=0.103.13 | high | rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | retained |
| GHSA-2mjx-qc3c-rqvc | rustls | 0.23.37 | >=0.23.45 | medium | Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | retained |
| CVE-2026-93602 | rustls-webpki | 0.103.9 | >=0.103.10 | medium | webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic | retained |
| CVE-2026-93600 | rustls-webpki | 0.103.9 | >=0.103.12 | low | webpki: Name constraints for URI names were incorrectly accepted | retained |
| CVE-2026-93601 | rustls-webpki | 0.103.9 | >=0.103.12 | low | webpki: Name constraints were accepted for certificates asserting a wildcard name | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 61bd6e61-e8b1-4308-82cf-738e0b6b4dbf
analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2