Artifact
- qrustcpbinary · retained · product 7
Checks
12 of 14 clear Known vulnerabilities Dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 39K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies215 | Build behaviour |
|---|---|
| aes0.8.4 | |
| anstream0.6.21 | |
| anstyle1.0.13 | |
| anstyle-parse0.2.7 | |
| anstyle-query1.1.4 | |
| anyhow1.0.100 | |
| atomic-waker1.1.2 | |
| axum0.7.9 | |
| axum-core0.4.5 | |
| bitflags2.9.4 | |
| block-buffer0.10.4 | |
| bumpalo3.19.0 | |
| bytemuck1.24.0 | |
| byteorder1.5.0 | |
| byteorder-lite0.1.0 | |
| bytes1.10.1 | |
| bzip20.4.4 | |
| bzip20.6.0 | |
| bzip2-sys0.1.13+1.0.8 | |
| cfg-if1.0.3 | |
| cipher0.4.4 | |
| clap4.5.48 | |
| clap_builder4.5.48 | |
| clap_lex0.7.5 | |
| colorchoice1.0.4 | |
| constant_time_eq0.3.1 | |
| cpufeatures0.2.17 | |
| crc3.3.0 | |
| crc-catalog2.4.0 | |
| crc32fast1.5.0 | |
| crypto-common0.1.6 | |
| deflate640.1.10 | |
| deranged0.5.4 | |
| digest0.10.7 | |
| encoding_rs0.8.35 | |
| equivalent1.0.2 | |
| fastrand2.3.0 | |
| filetime0.2.26 | |
| flate21.1.4 | |
| fnv1.0.7 | |
| form_urlencoded1.2.2 | |
| futures-channel0.3.31 | |
| futures-core0.3.31 | |
| futures-sink0.3.31 | |
| futures-task0.3.31 | |
| futures-util0.3.31 | |
| generic-array0.14.7 | |
| getrandom0.2.16 | |
| getrandom0.3.3 | |
| hashbrown0.16.0 | |
| hmac0.12.1 | |
| http1.3.1 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httparse1.10.1 | |
| httpdate1.0.3 | |
| hyper1.7.0 | |
| hyper-util0.1.17 | |
| image0.25.8 | |
| indexmap2.11.4 | |
| inout0.1.4 | |
| is_terminal_polyfill1.70.1 | |
| itoa1.0.15 | |
| ld-linux-x86-64.so.2 | |
| libbz2-rs-sys0.2.2 | |
| libc0.2.177 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| liblzma.so.5 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libz-rs-sys0.5.2 | |
| linux-raw-sys0.11.0 | |
| local-ip-address0.6.5 | |
| lock_api0.4.14 | |
| log0.4.28 | |
| lzma-rust20.13.0 | |
| lzma-sys0.1.20 | |
| matchit0.7.3 | |
| memchr2.7.6 | |
| mime0.3.17 | |
| mio1.0.4 | |
| moxcms0.7.7 | |
| multer3.1.0 | |
| neli0.6.5 | |
| num-conv0.1.0 | |
| num-traits0.2.19 | |
| once_cell1.21.3 | |
| parking_lot0.12.5 | |
| parking_lot_core0.9.12 | |
| pbkdf20.12.2 | |
| percent-encoding2.3.2 | |
| pin-project-lite0.2.16 | |
| pin-utils0.1.0 | |
| powerfmt0.2.0 | |
| ppmd-rust1.2.1 | |
| ppv-lite860.2.21 | |
| pxfm0.1.25 | |
| qrcode0.14.1 | |
| rand0.8.5 | |
| rand_chacha0.3.1 | |
| rand_core0.6.4 | |
| rustix1.1.2 | |
| ryu1.0.20 | |
| scopeguard1.2.0 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.145 | |
| serde_path_to_error0.1.20 | |
| serde_urlencoded0.7.1 | |
| sha10.10.6 | |
| sha20.10.9 | |
| signal-hook-registry1.4.6 | |
| simd-adler320.3.7 | |
| smallvec1.15.1 | |
| socket20.6.0 | |
| spin0.9.8 | |
| strsim0.11.1 | |
| subtle2.6.1 | |
| sync_wrapper1.0.2 | |
| tar0.4.44 | |
| tempfile3.23.0 | |
| thiserror2.0.17 | |
| time0.3.44 | |
| time-core0.1.6 | |
| tokio1.47.1 | |
| tokio-util0.7.16 | |
| tower0.5.2 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.41 | |
| tracing-core0.1.34 | |
| typenum1.19.0 | |
| utf8parse0.2.2 | |
| xattr1.6.1 | |
| xz20.1.7 | |
| zerocopy0.8.27 | |
| zeroize1.8.2 | |
| zip6.0.0 | |
| zlib-rs0.5.2 | |
| zopfli0.8.2 | |
| zstd0.13.3 | |
| zstd-safe7.2.4 | |
| zstd-sys2.0.16+zstd.1.5.7 | |
| adler22.0.1 | |
| http-range-header0.4.2 | |
| mime_guess2.0.5 | |
| miniz_oxide0.8.9 | |
| tower0.4.13 | |
| tower-http0.5.2 | |
| unicase2.8.1 | |
| addr2line0.25.1 | |
| anstyle-wincon3.0.10 | |
| arbitrary1.4.2 | |
| async-trait0.1.89 | |
| autocfg1.5.0 | |
| backtrace0.3.76 | |
| cc1.2.41 | |
| clap_derive4.5.47 | |
| derive_arbitrary1.4.2 | |
| either1.15.0 | |
| errno0.3.14 | |
| find-msvc-tools0.1.4 | |
| gimli0.32.3 | |
| heck0.5.0 | |
| io-uring0.7.10 | |
| jobserver0.1.34 | |
| libredox0.1.10 | |
| neli-proc-macros0.1.4 | |
| object0.37.3 | |
| once_cell_polyfill1.70.1 | |
| pkg-config0.3.32 | |
| proc-macro21.0.101 | |
| quote1.0.41 | |
| r-efi5.3.0 | |
| redox_syscall0.5.18 | |
| rustc-demangle0.1.26 | |
| rustversion1.0.22 | |
| serde_derive1.0.228 | |
| shlex1.3.0 | |
| slab0.4.11 | |
| syn1.0.109 | |
| syn2.0.106 | |
| thiserror-impl2.0.17 | |
| tokio-macros2.5.0 | |
| unicode-ident1.0.19 | |
| version_check0.9.5 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasi0.14.7+wasi-0.2.4 | |
| wasip21.0.1+wasi-0.2.4 | |
| windows-link0.2.1 | |
| windows-sys0.59.0 | |
| windows-sys0.60.2 | |
| windows-sys0.61.2 | |
| windows-targets0.52.6 | |
| windows-targets0.53.5 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_gnullvm0.53.1 | |
| windows_aarch64_msvc0.52.6 | |
| windows_aarch64_msvc0.53.1 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnu0.53.1 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_gnullvm0.53.1 | |
| windows_i686_msvc0.52.6 | |
| windows_i686_msvc0.53.1 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnu0.53.1 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_gnullvm0.53.1 | |
| windows_x86_64_msvc0.52.6 | |
| windows_x86_64_msvc0.53.1 | |
| wit-bindgen0.46.0 | |
| zerocopy-derive0.8.27 | |
| zeroize_derive1.4.2 |
| Vulnerabilities7 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| CVE-2026-25541 | bytes | 1.10.1 | >=1.11.1 | medium | bytes has integer overflow in BytesMut::reserve | retained |
| CVE-2026-33055 | tar | 0.4.44 | >=0.4.45 | medium | tar-rs incorrectly ignores PAX size headers if header size is nonzero | retained |
| CVE-2026-33056 | tar | 0.4.44 | >=0.4.45 | medium | tar-rs `unpack_in` can chmod arbitrary directories by following symlinks | retained |
| GHSA-3pv8-6f4r-ffg2 | tar | 0.4.44 | >=0.4.46 | medium | tar has a PAX header desynchronization issue | retained |
| CVE-2026-25727 | time | 0.3.44 | >=0.3.47 | medium | time vulnerable to stack exhaustion Denial of Service attack | retained |
| RUSTSEC-2026-0190 | anyhow | 1.0.100 | >=1.0.103 | low | Unsoundness in `Error::downcast_mut()` | retained |
| GHSA-cq8v-f236-94qc | rand | 0.8.5 | >=0.8.6 | low | Rand is unsound with a custom logger using rand::rng() | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run a57b0b22-c22c-43ee-ae94-ee8186348d6d
analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2