Skip to content
Open-Source Registry

cargo / pastry

pastry 0.0.1

processes
519
operations
32K
packages
158
compiler runs
302
connections
1
job time
44s
capture
391 KB
records
57K
bytes / record
6.9

A paste client

30 vulnerabilities

Build behaviourcompiled C/C++

1,670 downloads · MPL-2.0 · published 2021-12-20 · source · cargo

haste paste pastebin upload

Release 0.0.1 run 04dd4451-184b-456c-a5f4-d1554df112c2 · built 2026-10-08

Artifact

binary · retained · product
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 32K flows.

Network

0 peers
    cargo fetched 11,530 files from static.crates.io
    Vulnerable dependencies30PackageVersionFixSeverityTitleReach
    RUSTSEC-2020-0159chrono0.4.19>=0.4.20highPotential segfault in `localtime_r` invocationsretained
    RUSTSEC-2026-0258h20.3.9>=0.4.16highh2 unbounded empty DATA framesretained
    CVE-2024-27308mio0.7.14>=0.8.11highMio's tokens for named pipes may be delivered after deregistrationretained
    CVE-2026-41676openssl0.10.38>=0.10.78highrust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1retained
    CVE-2026-41678openssl0.10.38>=0.10.78highrust-openssl has incorrect bounds assertion in aes key wrapretained
    CVE-2026-41898openssl0.10.38>=0.10.78highrust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peerretained
    CVE-2026-42327openssl0.10.38>=0.10.79highrust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLsretained
    GHSA-6hcf-g6gr-hhcropenssl0.10.38>=0.10.48high`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereferenceretained
    GHSA-9qwg-crg9-m2vcopenssl0.10.38>=0.10.48high`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file readretained
    CVE-2022-24713regex1.5.4>=1.5.5highRust's regex crate vulnerable to regular expression denial of serviceretained
    CVE-2023-26964h20.3.9>=0.3.17mediumh2 vulnerable to denial of serviceretained
    GHSA-8r5v-vm4m-4g25h20.3.9>=0.3.24mediumResource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)retained
    GHSA-q6cp-qfwq-4gcvh20.3.9>=0.3.26mediumh2 servers vulnerable to degradation of service with CONTINUATION Floodretained
    CVE-2024-12224idna0.2.3>=1.0.0medium`idna` accepts Punycode labels that do not produce any non-ASCII when decodedretained
    CVE-2023-53159openssl0.10.38>=0.10.55medium`openssl` `X509VerifyParamRef::set_host` buffer over-readretained
    CVE-2025-24898openssl0.10.38>=0.10.70mediumrust-openssl ssl::select_next_proto use after freeretained
    CVE-2026-44662openssl0.10.38>=0.10.79mediumrust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-paddingretained
    GHSA-3gxf-9r58-2ghgopenssl0.10.38>=0.10.48medium`openssl` `X509NameBuilder::build` returned object is not thread saferetained
    GHSA-q445-7m23-qrmwopenssl0.10.38>=0.10.66mediumopenssl's `MemBio::get_buf` has undefined behavior with empty buffersretained
    GHSA-xphf-cx8h-7q9gopenssl0.10.38>=0.10.60medium`openssl` `X509StoreRef::objects` is unsoundretained
    CVE-2025-4432ring0.16.20>=0.17.12mediumSome AES functions may panic when overflow checking is enabled in ringretained
    CVE-2020-26235time0.1.43>=0.2.23mediumSegmentation fault in timeretained
    CVE-2023-22466tokio1.15.0>=1.18.4mediumTokio reject_remote_clients configuration may get dropped when creating a Windows named piperetained
    GHSA-g98v-hv3f-hcfratty0.2.14none publishedlowatty potential unaligned readretained
    RUSTSEC-2024-0375atty0.2.14none publishedlow`atty` is unmaintainedretained
    RUSTSEC-2024-0384instant0.1.12none publishedlow`instant` is unmaintainedretained
    CVE-2026-41677openssl0.10.38>=0.10.78lowrust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized lengthretained
    RUSTSEC-2025-0010ring0.16.20>=0.17lowVersions of *ring* prior to 0.17 are unmaintained.retained
    GHSA-4q83-7cq4-p6wgtokio1.15.0>=1.18.5low`tokio::io::ReadHalf<T>::unsplit` is Unsoundretained
    GHSA-rr8g-9fpq-6wmgtokio1.15.0>=1.38.2lowTokio broadcast channel calls clone in parallel, but does not require `Sync`retained

    Raw data

    capture
    391 KB
    records
    56,582
    bytes per record
    6.9

    Loading a sample of the capture

    Want to see more? E-mail us at hello@bitbison.io about your use case.

    Dependencies

    159 packages, 25 with a build script that ran, 4 doing more than compiling
    PackageVersionUsageBuild behaviour
    ring direct0.16.20linkedbuild scriptprebuilt objects
    vcpkg0.2.15buildtime_onlyprebuilt objects
    winapi-i686-pc-windows-gnu0.4.0platform_gatedbuild script, not runprebuilt objects
    winapi-x86_64-pc-windows-gnu0.4.0platform_gatedbuild script, not runprebuilt objects
    core-foundation-sys0.8.3platform_gatedbuild script, not run
    doc-comment0.3.3linkedbuild script
    encoding_rs0.8.30linkedbuild script
    futures-channel0.3.19linkedbuild script
    futures-core0.3.19linkedbuild script
    futures-task0.3.19linkedbuild script
    futures-util0.3.19linkedbuild script
    generic-array direct0.14.4linkedbuild script
    httparse1.5.1linkedbuild script
    indexmap1.7.0linkedbuild script
    ld-linux-x86-64.so.2linkedsystem library
    libc0.2.112linkedbuild script
    libc.so.6linkedsystem library
    libcrypto.so.3linkedsystem library
    libgcc_s.so.1linkedsystem library
    libm.so.6linkedsystem library
    libmvec.so.1linkedsystem library
    libssl.so.3linkedsystem library
    log0.4.14linkedbuild script
    memchr2.4.1linkedbuild script
    native-tls0.2.8linkedbuild script
    ntapi0.3.6platform_gatedbuild script, not run
    num-integer0.1.44linkedbuild script
    num-traits0.2.14linkedbuild script
    openssl0.10.38linkedbuild script
    openssl-sys0.9.72linkedbuild script
    parking_lot_core0.8.5linkedbuild script
    proc-macro21.0.34linkedbuild script
    serde direct1.0.132linkedbuild script
    serde_derive1.0.132linkedbuild scriptproc macro
    serde_json direct1.0.73linkedbuild script
    snafu-derive0.6.10linkedproc macro
    syn1.0.82linkedbuild script
    tokio-macros1.7.0linkedproc macro
    typenum direct1.14.0linkedbuild script
    wasm-bindgen0.2.78platform_gatedbuild script, not run
    wasm-bindgen-macro0.2.78buildtime_onlyproc macro
    wasm-bindgen-shared0.2.78buildtime_onlybuild script, not run
    winapi0.3.9platform_gatedbuild script, not run
    adler321.2.0linked
    aead0.4.3linked
    aes0.7.5linked
    aes-gcm direct0.9.4linked
    aho-corasick0.7.18linked
    atty0.2.14linked
    autocfg1.0.1buildtime_only
    base64 direct0.13.0linked
    bitflags1.3.2linked
    bs58 direct0.4.0linked
    bumpalo3.8.0buildtime_only
    bytes1.1.0linked
    cc1.0.72linked
    cfg-if1.0.0linked
    chrono direct0.4.19linked
    chronoutil direct0.2.3linked
    cipher direct0.3.0linked
    clap direct3.0.0-rc.7linked
    core-foundation0.9.2platform_gated
    cpufeatures0.2.1linked
    ctr0.8.0linked
    deflate direct1.0.0linked
    fnv1.0.7linked
    foreign-types0.3.2linked
    foreign-types-shared0.1.1linked
    form_urlencoded1.0.1linked
    futures-sink0.3.19linked
    getrandom0.2.3platform_gated
    ghash0.4.4linked
    h20.3.9linked
    hashbrown0.11.2linked
    hermit-abi0.1.19platform_gated
    http0.2.5linked
    http-body0.4.4linked
    hyper0.14.16linked
    hyper-tls0.5.0linked
    idna0.2.3linked
    instant0.1.12linked
    ipnet2.3.1linked
    is_ci1.1.1linked
    itoa0.4.8linked
    itoa1.0.1linked
    js-sys0.3.55platform_gated
    lazy_static1.4.0linked
    lock_api0.4.5linked
    matches0.1.9linked
    mime0.3.16linked
    mio0.7.14linked
    miow0.3.7platform_gated
    num_cpus1.13.0linked
    once_cell1.9.0linked
    opaque-debug0.3.0linked
    openssl-probe0.1.4linked
    os_str_bytes6.0.0linked
    owo-colors direct3.1.1linked
    parking_lot0.11.2linked
    percent-encoding2.1.0linked
    pin-project-lite0.2.7linked
    pin-utils0.1.0linked
    pkg-config0.3.24buildtime_only
    polyval0.5.3linked
    ppv-lite860.2.15platform_gated
    quote1.0.10linked
    rand0.8.4platform_gated
    rand_chacha0.3.1platform_gated
    rand_core0.6.3platform_gated
    rand_hc0.3.1platform_gated
    redox_syscall0.2.10platform_gated
    regex direct1.5.4linked
    regex-syntax0.6.25linked
    remove_dir_all0.5.3platform_gated
    reqwest direct0.11.7linked
    ryu1.0.9linked
    schannel0.1.19platform_gated
    scopeguard1.1.0linked
    security-framework2.4.2platform_gated
    security-framework-sys2.4.2platform_gated
    serde_urlencoded0.7.0linked
    signal-hook-registry1.4.0linked
    slab0.4.5linked
    smallvec1.7.0linked
    snafu direct0.6.10linked
    socket20.4.2linked
    spin0.5.2linked
    strsim0.10.0linked
    subtle2.4.1linked
    supports-color1.3.0linked
    tempfile3.2.0platform_gated
    termcolor1.1.2linked
    textwrap0.14.2linked
    time0.1.43linked
    tinyvec1.5.1linked
    tinyvec_macros0.1.0linked
    tokio direct1.15.0linked
    tokio-native-tls0.3.0linked
    tokio-util0.6.9linked
    tower-service0.3.1linked
    tracing0.1.29linked
    tracing-core0.1.21linked
    try-lock0.2.3linked
    unicode-bidi0.3.7linked
    unicode-normalization0.1.19linked
    unicode-xid0.2.2linked
    universal-hash0.4.1linked
    untrusted0.7.1linked
    url direct2.2.2linked
    version_check0.9.3buildtime_only
    want0.3.0linked
    wasi0.10.2+wasi-snapshot-preview1platform_gated
    wasm-bindgen-backend0.2.78buildtime_only
    wasm-bindgen-futures0.4.28platform_gated
    wasm-bindgen-macro-support0.2.78buildtime_only
    web-sys0.3.55platform_gated
    winapi-util0.1.5platform_gated
    winreg0.7.0platform_gated
    httpdate1.0.2dead

    1 of 1 jobs captured: build-test success · Generated 2026-10-08 · tarp 0.1.0+20261008010522-g7d82935f3902 · run 04dd4451-184b-456c-a5f4-d1554df112c2