Skip to content
Open-Source Registry

cargo / nosman / 0.25.5

nosman 0.25.5

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections13 vulnerabilities
processes
1,006
operations
154K
packages
631
compiler runs
1,359
connections
2
job time
9m 23s
capture
2.0 MB
records
276K
bytes / record
7.3

Build behaviourits build script reached nodos.devundeclared fetchfetch went into the outputlinked a downloaded binaryfetched outside crates.iocompiled C/C++

run 90b7020e-c35f-46fc-9fd2-3ba17c4fcd9b · built 2026-10-16 · complete

Graph

egress · high · in libnosman.rlib
4

Checks

9 of 14 clear Network activity Data flow analysis +3 more
Build behavior▲✓✓✓✓▲✓✓
Supply chain▲▲▲✓✓
Pipeline✓

Detections

2
  • Build script fetched what the build compiled, linked or ran
    nosman 0.25.5 › nodos.dev:443
    high
  • Downloaded file compiled into the artifact
    eula.txt › nodos.dev
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
nosman 0.25.5
Destination
nodos.dev:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to nodos.dev:443, opened by build-script-build

    subject nodos.dev:443

    by /home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build

  2. What a build script's fetch becamesupport

    1 file came down; the build compiled or linked eula.txt

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build

In libnosman.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2461
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2461
  3. build-script-build/home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build7848

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/workspace/workspace/target/release/build/nosman-51bde82540b622dc/out/eula.txtwritten by build-script-build
Destination
nodos.dev
Jobs
build-test
Rule
object-provenance · workspace

Witness chain

  1. /home/runner/work/workspace/workspace/target/release/build/nosman-51bde82540b622dc/out/eula.txtvia /home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build
    • Object written under a build script that downloadedfrom nodos.dev

      written under the build script at /home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build, which downloaded from nodos.dev

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact
  3. member
    artifact

Evidence

  • written under the build script at /home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build, which downloaded from nodos.dev
  • Written by build-script-build from a network connection without a recorded source compilation

In libnosman.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast7937
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast7937
  3. build-script-build/home/runner/work/workspace/workspace/target/release/build/nosman-5650628f94d39585/build-script-build10894

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

2 peers
  • nodos.dev:443 nosman's own build code · build-script-build · Amazon.com, Inc. · 1 file · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (workspace) via crates.io · 36,693 files · went into an output ecosystem
Dependencies684Build behaviour
ab_glyph0.2.32
ab_glyph_rasterizer0.1.10
aes0.8.4
aes0.9.3
ahash0.8.12build script
aho-corasick1.1.4
aligned0.4.3
aligned-vec0.6.4
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.102build script
ar_archive_writer0.5.1
arg_enum_proc_macro0.3.4proc macro
arrayref0.3.9
arrayvec0.7.8
as-raw-xcb-connection1.0.1
as-slice0.2.1
ascii1.1.0
async-channel2.5.0
async-executor1.14.0
async-fs2.2.0
async-io2.6.0build script
async-lock3.4.2
async-net2.0.0
async-process2.5.0
async-signal0.2.14
async-task4.7.1
atomic-waker1.1.2
av-scenechange0.14.1build script
av1-grain0.2.5
avif-serialize0.8.9
base640.22.1
base640.23.1
bit_field0.10.3
bitflags2.11.0
bitstream-io4.10.0
block-buffer0.10.4
block-buffer0.12.1
block-padding0.4.2
blocking1.7.0
bstr1.12.1
built0.8.1
bumpalo3.20.2
bytemuck1.25.2
bytemuck_derive1.12.1proc macro
byteorder1.5.0
byteorder-lite0.1.0
bytes1.11.1
bzip20.5.2
bzip20.6.1
bzip2-sys0.1.13+1.0.8build script
calloop0.13.0
calloop0.14.4
calloop-wayland-source0.3.0
calloop-wayland-source0.4.1
cbc0.2.1
cc1.2.58
cfg-if1.0.4
chrono0.4.44
cipher0.4.4
cipher0.5.2
clap4.6.0
clap_builder4.6.0
clap_lex1.1.0
clipboard_wayland0.2.2
clipboard_x110.4.3
color_quant1.1.0
colorchoice1.0.5
colored3.1.1
concurrent-queue2.5.0
console0.16.3
const-oid0.10.2
constant_time_eq0.3.1
convert_case0.10.0
core_maths0.1.1
cosmic-text0.15.0
cpubits0.1.1
cpufeatures0.2.17
cpufeatures0.3.1
crc3.4.0
crc-catalog2.4.0
crc32fast1.5.0build script
crossbeam-deque0.8.6
crossbeam-epoch0.9.18
crossbeam-utils0.8.21build script
crossterm0.29.0
crypto-common0.1.7
crypto-common0.2.2
ctor0.10.1
ctrlc3.5.2
cursor-icon1.2.0
deflate640.1.12
deranged0.5.8
derive_more2.1.1
derive_more-impl2.1.1proc macro
digest0.10.7
digest0.11.3
dirs6.0.0
dirs-sys0.5.0
displaydoc0.2.5proc macro
dlib0.5.3
document-features0.2.12proc macro
downcast-rs1.2.1
dpi0.1.2
dunce1.0.5
dyn-clone1.0.20
either1.15.0
enum-iterator1.5.0
enum-iterator-derive1.5.0proc macro
env_home0.1.0
equator0.4.2
equator-macro0.4.2proc macro
equivalent1.0.2
errno0.3.14
event-listener5.4.2
event-listener-strategy0.5.4
exr1.74.2
fastrand2.3.0
fax0.2.7
fdeflate0.3.7
filetime0.2.27
find-msvc-tools0.1.9
flate21.1.9
font-types0.10.1
font-types0.12.5
fontconfig-parser0.5.8
fontdb0.23.0
form_urlencoded1.2.2
formatx0.2.4
fs-more0.8.1
futures0.3.32
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-io0.3.32
futures-lite2.6.1
futures-macro0.3.32proc macro
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
fuzzy-matcher0.3.7
generic-array0.14.7build script
gethostname1.1.0
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.2build script
getset0.1.7proc macro
gif0.14.2
glam0.25.0
globset0.4.18
globwalk0.9.1
half2.7.1
harfrust0.3.2
hashbrown0.16.1
hmac0.12.1
hostname0.4.2
http1.4.0
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
hybrid-array0.4.10
hyper1.8.1
hyper-rustls0.27.7
hyper-util0.1.20
iana-time-zone0.1.65
iced0.14.0
iced_core0.14.0
iced_debug0.14.0
iced_futures0.14.0
iced_graphics0.14.0
iced_program0.14.0
iced_renderer0.14.0
iced_runtime0.14.0
iced_tiny_skia0.14.1
iced_widget0.14.2
iced_winit0.14.1
icu_collections2.1.1
icu_locale_core2.1.1
icu_normalizer2.1.1
icu_normalizer_data2.1.1build script
icu_properties2.1.2
icu_properties_data2.1.2build script
icu_provider2.1.1
idna1.1.0
idna_adapter1.2.1
ignore0.4.25
image0.25.10
image-webp0.2.4
imgref1.12.3
include_dir0.7.4
include_dir_macros0.7.4proc macro
indexmap2.13.0
indicatif0.18.4
inout0.1.4
inout0.2.2
inquire0.9.4
ipnet2.12.0
iri-string0.7.12
is_terminal_polyfill1.70.2
itertools0.14.0
itoa1.0.18
jobserver0.1.34
kamadak-exif0.6.1
kurbo0.10.4
ld-linux-x86-64.so.2system library
lebe0.5.3
libbz2-rs-sys0.2.2
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.9
libloading0.9.0
liblzma.so.5system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
lilt0.8.2
linebender_resource_handle0.1.1
linked-hash-map0.5.6
linked_hash_set0.1.6
linux-raw-sys0.12.1
linux-raw-sys0.4.15
litemap0.8.1
litrs1.0.0
lock_api0.4.14
log0.4.29
loop90.1.5
lzma-rs0.3.0
lzma-rust20.13.0
lzma-rust20.19.0
lzma-sys0.1.20build script
maybe-rayon0.1.1
memchr2.8.0
memmap20.9.11
miniz_oxide0.8.9
mio1.2.0
moxcms0.8.1
mutate_once0.1.2
native-dialog0.9.6
nix0.31.3build script
nodos-store-client0.13.0
nom8.0.0
noop_proc_macro0.3.0proc macro
num-bigint0.4.8
num-complex0.4.6
num-conv0.2.1
num-derive0.4.2proc macro
num-integer0.1.47
num-rational0.4.2
num-traits0.2.19build script
object0.37.3build script
once_cell1.21.4
option-ext0.2.0
owned_ttf_parser0.25.1
parking2.2.1
parking_lot0.12.5
parking_lot_core0.9.12build script
paste1.0.15build scriptproc macro
pastey0.1.1proc macro
pathdiff0.2.3
pbkdf20.12.2
percent-encoding2.3.2
phf0.13.1
phf_generator0.13.1
phf_macros0.13.1proc macro
phf_shared0.13.1
pin-project-lite0.2.17
pin-utils0.1.0
piper0.2.5
pkg-config0.3.32
png0.18.1
polling3.11.0
portable-atomic1.13.1build script
potential_utf0.1.4
powerfmt0.2.0
ppmd-rust1.4.0
proc-macro21.0.106build script
profiling1.0.18
profiling-procmacros1.0.18proc macro
psm0.1.30build scriptprebuilt objects
pulp0.22.3build script
pxfm0.1.30
qoi0.4.1
quick-error2.0.1
quick-xml0.41.0
quote1.0.45build script
rangemap1.8.0
rav1e0.8.1build script
ravif0.13.0
raw-window-handle0.6.2
rayon1.11.0
rayon-core1.13.0build script
read-fonts0.35.0
read-fonts0.41.0
regex-automata0.4.14
regex-syntax0.8.10
reqwest0.12.28
rgb0.8.53
ring0.17.14build scriptprebuilt objects
rm_rf0.6.2
roxmltree0.20.0
rustc-hash1.1.0
rustc-hash2.1.2
rustix0.38.44build script
rustix1.1.4build script
rustls0.23.37build script
rustls-pki-types1.14.0
rustls-webpki0.103.10
ryu1.0.23
same-file1.0.6
scoped-tls1.0.1
scopeguard1.2.0
sctk-adwaita0.10.1
self-replace1.5.0
self_cell1.3.0
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.149build script
serde_urlencoded0.7.1
serde_yaml_ng0.10.0
setup-wizard0.3.0
sevenfold0.1.2
sevenz-rust20.21.6
sha10.10.6
sha20.10.9
sha20.11.0
shlex1.3.0
signal-hook0.3.18build script
signal-hook-mio0.2.5
signal-hook-registry1.4.8
simd-adler320.3.9
simd_helpers0.1.0proc macro
siphasher1.0.2
skrifa0.37.0
skrifa0.44.0
slab0.4.12
slotmap1.1.1build script
smallvec1.15.1
smithay-client-toolkit0.19.2build script
smithay-client-toolkit0.20.0build script
smithay-clipboard0.7.3
smol2.0.2
smol_str0.2.2
socket20.6.3
softbuffer0.4.8
stable_deref_trait1.2.1
stacker0.1.23build script
strict-num0.1.1
strsim0.11.1
subtle2.6.1
swash0.2.10
syn2.0.117
syn3.0.6
sync_wrapper1.0.2
synstructure0.13.2
sys-locale0.3.2
sysinfo0.37.2
tar0.4.45
tempfile3.27.0
thiserror1.0.69build script
thiserror2.0.18build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.18proc macro
thread_local1.1.9
tiff0.11.3
time0.3.47
time-core0.1.8
tiny-skia0.11.4
tiny-skia-path0.11.4
tiny-xlib0.2.5build script
tinystr0.8.2
tinyvec1.11.0
tinyvec_macros0.1.1
tokio1.50.0
tokio-rustls0.26.4
tower0.5.3
tower-http0.6.8
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
try-lock0.2.5
ttf-parser0.25.1
typenum1.19.0build script
unicode-bidi0.3.18
unicode-ident1.0.24
unicode-linebreak0.1.5
unicode-script0.5.8
unicode-segmentation1.13.2
unicode-width0.2.2
unit-prefix0.5.2
unsafe-libyaml0.2.11
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
url2.5.8
utf8-zero0.8.1
utf8_iter1.0.4
utf8parse0.2.2
v_frame0.3.9
vergen7.5.1build script
version_check0.9.5
versions7.0.0
wait-timeout0.2.1
walkdir2.5.0
want0.3.1
wayland-backend0.3.17build script
wayland-client0.31.15build script
wayland-csd-frame0.3.0
wayland-cursor0.31.14
wayland-protocols0.32.13
wayland-protocols-experimental20250721.0.1
wayland-protocols-misc0.3.12
wayland-protocols-plasma0.3.12
wayland-protocols-wlr0.3.12
wayland-scanner0.31.11proc macro
wayland-sys0.31.11build script
web-time1.1.0
webpki-roots1.0.6
weezl0.1.12
which7.0.3
window_clipboard0.5.1
winit0.30.13build script
writeable0.6.2
x11-dl2.21.0build script
x11rb0.13.2
x11rb-protocol0.13.2
xattr1.6.1
xcursor0.3.11
xkbcommon-dl0.4.2
xkeysym0.2.1
xz20.1.7
y4m0.8.0
yazi0.2.1
yoke0.8.1
yoke-derive0.8.1proc macro
zeno0.3.3
zerocopy0.8.48build script
zerocopy-derive0.8.48proc macro
zerofrom0.1.6
zerofrom-derive0.1.6proc macro
zeroize1.8.2
zeroize_derive1.4.3proc macro
zerotrie0.2.3
zerovec0.11.5
zerovec-derive0.11.2proc macro
zip2.4.2build script
zip6.0.0
zlib-rs0.6.3
zmij1.0.21build script
zopfli0.8.3
zstd0.13.3
zstd-safe7.2.4build script
zstd-sys2.0.16+zstd.1.5.7build script
zune-core0.5.3
zune-inflate0.2.54
zune-jpeg0.5.15
adler22.0.1
chunked_transfer1.5.0
httpdate1.0.3
new_debug_unreachable1.0.6
no_std_io20.9.4
pulp-wasm-simd-flag0.1.1
raw-cpuid11.6.0
reborrow0.5.5
tiny_http0.12.0
alloca0.4.0build script
android-activity0.6.1build script, not run
android-properties0.2.2
android_system_properties0.1.5
anes0.1.6
anstyle-wincon3.0.11
arbitrary1.4.2
autocfg1.5.0
bit-set0.8.0
bit-vec0.8.0
bitflags1.3.2
block20.5.1
block20.6.2
cast0.3.0
cfg_aliases0.2.1
ciborium0.2.2
ciborium-io0.2.2
ciborium-ll0.2.2
clipboard-win5.4.1
clipboard_macos0.1.1
codespan-reporting0.12.0
combine4.6.8
core-foundation0.9.4
core-foundation-sys0.8.7
core-graphics0.23.2
core-graphics-types0.1.3
criterion0.8.2
criterion-plot0.8.2
crossterm_winapi0.9.1
crunchy0.2.4build script, not run
cryoglyph0.1.0
ctor0.6.3
ctor-proc-macro0.0.7proc macro
derive_arbitrary1.4.2proc macro
dispatch0.2.0
dispatch20.3.1
dtor0.1.1
dtor0.8.1
dtor-proc-macro0.0.6proc macro
encode_unicode1.0.0
env_filter1.0.1
env_logger0.11.10
error-code3.4.0
etagere0.2.15
euclid0.22.14
foldhash0.1.5
foldhash0.2.0
foreign-types0.5.0
foreign-types-macros0.2.4proc macro
foreign-types-shared0.3.1
guillotiere0.6.2
hashbrown0.15.5
heck0.5.0
hermit-abi0.5.3
hexf-parse0.2.1
iana-time-zone-haiku0.1.2build script, not run
iced_wgpu0.14.0
id-arena2.3.0
interpolate_name0.2.4proc macro
itertools0.13.0
jiff0.2.23
jiff-static0.2.23proc macro
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys0.3.1build script, not run
jni-sys0.4.1
jni-sys-macros0.4.1proc macro
js-sys0.3.93
leb128fmt0.1.0
libfuzzer-sys0.4.13build script, not run
libredox0.1.15
lru0.16.4
lru-slab0.1.2
naga27.0.3build script, not run
ndk0.9.0
ndk-context0.1.1
ndk-sys0.6.0+11769913
ntapi0.4.3build script, not run
num_enum0.7.6
num_enum_derive0.7.6proc macro
objc-sys0.3.5build script, not run
objc20.5.2
objc20.6.4build script, not run
objc2-app-kit0.2.2
objc2-app-kit0.3.2
objc2-cloud-kit0.2.2
objc2-contacts0.2.2
objc2-core-data0.2.2
objc2-core-foundation0.3.2
objc2-core-graphics0.3.2
objc2-core-image0.2.2
objc2-core-location0.2.2
objc2-encode4.1.0
objc2-foundation0.2.2
objc2-foundation0.3.2
objc2-io-kit0.3.2
objc2-io-surface0.3.2
objc2-link-presentation0.2.2
objc2-metal0.2.2
objc2-quartz-core0.2.2
objc2-quartz-core0.3.2
objc2-symbols0.2.2
objc2-ui-kit0.2.2
objc2-uniform-type-identifiers0.2.2
objc2-user-notifications0.2.2
once_cell_polyfill1.70.2
oorandom11.1.5
orbclient0.3.55build script, not run
page_size0.6.0
pin-project1.1.13
pin-project-internal1.1.13proc macro
plain0.2.3
plotters0.3.7
plotters-backend0.3.7
plotters-svg0.3.7
portable-atomic-util0.2.6build script, not run
ppv-lite860.2.21
prettyplease0.2.37build script, not run
proc-macro-crate3.5.0
quinn0.11.9build script, not run
quinn-proto0.11.14
quinn-udp0.5.14build script, not run
r-efi5.3.0
r-efi6.0.0
rand0.9.2
rand_chacha0.9.0
rand_core0.9.5
redox_syscall0.4.1
redox_syscall0.5.18
redox_syscall0.7.3
redox_users0.5.2
regex1.12.3
renderdoc-sys1.1.0
rustc_version0.4.1
rustversion1.0.22build scriptproc macro
semver1.0.27
serde_spanned1.1.1
simd_cesu81.2.0
simdutf80.1.5
static_assertions1.1.0
svg_fmt0.4.5
time-macros0.2.27proc macro
tinytemplate1.2.1
toml1.1.6+spec-1.1.0
toml_datetime1.1.1+spec-1.1.0
toml_edit0.25.15+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
unicode-xid0.2.6
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.2+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen0.2.116build script, not run
wasm-bindgen-futures0.4.66
wasm-bindgen-macro0.2.116proc macro
wasm-bindgen-macro-support0.2.116
wasm-bindgen-shared0.2.116build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasmparser0.244.0
wasmtimer0.4.3
web-sys0.3.93
wfd0.1.8
wgpu27.0.1build script, not run
wgpu-core27.0.3build script, not run
wgpu-core-deps-windows-linux-android27.0.0
wgpu-hal27.0.4build script, not run
wgpu-types27.0.1
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows0.61.3
windows0.62.2
windows-collections0.2.0
windows-collections0.3.2
windows-core0.61.2
windows-core0.62.2
windows-future0.2.1
windows-future0.3.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.1.3
windows-link0.2.1
windows-numerics0.2.0
windows-numerics0.3.1
windows-result0.3.4
windows-result0.4.1
windows-strings0.4.2
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows-threading0.1.0
windows-threading0.2.1
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wininskit0.1.2
winnow1.0.4
winresource0.1.31
winsafe0.0.19
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
Vulnerabilities13PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0204crossbeam-epoch0.9.18>=0.9.20highInvalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalidretained
RUSTSEC-2026-0346rustls0.23.37>=0.23.46high`Debug` impls for client session values expose TLS secretsretained
RUSTSEC-2026-0348rustls0.23.37>=0.23.46highBrotli certificate decompression can allocate up to 1 GiB before authenticationretained
RUSTSEC-2026-0349rustls0.23.37>=0.23.46highUnauthenticated ServerHello can downgrade later connections to classical key exchangeretained
CVE-2026-93599rustls-webpki0.103.10>=0.103.13highrustls-webpki: Denial of service via panic on malformed CRL BIT STRINGretained
GHSA-2mjx-qc3c-rqvcrustls0.23.37>=0.23.45mediumRustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesretained
GHSA-3pv8-6f4r-ffg2tar0.4.45>=0.4.46mediumtar has a PAX header desynchronization issueretained
RUSTSEC-2026-0190anyhow1.0.102>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
RUSTSEC-2024-0436paste1.0.15none publishedlowpaste - no longer maintainedretained
CVE-2026-93600rustls-webpki0.103.10>=0.103.12lowwebpki: Name constraints for URI names were incorrectly acceptedretained
CVE-2026-93601rustls-webpki0.103.10>=0.103.12lowwebpki: Name constraints were accepted for certificates asserting a wildcard nameretained
RUSTSEC-2026-0192ttf-parser0.25.1none publishedlow`ttf-parser` is unmaintainedretained
RUSTSEC-2024-0449unsafe-libyaml0.2.11none publishedlowunsafe-libyaml is unmaintainedretained

Raw data

capture
2.0 MB
records
275,802
bytes per record
7.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 90b7020e-c35f-46fc-9fd2-3ba17c4fcd9b

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2