cargo / near-vm-runner
near-vm-runner 0.38.0-rc.4
7 vulnerabilities- processes
- 513
- operations
- 125K
- packages
- 378
- compiler runs
- 1,666
- connections
- 1
- job time
- 5m 32s
- capture
- 1.3 MB
- records
- 205K
- bytes / record
- 6.2
This crate implements the specification of the interface that Near blockchain exposes to the smart contracts.
Artifact
- bench-contracts-compilationbinary · retained · product 7
- libnear_vm_runner.rlibfile · retained · product
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 125K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies413 | Build behaviour |
|---|---|
| allocator-api20.2.21 | |
| anstream0.6.18 | |
| anstyle1.0.10 | |
| anstyle-parse0.2.0 | |
| anstyle-query1.1.2 | |
| anyhow1.0.103 | |
| arbitrary1.4.2 | |
| atomic-waker1.1.2 | |
| aws-lc-rs1.16.2 | |
| aws-lc-sys0.39.0 | |
| base16ct0.2.0 | |
| base640.21.0 | |
| base640.22.1 | |
| bitflags2.11.0 | |
| blake20.10.6 | |
| block-buffer0.10.2 | |
| blst0.3.11 | |
| borsh1.5.3 | |
| bs580.4.0 | |
| bumpalo3.20.2 | |
| byteorder1.4.3 | |
| bytes1.11.1 | |
| bytesize1.1.0 | |
| cfg-if1.0.0 | |
| clap4.5.21 | |
| clap_builder4.5.21 | |
| clap_lex0.7.3 | |
| cobs0.3.0 | |
| colorchoice1.0.0 | |
| const-oid0.9.6 | |
| cpufeatures0.2.11 | |
| cranelift-assembler-x640.132.0 | |
| cranelift-bforest0.132.0 | |
| cranelift-bitset0.132.0 | |
| cranelift-codegen0.132.0 | |
| cranelift-codegen-shared0.132.0 | |
| cranelift-control0.132.0 | |
| cranelift-entity0.132.0 | |
| cranelift-frontend0.132.0 | |
| cranelift-native0.132.0 | |
| crc32fast1.5.0 | |
| crossbeam-channel0.5.8 | |
| crossbeam-deque0.8.1 | |
| crossbeam-epoch0.9.20 | |
| crossbeam-utils0.8.21 | |
| crunchy0.2.2 | |
| crypto-bigint0.5.5 | |
| crypto-common0.1.3 | |
| curve25519-dalek4.1.3 | |
| dashmap6.1.0 | |
| der0.7.10 | |
| deranged0.5.8 | |
| derive_more2.0.1 | |
| digest0.10.7 | |
| ecdsa0.16.9 | |
| ed255192.2.3 | |
| ed25519-dalek2.2.0 | |
| either1.6.1 | |
| elliptic-curve0.13.8 | |
| enum-map2.7.3 | |
| equivalent1.0.2 | |
| fastrand2.2.0 | |
| ff0.13.1 | |
| finite-wasm0.6.1 | |
| fixed-hash0.7.0 | |
| fnv1.0.7 | |
| foldhash0.1.3 | |
| foldhash0.2.0 | |
| futures-channel0.3.31 | |
| futures-core0.3.31 | |
| futures-executor0.3.31 | |
| futures-sink0.3.31 | |
| futures-task0.3.31 | |
| futures-util0.3.31 | |
| generic-array0.14.9 | |
| getrandom0.2.15 | |
| getrandom0.3.1 | |
| gimli0.33.0 | |
| group0.13.0 | |
| h20.4.16 | |
| hashbrown0.14.5 | |
| hashbrown0.15.2 | |
| hashbrown0.16.1 | |
| hashbrown0.17.0 | |
| hex0.4.3 | |
| hmac0.12.1 | |
| http1.3.1 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httparse1.10.1 | |
| hyper1.7.0 | |
| hyper-timeout0.5.2 | |
| hyper-util0.1.16 | |
| indexmap2.14.0 | |
| is_terminal_polyfill1.70.1 | |
| itertools0.14.0 | |
| itoa1.0.11 | |
| json_comments0.2.1 | |
| keccak0.1.6 | |
| lazy_static1.4.0 | |
| ld-linux-x86-64.so.2 | |
| leb128fmt0.1.0 | |
| libc0.2.186 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm0.2.16 | |
| libm.so.6 | |
| libmvec.so.1 | |
| linux-raw-sys0.12.1 | |
| lock_api0.4.13 | |
| log0.4.29 | |
| lru0.18.2 | |
| matchers0.2.0 | |
| memchr2.7.5 | |
| memfd0.6.5 | |
| mio1.0.3 | |
| near-account-id3.0.0 | |
| near-config-utils0.38.0-rc.4 | |
| near-crypto0.38.0-rc.4 | |
| near-gas0.3.2 | |
| near-o11y0.38.0-rc.4 | |
| near-parameters0.38.0-rc.4 | |
| near-primitives-core0.38.0-rc.4 | |
| near-schema-checker-core0.38.0-rc.4 | |
| near-schema-checker-lib0.38.0-rc.4 | |
| near-stdx0.38.0-rc.4 | |
| near-token0.3.2 | |
| nu-ansi-term0.50.1 | |
| num-bigint0.3.3 | |
| num-conv0.2.1 | |
| num-integer0.1.46 | |
| num-rational0.3.2 | |
| num-traits0.2.19 | |
| num_cpus1.13.1 | |
| object0.39.1 | |
| once_cell1.19.0 | |
| opentelemetry0.32.0 | |
| opentelemetry-otlp0.32.0 | |
| opentelemetry-proto0.32.0 | |
| opentelemetry-semantic-conventions0.32.1 | |
| opentelemetry_sdk0.32.1 | |
| p2560.13.2 | |
| parking_lot0.12.1 | |
| parking_lot_core0.9.11 | |
| percent-encoding2.3.1 | |
| pin-project1.1.5 | |
| pin-project-lite0.2.16 | |
| pin-utils0.1.0 | |
| postcard1.1.3 | |
| powerfmt0.2.0 | |
| ppv-lite860.2.16 | |
| prefix-sum-vec0.1.2 | |
| primeorder0.13.6 | |
| primitive-types0.10.1 | |
| prometheus0.14.0 | |
| prost0.14.4 | |
| prost-types0.14.4 | |
| pulley-interpreter45.0.0 | |
| rand0.8.5 | |
| rand0.9.0 | |
| rand_chacha0.3.1 | |
| rand_chacha0.9.0 | |
| rand_core0.6.4 | |
| rand_core0.9.3 | |
| rayon1.10.0 | |
| rayon-core1.12.1 | |
| regalloc20.15.1 | |
| regex-automata0.4.10 | |
| regex-syntax0.8.6 | |
| rfc69790.4.0 | |
| ripemd0.1.1 | |
| rustc-hash2.1.2 | |
| rustix1.1.4 | |
| ryu1.0.10 | |
| scopeguard1.1.0 | |
| sec10.7.3 | |
| secp256k10.27.0 | |
| secp256k1-sys0.8.1 | |
| semver1.0.9 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.143 | |
| serde_with3.0.0 | |
| serde_yaml0.9.29 | |
| sha20.10.6 | |
| sha30.10.6 | |
| sharded-slab0.1.4 | |
| signature2.2.0 | |
| slab0.4.11 | |
| smallvec1.15.1 | |
| socket20.6.0 | |
| spin0.5.2 | |
| spki0.7.3 | |
| static_assertions1.1.0 | |
| strsim0.11.1 | |
| strum0.24.0 | |
| subtle2.6.1 | |
| sync_wrapper1.0.2 | |
| target-lexicon0.13.5 | |
| tempfile3.18.0 | |
| thiserror1.0.50 | |
| thiserror2.0.18 | |
| thread_local1.1.4 | |
| threadpool1.8.1 | |
| time0.3.47 | |
| time-core0.1.8 | |
| tokio1.47.1 | |
| tokio-stream0.1.17 | |
| tokio-util0.7.18 | |
| tonic0.14.6 | |
| tonic-prost0.14.6 | |
| tonic-types0.14.6 | |
| tower0.5.2 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-appender0.2.3 | |
| tracing-core0.1.36 | |
| tracing-log0.2.0 | |
| tracing-opentelemetry0.33.0 | |
| tracing-subscriber0.3.23 | |
| try-lock0.2.3 | |
| typenum1.15.0 | |
| uint0.9.5 | |
| unsafe-libyaml0.2.10 | |
| untrusted0.7.1 | |
| utf8parse0.2.1 | |
| want0.3.0 | |
| wasm-encoder0.236.0 | |
| wasmparser0.228.0 | |
| wasmparser0.236.1 | |
| wasmparser0.248.0 | |
| wasmtime45.0.0 | |
| wasmtime-environ45.0.0 | |
| wasmtime-internal-core45.0.0 | |
| wasmtime-internal-cranelift45.0.0 | |
| wasmtime-internal-jit-icache-coherence45.0.0 | |
| wasmtime-internal-unwinder45.0.0 | |
| wasmtime-internal-winch45.0.0 | |
| winch-codegen45.0.0 | |
| zerocopy0.8.23 | |
| zeroize1.8.2 | |
| zeropool-bn0.5.11 | |
| addr2line0.24.2 | |
| adler22.0.0 | |
| backtrace0.3.75 | |
| bitvec1.0.1 | |
| dissimilar1.0.4 | |
| funty2.0.0 | |
| gimli0.31.1 | |
| miniz_oxide0.8.5 | |
| object0.36.5 | |
| radium0.7.0 | |
| rustc-demangle0.1.24 | |
| rustc-hex2.1.0 | |
| tap1.0.1 | |
| termcolor1.4.1 | |
| wasm-encoder0.248.0 | |
| wasmprinter0.248.0 | |
| wyz0.5.1 | |
| addr2line0.26.1 | |
| ahash0.8.11 | |
| aho-corasick1.1.3 | |
| android-tzdata0.1.1 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.6 | |
| ark-bls12-3810.4.0 | |
| ark-ec0.4.2 | |
| ark-ff0.4.2 | |
| ark-ff-asm0.4.2 | |
| ark-ff-macros0.4.2 | |
| ark-poly0.4.2 | |
| ark-serialize0.4.2 | |
| ark-serialize-derive0.4.2 | |
| ark-std0.4.0 | |
| assert_matches1.5.0 | |
| async-trait0.1.89 | |
| autocfg1.1.0 | |
| base64ct1.8.0 | |
| bolero0.10.1 | |
| bolero-afl0.10.0 | |
| bolero-engine0.10.2 | |
| bolero-generator0.10.2 | |
| bolero-generator-derive0.10.0 | |
| bolero-honggfuzz0.10.0 | |
| bolero-kani0.10.0 | |
| bolero-libfuzzer0.10.0 | |
| borsh-derive1.5.3 | |
| cc1.2.57 | |
| cfg_aliases0.2.1 | |
| chrono0.4.41 | |
| clap_derive4.5.18 | |
| cmake0.1.57 | |
| core-foundation-sys0.8.7 | |
| cov-mark2.0.0-pre.1 | |
| cpp_demangle0.4.5 | |
| cranelift-assembler-x64-meta0.132.0 | |
| cranelift-codegen-meta0.132.0 | |
| cranelift-isle0.132.0 | |
| cranelift-srcgen0.132.0 | |
| csv1.2.1 | |
| csv-core0.1.10 | |
| curve25519-dalek-derive0.1.1 | |
| darling0.20.10 | |
| darling_core0.20.10 | |
| darling_macro0.20.10 | |
| derivative2.2.0 | |
| derive_arbitrary1.4.1 | |
| derive_more-impl2.0.1 | |
| dunce1.0.5 | |
| embedded-io0.4.0 | |
| embedded-io0.6.1 | |
| enum-map-derive0.17.0 | |
| errno0.3.10 | |
| expect-test1.3.0 | |
| fiat-crypto0.2.5 | |
| find-msvc-tools0.1.9 | |
| flagset0.4.3 | |
| fs_extra1.3.0 | |
| futures-macro0.3.31 | |
| glob0.3.1 | |
| hashbrown0.12.3 | |
| hashbrown0.13.2 | |
| heck0.4.0 | |
| heck0.5.0 | |
| hermit-abi0.1.19 | |
| iana-time-zone0.1.61 | |
| iana-time-zone-haiku0.1.2 | |
| ident_case1.0.1 | |
| indexmap1.9.2 | |
| io-uring0.7.10 | |
| itertools0.10.5 | |
| jobserver0.1.32 | |
| js-sys0.3.77 | |
| leb1280.2.5 | |
| mach20.4.2 | |
| near-schema-checker-macro0.38.0-rc.4 | |
| num-bigint0.4.6 | |
| paste1.0.7 | |
| pin-project-internal1.1.5 | |
| pkcs80.10.2 | |
| portable-atomic1.10.0 | |
| pretty-hex0.3.0 | |
| proc-macro-crate1.3.1 | |
| proc-macro-crate3.2.0 | |
| proc-macro21.0.101 | |
| prost-derive0.14.4 | |
| pulley-macros45.0.0 | |
| quote1.0.45 | |
| redox_syscall0.5.13 | |
| rustc_version0.4.0 | |
| rustversion1.0.15 | |
| serde_derive1.0.228 | |
| serde_repr0.1.19 | |
| serde_with_macros3.0.0 | |
| shlex1.3.0 | |
| stable_deref_trait1.2.0 | |
| strum_macros0.24.0 | |
| syn1.0.103 | |
| syn2.0.106 | |
| thiserror-impl1.0.50 | |
| thiserror-impl2.0.18 | |
| time-macros0.2.27 | |
| toml_datetime0.6.8 | |
| toml_edit0.19.15 | |
| toml_edit0.22.22 | |
| tracing-attributes0.1.31 | |
| unicode-ident1.0.5 | |
| unicode-width0.1.9 | |
| unicode-xid0.2.6 | |
| valuable0.1.0 | |
| version_check0.9.4 | |
| wasi0.11.0+wasi-snapshot-preview1 | |
| wasi0.13.3+wasi-0.2.2 | |
| wasm-bindgen0.2.100 | |
| wasm-bindgen-backend0.2.100 | |
| wasm-bindgen-macro0.2.100 | |
| wasm-bindgen-macro-support0.2.100 | |
| wasm-bindgen-shared0.2.100 | |
| wasm-smith0.236.0 | |
| wasmprinter0.236.1 | |
| wasmtime-internal-fiber45.0.0 | |
| wasmtime-internal-jit-debug45.0.0 | |
| wasmtime-internal-versioned-export-macros45.0.0 | |
| wast40.0.0 | |
| wat1.0.42 | |
| web-time1.1.0 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-util0.1.5 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows-core0.52.0 | |
| windows-link0.1.3 | |
| windows-link0.2.1 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.52.6 | |
| winnow0.5.15 | |
| winnow0.6.20 | |
| wit-bindgen-rt0.33.0 | |
| zerocopy0.7.31 | |
| zerocopy-derive0.7.31 | |
| zerocopy-derive0.8.23 | |
| zeroize_derive1.4.2 |
| Vulnerabilities7 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0222 | wasmtime | 45.0.0 | >=46.0.2 | high | Stores can mix up type indices between engines | retained |
| RUSTSEC-2026-0269 | wasmtime | 45.0.0 | >=46.0.3 | high | Filesystem sandbox escape when paths or symlinks contain trailing slashes | retained |
| RUSTSEC-2026-0316 | wasmtime | 45.0.0 | >=48.0.3 | high | Dynamic record lifting can allocate beyond the hostcall fuel limit | retained |
| RUSTSEC-2026-0327 | wasmtime | 45.0.0 | >=48.0.4 | high | Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow | retained |
| GHSA-7gcf-g7xr-8hxj | serde_with | 3.0.0 | >=3.21.0 | medium | serde_with: KeyValueMap serialization panics on empty sequence or map entries | retained |
| GHSA-cq8v-f236-94qc | rand | 0.8.5, 0.9.0 | >=0.8.6 | low | Rand is unsound with a custom logger using rand::rng() | retained |
| RUSTSEC-2024-0449 | unsafe-libyaml | 0.2.10 | none published | low | unsafe-libyaml is unmaintained | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run fa29e561-a10c-4ae5-b936-f090d2f0acb9
analysis 0.1.0 · 2026-10-14 · afb437c · graph v2