menger 0.6.0

7 vulnerabilities

processes: 344
operations: 68K
packages: 347
compiler runs: 743
connections: 1
job time: 5m 40s
capture: 917 KB
records: 124K
bytes / record: 7.4

Build behaviourhas a build scriptcompiled C/C++

run 37c64311-b71f-4667-bdc6-8c13d068a1a9 · built 2026-10-12 · complete Release

Artifact

binary · retained · product · graph v2

Checks	Detections
Build behavior
✓ Network activity	—
✓ Sensitive data access and transfer	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Data flow analysis	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
✓ Build-time dependency advisories	—
✓ Dependency advisories	—
✓ Declared and observed dependencies	—
✓ Dependency and toolchain versions	—
Pipeline
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 68K flows.

Network

0 peers

cargo fetched 18,339 files from static.crates.io

Vulnerable dependencies7	Package	Version	Fix	Severity	Title	Reach
CVE-2026-42559	rmcp	0.12.0	>=1.4.0	high	rmcp Streamable HTTP server transport has a DNS rebinding vulnerability	retained
CVE-2026-63127	rmcp	0.12.0	>=2.0.0	high	RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery	retained
CVE-2026-63128	rmcp	0.12.0	>=2.0.0	high	RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service	retained
CVE-2026-25537	jsonwebtoken	9.3.1	>=10.3.0	medium	jsonwebtoken has Type Confusion that leads to potential authorization bypass	retained
CVE-2026-64684	rmcp	0.12.0	>=2.1.0	medium	RMCP: Custom HTTP headers leak to cross-origin redirect targets	retained
GHSA-c9xm-49cp-xcr9	rmcp	0.12.0	>=2.0.0	medium	rmcp OAuth client fetches server-controlled resource_metadata URLs	retained
GHSA-2mjx-qc3c-rqvc	rustls	0.23.41	>=0.23.45	medium	Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries	retained

Dependencies

379 packages, 31 with a build script that ran, 18 doing more than compiling

Package	Version	Usage	Build behaviour
ring	0.17.14	linked	build scriptprebuilt objects
vcpkg	0.2.15	linked	prebuilt objects
windows_i686_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
wit-bindgen	0.57.1	platform_gated	build script, not runprebuilt objects
anyhow direct	1.0.104	linked	build script
async-stream-impl	0.3.6	linked	proc macro
async-trait direct	0.1.92	linked	proc macro
bitcoin-internals	0.6.0	linked	build script
bitcoin-internals	0.7.0	linked	build script
bitcoin-io	0.1.101	feature_gated	build script, not run
clap_derive	4.6.4	linked	proc macro
curve25519-dalek	4.1.3	linked	build script
curve25519-dalek-derive	0.1.1	linked	proc macro
darling_macro	0.23.0	linked	proc macro
defmt	1.1.1	feature_gated	build script, not run
defmt-macros	1.1.1	buildtime_only	build script, not runproc macro
displaydoc	0.2.7	linked	proc macro
faster-hex	0.10.1	linked	build script
futures-macro	0.3.34	linked	proc macro
generic-array	0.14.7	linked	build script
getrandom	0.3.4	linked	build script
getrandom	0.4.3	linked	build script
httparse	1.10.1	linked	build script
iana-time-zone-haiku	0.1.2	platform_gated	build script, not run
icu_normalizer_data	2.3.0	linked	build script
icu_properties_data	2.3.0	linked	build script
jni-sys-macros	0.4.1	buildtime_only	proc macro
jsonrpsee-proc-macros	0.26.0	linked	proc macro
ld-linux-x86-64.so.2		linked	system library
libc	0.2.189	linked	build script
libc.so.6		linked	system library
libgcc_s.so.1		linked	system library
libm.so.6		linked	system library
libmvec.so.1		linked	system library
libsqlite3-sys	0.35.0	linked	build script
num-traits	0.2.19	linked	build script
parking_lot_core	0.9.12	linked	build script
pastey	0.2.3	linked	proc macro
pin-project-internal	1.1.13	linked	proc macro
plexus-macros	0.6.0	linked	proc macro
proc-macro2	1.0.107	linked	build script
pulldown-cmark	0.13.4	linked	build script
quinn	0.11.12	feature_gated	build script, not run
quinn-udp	0.5.16	feature_gated	build script, not run
quote	1.0.47	linked	build script
ref-cast	1.0.27	linked	build script
ref-cast-impl	1.0.27	linked	proc macro
rmcp-macros	0.12.0	linked	proc macro
rustix	1.1.4	unrelated	build script
rustls	0.23.41	linked	build script
rustversion	1.0.23	buildtime_only	build script, not runproc macro
schemars_derive	1.2.2	linked	proc macro
secp256k1-sys	0.10.1	linked	build script
serde direct	1.0.229	linked	build script
serde_core	1.0.229	linked	build script
serde_derive	1.0.229	linked	proc macro
serde_json direct	1.0.151	linked	build script
thiserror	1.0.69	linked	build script
thiserror	2.0.20	linked	build script
thiserror-impl	1.0.69	linked	proc macro
thiserror-impl	2.0.20	linked	proc macro
time-macros	0.2.32	linked	proc macro
tokio-macros	2.7.2	linked	proc macro
tracing-attributes	0.1.31	linked	proc macro
valuable	0.1.1	feature_gated	build script, not run
wasm-bindgen	0.2.128	platform_gated	build script, not run
wasm-bindgen-macro	0.2.128	buildtime_only	proc macro
wasm-bindgen-shared	0.2.128	platform_gated	build script, not run
windows-implement	0.60.2	buildtime_only	proc macro
windows-interface	0.59.3	buildtime_only	proc macro
yoke-derive	0.8.2	linked	proc macro
zerocopy	0.8.56	linked	build script
zerocopy-derive	0.8.56	buildtime_only	proc macro
zerofrom-derive	0.1.7	linked	proc macro
zerovec-derive	0.11.6	linked	proc macro
zmij	1.0.23	linked	build script
aead	0.5.2	feature_gated
aho-corasick	1.1.5	feature_gated
android_system_properties	0.1.6	platform_gated
anstream	1.0.0	linked
anstyle	1.0.14	linked
anstyle-parse	1.0.0	linked
anstyle-query	1.1.5	linked
anstyle-wincon	3.0.11	platform_gated
arrayvec	0.7.8	linked
async-stream	0.3.6	linked
atomic-waker	1.1.2	linked
autocfg	1.5.1	buildtime_only
axum direct	0.8.9	linked
axum-core	0.5.6	linked
base64 direct	0.22.1	linked
base64ct	1.8.3	feature_gated
bech32	0.12.0	linked
bip39	2.2.2	feature_gated
bitcoin-consensus-encoding	1.3.0	linked
bitcoin_hashes	0.14.101	feature_gated
bitcoin_hashes	1.2.0	linked
bitflags	1.3.2	feature_gated
bitflags	2.13.1	linked
block-buffer	0.10.4	linked
block-padding	0.3.3	feature_gated
bumpalo	3.20.3	buildtime_only
bytemuck	1.25.2	linked
byteorder	1.5.0	linked
bytes	1.12.1	linked
cbc	0.1.2	feature_gated
cc	1.4.5	linked
cesu8	1.1.0	platform_gated
cfg-if	1.0.4	linked
cfg_aliases	0.2.2	buildtime_only
chacha20	0.9.1	feature_gated
chacha20poly1305	0.10.1	feature_gated
chrono	0.4.45	linked
cipher	0.4.4	feature_gated
clap direct	4.6.6	linked
clap_builder	4.6.6	linked
clap_lex	1.1.0	linked
colorchoice	1.0.5	linked
combine	4.6.7	platform_gated
const-oid	0.9.6	feature_gated
core-foundation	0.10.1	platform_gated
core-foundation-sys	0.8.7	platform_gated
cpufeatures	0.2.17	linked
crypto-common	0.1.7	linked
darling	0.23.0	linked
darling_core	0.23.0	linked
defmt	0.3.100	feature_gated
defmt-parser	1.0.0	buildtime_only
der	0.7.10	feature_gated
deranged	0.5.8	linked
digest	0.10.7	linked
dirs direct	6.0.0	linked
dirs-sys	0.5.0	linked
dyn-clone	1.0.20	linked
ed25519	2.2.3	linked
ed25519-dalek	2.2.0	linked
equivalent	1.0.2	linked
errno	0.3.14	linked
fallible-iterator	0.3.0	linked
fallible-streaming-iterator	0.1.9	linked
fastrand	2.5.0	unrelated
fiat-crypto	0.2.9	platform_gated
find-msvc-tools	0.1.12	linked
fnv	1.0.7	linked
foldhash	0.1.5	linked
form_urlencoded	1.2.2	linked
futures direct	0.3.34	linked
futures-channel	0.3.34	linked
futures-core	0.3.34	linked
futures-executor	0.3.34	linked
futures-io	0.3.34	linked
futures-sink	0.3.34	linked
futures-task	0.3.34	linked
futures-timer	3.0.4	linked
futures-util	0.3.34	linked
getrandom	0.2.17	linked
h2	0.4.19	linked
hashbrown	0.15.5	linked
hashbrown	0.17.1	linked
hashlink	0.10.0	linked
heck	0.5.0	linked
hex-conservative	0.2.3	feature_gated
hex-conservative	1.3.0	linked
http	1.5.0	linked
http-body	1.1.0	linked
http-body-util	0.1.5	linked
httpdate	1.0.3	linked
hyper	1.11.1	linked
hyper-rustls	0.27.10	linked
hyper-util	0.1.20	linked
iana-time-zone	0.1.65	linked
icu_collections	2.3.0	linked
icu_locale_core	2.3.0	linked
icu_normalizer	2.3.0	linked
icu_properties	2.3.0	linked
icu_provider	2.3.1	linked
ident_case	1.0.1	linked
idna	1.1.0	linked
idna_adapter	1.2.2	linked
indexmap	2.14.2	linked
inout	0.1.4	feature_gated
ipnet	2.12.2	linked
is_terminal_polyfill	1.70.2	linked
itoa	1.0.18	linked
jni	0.21.1	platform_gated
js-sys	0.3.105	platform_gated
jsonrpsee direct	0.26.0	linked
jsonrpsee-client-transport	0.26.0	linked
jsonrpsee-core	0.26.0	linked
jsonrpsee-server	0.26.0	linked
jsonrpsee-types	0.26.0	linked
jsonrpsee-ws-client	0.26.0	linked
jsonwebtoken	9.3.1	linked
lazy_static	1.5.0	linked
libredox	0.1.23	platform_gated
linux-raw-sys	0.12.1	unrelated
litemap	0.8.3	linked
lock_api	0.4.14	linked
log	0.4.34	linked
lru-slab	0.1.3	feature_gated
matchers	0.2.0	linked
matchit	0.8.4	linked
memchr	2.8.3	linked
menger-tickets-api direct	0.6.0	linked
mime	0.3.17	linked
mio	1.2.3	linked
nostr	0.45.5	linked
nu-ansi-term	0.50.3	linked
num-bigint	0.4.8	linked
num-conv	0.2.2	linked
num-integer	0.1.47	linked
once_cell	1.21.4	linked
once_cell_polyfill	1.70.2	platform_gated
opaque-debug	0.3.1	feature_gated
opaquerr	0.2.0	linked
openssl-probe	0.2.1	linked
option-ext	0.2.0	linked
parking_lot	0.12.5	linked
pem	3.0.6	linked
percent-encoding	2.3.2	linked
pin-project	1.1.13	linked
pin-project-lite	0.2.17	linked
pkcs8	0.10.2	feature_gated
pkg-config	0.3.34	linked
plexus-auth-core direct	0.2.0	linked
plexus-client	0.6.0	linked
plexus-core direct	0.6.0	linked
plexus-login direct	0.1.0	linked
plexus-shell direct	0.1.0	linked
plexus-transport direct	0.5.0	linked
poly1305	0.8.0	feature_gated
potential_utf	0.1.6	linked
powerfmt	0.2.0	linked
ppv-lite86	0.2.21	linked
proc-macro-crate	3.5.0	linked
quinn-proto	0.11.19	feature_gated
rand	0.10.2	linked
rand direct	0.8.8	linked
rand	0.9.5	linked
rand_chacha	0.3.1	linked
rand_chacha	0.9.0	linked
rand_core	0.10.1	linked
rand_core	0.6.4	linked
rand_core	0.9.5	linked
rand_pcg	0.10.2	feature_gated
redox_syscall	0.5.18	platform_gated
redox_users	0.5.2	platform_gated
regex-automata	0.4.18	linked
regex-syntax	0.8.11	linked
reqwest direct	0.12.28	linked
rmcp	0.12.0	linked
roaring	0.10.12	linked
route-recognizer	0.3.1	linked
rusqlite	0.37.0	linked
rustc-hash	2.1.3	linked
rustc_version	0.4.1	buildtime_only
rustls-native-certs	0.8.4	linked
rustls-pki-types	1.15.0	linked
rustls-platform-verifier	0.5.3	linked
rustls-platform-verifier-android	0.1.1	platform_gated
rustls-webpki	0.103.13	linked
ryu	1.0.23	linked
same-file	1.0.6	buildtime_only
schannel	0.1.29	platform_gated
schemars	1.2.2	linked
scopeguard	1.2.0	linked
secp256k1	0.30.0	linked
security-framework	3.7.0	platform_gated
security-framework-sys	2.17.0	platform_gated
semver	1.0.28	buildtime_only
serde_derive_internals	0.30.0	linked
serde_path_to_error	0.1.20	linked
serde_urlencoded	0.7.1	linked
sha1	0.10.7	linked
sha1_smol	1.0.1	linked
sha2 direct	0.10.9	linked
sharded-slab	0.1.7	linked
shlex	2.0.1	linked
signal-hook-registry	1.4.8	linked
signature	2.2.0	linked
simple_asn1	0.6.4	linked
slab	0.4.12	linked
smallvec	1.16.0	linked
socket2	0.6.5	linked
soketto	0.8.1	linked
spki	0.7.3	feature_gated
sse-stream	0.2.6	linked
stable_deref_trait	1.2.1	linked
strsim	0.11.1	linked
subtle	2.6.1	linked
syn	2.0.119	linked
syn	3.0.5	linked
sync_wrapper	1.0.2	linked
synstructure	0.13.2	linked
tempfile	3.27.0	unrelated
thread_local	1.1.10	linked
time	0.3.55	linked
time-core	0.1.9	linked
tinystr	0.8.4	linked
tinyvec	1.13.3	feature_gated
tokio direct	1.53.1	linked
tokio-rustls	0.26.4	linked
tokio-stream	0.1.19	linked
tokio-util	0.7.19	linked
toml_datetime	1.1.1+spec-1.1.0	linked
toml_edit	0.25.13+spec-1.1.0	linked
toml_parser	1.1.3+spec-1.1.0	linked
tower	0.5.3	linked
tower-http	0.6.11	linked
tower-layer	0.3.3	linked
tower-service	0.3.3	linked
tracing direct	0.1.44	linked
tracing-core	0.1.36	linked
tracing-log	0.2.0	linked
tracing-subscriber direct	0.3.23	linked
try-lock	0.2.5	linked
typenum	1.20.1	linked
unicase	2.9.0	linked
unicode-ident	1.0.24	linked
unicode-normalization	0.1.25	feature_gated
universal-hash	0.5.1	feature_gated
universal-time	0.3.1	linked
untrusted	0.9.0	linked
url direct	2.5.8	linked
utf8_iter	1.0.4	linked
utf8parse	0.2.2	linked
uuid	1.26.0	linked
version_check	0.9.5	buildtime_only
walkdir	2.5.0	buildtime_only
want	0.3.1	linked
wasi	0.11.1+wasi-snapshot-preview1	platform_gated
wasip2	1.0.4+wasi-0.2.12	platform_gated
wasm-bindgen-futures	0.4.78	platform_gated
wasm-bindgen-macro-support	0.2.128	buildtime_only
web-sys	0.3.105	platform_gated
web-time	1.1.0	platform_gated
webpki-roots	1.0.9	linked
winapi-util	0.1.11	buildtime_only
windows-core	0.62.2	platform_gated
windows-link	0.2.1	platform_gated
windows-result	0.4.1	platform_gated
windows-strings	0.5.1	platform_gated
winnow	1.0.4	linked
writeable	0.6.4	linked
yoke	0.8.3	linked
zerofrom	0.1.8	linked
zeroize	1.9.0	linked
zerotrie	0.2.5	linked
zerovec	0.11.8	linked
windows_aarch64_gnullvm	0.42.2	unverified	build script, not runprebuilt objects
windows_aarch64_gnullvm	0.52.6	unverified	build script, not runprebuilt objects
windows_aarch64_msvc	0.42.2	unverified	build script, not runprebuilt objects
windows_aarch64_msvc	0.52.6	unverified	build script, not runprebuilt objects
windows_i686_gnu	0.42.2	unverified	build script, not runprebuilt objects
windows_i686_gnu	0.52.6	unverified	build script, not runprebuilt objects
windows_i686_msvc	0.42.2	unverified	build script, not runprebuilt objects
windows_i686_msvc	0.52.6	unverified	build script, not runprebuilt objects
windows_x86_64_gnu	0.42.2	unverified	build script, not runprebuilt objects
windows_x86_64_gnu	0.52.6	unverified	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.42.2	unverified	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.52.6	unverified	build script, not runprebuilt objects
windows_x86_64_msvc	0.42.2	unverified	build script, not runprebuilt objects
windows_x86_64_msvc	0.52.6	unverified	build script, not runprebuilt objects
heapless	0.8.0	dead	build script
jni-sys	0.3.1	unverified	build script, not run
chacha20	0.10.2	unverified
cpufeatures	0.3.1	unverified
hash32	0.3.1	dead
jni-sys	0.4.1	unverified
r-efi	5.3.0	unverified
r-efi	6.0.0	unverified
webpki-root-certs	0.26.11	unverified
webpki-root-certs	1.0.9	unverified
windows-sys	0.45.0	unverified
windows-sys	0.52.0	unverified
windows-sys	0.59.0	unverified
windows-sys	0.61.2	unverified
windows-targets	0.42.2	unverified
windows-targets	0.52.6	unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 37c64311-b71f-4667-bdc6-8c13d068a1a9

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2