cargo / script

script 0.5.0

processes: 429
operations: 79K
packages: 356
compiler runs: 530
connections: 1
job time: 3m 14s
capture: 924 KB
records: 138K
bytes / record: 6.7

barebones http scripting

34 vulnerabilities Release

Build behaviourcompiled C/C++

13,564 downloads · published 2024-09-03 · source · cargo

Release 0.5.0 run aa8a554b-5884-47a0-93f3-09dec33db449 · built 2026-10-08

Artifact

binary · retained · product

Checks	Detections
Build behavior
✓ Network activity	—
✓ Sensitive data access and transfer	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Data flow analysis	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
▲ Build-time dependency advisories	—
▲ Dependency advisories	—
✓ Declared and observed dependencies	—
✓ Dependency and toolchain versions	—
Pipeline
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 79K flows.

Network

0 peers

cargo fetched 21,709 files from static.crates.io

Vulnerable dependencies32	Package	Version	Fix	Severity	Title	Reach
RUSTSEC-2026-0258	h2	0.3.26	>=0.4.16	high	h2 unbounded empty DATA frames	retained
CVE-2025-11695	mongodb	2.8.2	>=3.2.5	high	MongoDB Rust Driver has certificate validation disabled when `tlsInsecure=False` appears in connection string	retained
CVE-2026-41676	openssl	0.10.66	>=0.10.78	high	rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1	retained
CVE-2026-41678	openssl	0.10.66	>=0.10.78	high	rust-openssl has incorrect bounds assertion in aes key wrap	retained
CVE-2026-41681	openssl	0.10.66	>=0.10.78	high	rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check	retained
CVE-2026-41898	openssl	0.10.66	>=0.10.78	high	rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer	retained
CVE-2026-42327	openssl	0.10.66	>=0.10.79	high	rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs	retained
CVE-2026-93599	rustls-webpki	0.101.7	>=0.103.13	high	rustls-webpki: Denial of service via panic on malformed CRL BIT STRING	retained
CVE-2026-6654	thin-vec	0.2.13	>=0.2.16	high	thin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics	retained
GHSA-xhj4-vrgc-hr34	actix-http	3.9.0	>=3.12.1	medium	actix-http has HTTP/1.1 CL.TE Request Smuggling	retained
CVE-2026-25541	bytes	1.7.1	>=1.11.1	medium	bytes has integer overflow in BytesMut::reserve	retained
CVE-2024-12224	idna	0.2.3, 0.5.0	>=1.0.0	medium	`idna` accepts Punycode labels that do not produce any non-ASCII when decoded	retained
CVE-2025-24898	openssl	0.10.66	>=0.10.70	medium	rust-openssl ssl::select_next_proto use after free	retained
CVE-2026-44662	openssl	0.10.66	>=0.10.79	medium	rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding	retained
CVE-2026-45784	openssl	0.10.66	>=0.10.80	medium	rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers	retained
GHSA-4fcv-w3qc-ppgg	openssl	0.10.66	>=0.10.72	medium	rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`	retained
CVE-2025-4432	ring	0.17.8	>=0.17.12	medium	Some AES functions may panic when overflow checking is enabled in ring	retained
CVE-2026-25727	time	0.3.36	>=0.3.47	medium	time vulnerable to stack exhaustion Denial of Service attack	retained
RUSTSEC-2026-0190	anyhow	1.0.86	>=1.0.103	low	Unsoundness in `Error::downcast_mut()`	retained
RUSTSEC-2025-0052	async-std	1.12.0	none published	low	async-std has been discontinued	retained
RUSTSEC-2025-0141	bincode	1.3.3	none published	low	Bincode is unmaintained	retained
RUSTSEC-2026-0221	event-listener	5.3.1	>=5.4.2	low	`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`	retained
CVE-2026-41677	openssl	0.10.66	>=0.10.78	low	rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length	retained
GHSA-cq8v-f236-94qc	rand	0.8.5	>=0.8.6	low	Rand is unsound with a custom logger using rand::rng()	retained
RUSTSEC-2025-0134	rustls-pemfile	1.0.4	none published	low	rustls-pemfile is unmaintained	retained
CVE-2026-93600	rustls-webpki	0.101.7	>=0.103.12	low	webpki: Name constraints for URI names were incorrectly accepted	retained
CVE-2026-93601	rustls-webpki	0.101.7	>=0.103.12	low	webpki: Name constraints were accepted for certificates asserting a wildcard name	retained
RUSTSEC-2021-0127	serde_cbor	0.11.2	none published	low	serde_cbor is unmaintained	retained
RUSTSEC-2026-0249	smartstring	1.0.1	none published	low	smartstring is unmaintained	retained
GHSA-rr8g-9fpq-6wmg	tokio	1.40.0	>=1.42.1 or >=1.43.1	low	Tokio broadcast channel calls clone in parallel, but does not require `Sync`	retained
CVE-2025-58160	tracing-subscriber	0.3.18	>=0.3.20	low	Tracing logging user input may result in poisoning logs with ANSI escape sequences	retained
RUSTSEC-2024-0320	yaml-rust	0.4.5	none published	low	yaml-rust is unmaintained.	retained

Dependencies

391 packages, 41 with a build script that ran, 20 doing more than compiling

Package	Version	Usage	Build behaviour
ring	0.17.8	linked	build scriptprebuilt objects
rustix	0.37.27	linked	build scriptprebuilt objects
vcpkg	0.2.15	buildtime_only	prebuilt objects
winapi-i686-pc-windows-gnu	0.4.0	platform_gated	build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu	0.4.0	platform_gated	build script, not runprebuilt objects
windows_i686_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
actix-macros	0.2.4	linked	proc macro
actix-web-codegen	4.3.0	linked	proc macro
ahash	0.8.11	linked	build script
anyhow direct	1.0.86	linked	build script
askama_derive	0.12.5	linked	proc macro
async-attributes	1.1.2	linked	proc macro
async-io	1.13.0	linked	build script
async-trait	0.1.81	linked	proc macro
backtrace	0.3.73	platform_gated	build script, not run
const-random-macro	0.1.16	buildtime_only	proc macro
cookie	0.16.2	linked	build script
crossbeam-utils	0.8.20	linked	build script
crunchy	0.2.2	buildtime_only	build script
darling_macro	0.13.4	linked	proc macro
derivative	2.2.0	linked	proc macro
derive_more	0.99.18	linked	proc macro
enum-as-inner	0.4.0	linked	proc macro
futures-macro	0.3.30	linked	proc macro
generic-array	0.14.7	linked	build script
httparse	1.9.4	linked	build script
iana-time-zone-haiku	0.1.2	platform_gated	build script, not run
indexmap	1.9.3	linked	build script
io-lifetimes	1.0.11	linked	build script
ipconfig	0.3.2	platform_gated	build script, not run
ld-linux-x86-64.so.2		linked	system library
libc	0.2.158	linked	build script
libc.so.6		linked	system library
libcrypto.so.3		linked	system library
libgcc_s.so.1		linked	system library
libm	0.2.8	linked	build script
libm.so.6		linked	system library
libmvec.so.1		linked	system library
libssl.so.3		linked	system library
lock_api	0.4.12	linked	build script
mime_guess	2.0.5	linked	build script
native-tls	0.2.12	linked	build script
num-traits	0.2.19	linked	build script
openssl	0.10.66	linked	build script
openssl-macros	0.1.1	linked	proc macro
openssl-sys	0.9.103	linked	build script
parking_lot_core	0.9.10	linked	build script
paste	1.0.15	linked	build scriptproc macro
peg-macros	0.8.4	buildtime_only	proc macro
pest_derive direct	2.7.11	linked	proc macro
polling	2.8.0	linked	build script
proc-macro2	1.0.86	linked	build script
radium	0.7.0	linked	build script
rhai-fs direct	0.1.3	linked	build script
rhai-url direct	0.0.5	linked	build script
rhai_codegen	2.2.0	linked	proc macro
rustc_version_runtime	0.2.1	linked	build script
rustix	0.38.35	linked	build script
rustls	0.21.12	linked	build script
semver	1.0.23	buildtime_only	build script, not run
serde direct	1.0.209	linked	build script
serde_derive	1.0.209	linked	proc macro
serde_json direct	1.0.127	linked	build script
serde_with_macros	1.5.2	linked	proc macro
slab	0.4.9	linked	build script
smartstring direct	1.0.1	linked	build script
syn	1.0.109	linked	build script
system-configuration-sys	0.5.0	platform_gated	build script, not run
thiserror	1.0.63	linked	build script
thiserror-impl	1.0.63	linked	proc macro
time-macros	0.2.18	linked	proc macro
tiny-keccak	2.0.2	buildtime_only	build script
tokio-macros	2.4.0	linked	proc macro
tracing-attributes	0.1.27	linked	proc macro
typed-builder	0.10.0	linked	proc macro
typenum	1.17.0	linked	build script
unicase	2.7.0	linked	build script
valuable	0.1.0	platform_gated	build script, not run
wasm-bindgen	0.2.93	platform_gated	build script, not run
wasm-bindgen-macro	0.2.93	buildtime_only	proc macro
wasm-bindgen-shared	0.2.93	buildtime_only	build script, not run
winapi	0.3.9	platform_gated	build script, not run
zerocopy-derive	0.7.35	linked	proc macro
zstd-safe	7.2.1	linked	build script
zstd-sys	2.0.13+zstd.1.5.6	linked	build script
actix-codec	0.5.2	linked
actix-http	3.9.0	linked
actix-router	0.5.3	linked
actix-rt	2.10.0	linked
actix-server	2.5.0	linked
actix-service	2.0.2	linked
actix-utils	3.0.1	linked
actix-web direct	4.9.0	linked
addr2line	0.22.0	platform_gated
adler	1.0.2	platform_gated
adler2	2.0.0	linked
aho-corasick	1.1.3	linked
alloc-no-stdlib	2.0.4	linked
alloc-stdlib	0.2.2	linked
android-tzdata	0.1.1	platform_gated
android_system_properties	0.1.5	platform_gated
askama direct	0.12.1	linked
askama_escape	0.10.3	linked
askama_parser	0.2.1	linked
async-channel	1.9.0	linked
async-channel	2.3.1	linked
async-executor	1.5.1	linked
async-global-executor	2.3.1	linked
async-io	2.3.4	linked
async-lock	2.8.0	linked
async-lock	3.4.0	linked
async-process	1.8.1	linked
async-signal	0.2.10	linked
async-std	1.12.0	linked
async-std-resolver	0.21.2	linked
async-task	4.7.1	linked
atomic-waker	1.1.2	linked
autocfg	1.3.0	buildtime_only
base64	0.13.1	linked
base64	0.21.7	linked
base64	0.22.1	linked
basic-toml	0.1.9	linked
bincode	1.3.3	linked
bitflags	1.3.2	linked
bitflags	2.6.0	linked
bitvec	1.0.1	linked
block-buffer	0.10.4	linked
blocking	1.6.1	linked
brotli	6.0.0	linked
brotli-decompressor	4.0.1	linked
bson	2.11.0	linked
bumpalo	3.16.0	buildtime_only
byteorder	1.5.0	linked
bytes	1.7.1	linked
bytestring	1.3.1	linked
cc	1.1.15	linked
cfg-if	1.0.0	linked
chrono direct	0.4.38	linked
colored direct	2.1.0	linked
combine	4.6.7	linked
concurrent-queue	2.5.0	linked
const-hex direct	1.12.0	linked
convert_case	0.4.0	linked
core-foundation	0.9.4	platform_gated
core-foundation-sys	0.8.7	platform_gated
cpufeatures	0.2.13	linked
crc32fast	1.4.2	linked
crypto-common	0.1.6	linked
darling	0.13.4	linked
darling_core	0.13.4	linked
dashmap direct	6.0.1	linked
data-encoding	2.6.0	linked
deranged	0.3.11	linked
digest	0.10.7	linked
encoding_rs	0.8.34	linked
equivalent	1.0.1	linked
errno	0.3.9	platform_gated
event-listener	2.5.3	linked
event-listener	3.1.0	linked
event-listener	5.3.1	linked
event-listener-strategy	0.5.2	linked
fastrand	1.9.0	linked
fastrand	2.1.1	linked
flate2	1.0.33	linked
fnv	1.0.7	linked
foreign-types	0.3.2	linked
foreign-types-shared	0.1.1	linked
form_urlencoded	1.2.1	linked
funty	2.0.0	linked
futures direct	0.3.30	linked
futures-channel	0.3.30	linked
futures-core	0.3.30	linked
futures-executor	0.3.30	linked
futures-io	0.3.30	linked
futures-lite	1.13.0	linked
futures-lite	2.3.0	linked
futures-sink	0.3.30	linked
futures-task	0.3.30	linked
futures-util	0.3.30	linked
gethostname	0.2.3	linked
getrandom	0.2.15	linked
gimli	0.29.0	platform_gated
global_placeholders direct	0.1.0	linked
gloo-timers	0.2.6	platform_gated
h2	0.3.26	linked
half	1.8.3	linked
hashbrown	0.12.3	linked
hashbrown	0.14.5	linked
heck	0.4.1	linked
hex	0.4.3	linked
hmac	0.12.1	linked
hostname	0.3.1	linked
http	0.2.12	linked
http-body	0.4.6	linked
httpdate	1.0.3	linked
humansize	2.1.3	linked
hyper	0.14.30	linked
hyper-tls	0.5.0	linked
iana-time-zone	0.1.60	linked
ident_case	1.0.1	linked
idna	0.2.3	linked
idna	0.5.0	linked
impl-more	0.1.6	linked
indexmap	2.5.0	linked
instant	0.1.13	platform_gated
ipnet	2.9.0	linked
itoa	1.0.11	linked
jobserver	0.1.32	linked
js-sys	0.3.70	platform_gated
kv-log-macro	1.0.7	linked
language-tags	0.3.2	linked
lazy_static	1.5.0	linked
linked-hash-map	0.5.6	linked
linux-raw-sys	0.3.8	linked
linux-raw-sys	0.4.14	linked
local-channel	0.1.5	linked
local-waker	0.1.4	linked
log	0.4.22	linked
lru-cache	0.1.2	linked
macros-rs direct	1.2.5	linked
match_cfg	0.1.0	linked
matchers	0.1.0	linked
matches	0.1.10	linked
md-5 direct	0.10.6	linked
memchr	2.7.4	linked
mime direct	0.3.17	linked
minimal-lexical	0.2.1	buildtime_only
miniz_oxide	0.8.0	linked
mio	1.0.2	linked
mongodb direct	2.8.2	linked
nom	7.1.3	linked
nu-ansi-term	0.46.0	linked
num-conv	0.1.0	linked
object	0.36.4	platform_gated
once_cell	1.19.0	linked
openssl-probe	0.1.5	linked
overload	0.1.1	linked
parking	2.2.0	linked
parking_lot	0.12.3	linked
pbkdf2	0.11.0	linked
peg-runtime	0.8.3	unknown
percent-encoding	2.3.1	linked
pest direct	2.7.11	linked
pest_generator	2.7.11	linked
pest_meta	2.7.11	linked
pickledb direct	0.5.1	linked
pin-project-lite	0.2.14	linked
pin-utils	0.1.0	linked
piper	0.2.4	linked
pkg-config	0.3.30	linked
polling	3.7.3	linked
powerfmt	0.2.0	linked
ppv-lite86	0.2.20	linked
proptest	1.5.0	feature_gated
quick-error	1.2.3	linked
quote	1.0.37	linked
rand	0.8.5	linked
rand_chacha	0.3.1	linked
rand_core	0.6.4	linked
rand_xorshift	0.3.0	feature_gated
redis direct	0.24.0	linked
redox_syscall	0.5.3	platform_gated
regex	1.10.6	linked
regex-automata	0.1.10	linked
regex-automata	0.4.7	linked
regex-lite	0.1.6	linked
regex-syntax	0.6.29	linked
regex-syntax	0.8.4	linked
reqwest direct	0.11.27	linked
resolv-conf	0.7.0	linked
rhai direct	1.19.0	linked
ron direct	0.8.1	linked
rustc-demangle	0.1.24	platform_gated
rustc_version	0.2.3	linked
rustc_version	0.4.1	buildtime_only
rustls-pemfile	1.0.4	linked
rustls-webpki	0.101.7	linked
ryu	1.0.18	linked
same-file	1.0.6	linked
schannel	0.1.23	platform_gated
scopeguard	1.2.0	linked
sct	0.7.1	linked
security-framework	2.11.1	platform_gated
security-framework-sys	2.11.1	platform_gated
semver	0.9.0	linked
semver-parser	0.7.0	linked
serde_bytes	0.11.15	linked
serde_cbor	0.11.2	linked
serde_spanned	0.6.7	linked
serde_urlencoded	0.7.1	linked
serde_with	1.14.0	linked
serde_yaml	0.8.26	linked
sha-1	0.10.1	linked
sha1	0.10.6	linked
sha1_smol	1.0.1	linked
sha2	0.10.8	linked
sharded-slab	0.1.7	linked
shlex	1.3.0	linked
signal-hook-registry	1.4.2	linked
smallvec	1.13.2	linked
socket2	0.4.10	linked
socket2	0.5.7	linked
spin	0.9.8	linked
static_assertions	1.1.0	linked
stringprep	0.1.5	linked
strsim	0.10.0	linked
subtle	2.6.1	linked
syn	2.0.77	linked
sync_wrapper	0.1.2	linked
system-configuration	0.5.1	platform_gated
take_mut	0.2.2	linked
tap	1.0.1	linked
tempfile	3.12.0	platform_gated
termcolor direct	1.4.1	linked
thin-vec	0.2.13	linked
thread_local	1.1.8	linked
time	0.3.36	linked
time-core	0.1.2	linked
tinyvec	1.8.0	linked
tinyvec_macros	0.1.1	linked
tokio direct	1.40.0	linked
tokio-native-tls	0.3.1	linked
tokio-rustls	0.24.1	linked
tokio-util	0.7.11	linked
toml direct	0.8.19	linked
toml_datetime	0.6.8	linked
toml_edit	0.22.20	linked
tower-service	0.3.3	linked
tracing direct	0.1.40	linked
tracing-bunyan-formatter direct	0.3.9	linked
tracing-core	0.1.32	linked
tracing-log	0.1.4	linked
tracing-log	0.2.0	linked
tracing-subscriber direct	0.3.18	linked
trust-dns-proto	0.21.2	linked
trust-dns-resolver	0.21.2	linked
try-lock	0.2.5	linked
ucd-trie	0.1.6	linked
unarray	0.1.4	feature_gated
unicode-bidi	0.3.15	linked
unicode-ident	1.0.12	linked
unicode-normalization	0.1.23	linked
unicode-properties	0.1.2	linked
untrusted	0.9.0	linked
url	2.5.2	linked
uuid	1.10.0	linked
value-bag	1.9.0	linked
version_check	0.9.5	buildtime_only
waker-fn	1.2.0	linked
walkdir direct	2.5.0	linked
want	0.3.1	linked
wasi	0.11.0+wasi-snapshot-preview1	platform_gated
wasm-bindgen-backend	0.2.93	buildtime_only
wasm-bindgen-futures	0.4.43	platform_gated
wasm-bindgen-macro-support	0.2.93	buildtime_only
web-sys	0.3.70	platform_gated
webpki-roots	0.25.4	linked
widestring	1.1.0	platform_gated
winapi-util	0.1.9	platform_gated
windows-core	0.52.0	platform_gated
winnow	0.6.18	linked
winreg	0.50.0	platform_gated
wyz	0.5.1	linked
yaml-rust	0.4.5	linked
zerocopy	0.7.35	linked
zstd	0.13.2	linked
windows_aarch64_gnullvm	0.48.5	unverified	build script, not runprebuilt objects
windows_aarch64_gnullvm	0.52.6	unverified	build script, not runprebuilt objects
windows_aarch64_msvc	0.48.5	unverified	build script, not runprebuilt objects
windows_aarch64_msvc	0.52.6	unverified	build script, not runprebuilt objects
windows_i686_gnu	0.48.5	unverified	build script, not runprebuilt objects
windows_i686_gnu	0.52.6	unverified	build script, not runprebuilt objects
windows_i686_msvc	0.48.5	unverified	build script, not runprebuilt objects
windows_i686_msvc	0.52.6	unverified	build script, not runprebuilt objects
windows_x86_64_gnu	0.48.5	unverified	build script, not runprebuilt objects
windows_x86_64_gnu	0.52.6	unverified	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.48.5	unverified	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.52.6	unverified	build script, not runprebuilt objects
windows_x86_64_msvc	0.48.5	unverified	build script, not runprebuilt objects
windows_x86_64_msvc	0.52.6	unverified	build script, not runprebuilt objects
const-random	0.1.18	dead
hermit-abi	0.3.9	unverified
hermit-abi	0.4.0	unverified
home direct	0.5.9	dead
miniz_oxide	0.7.4	unverified
peg direct	0.8.4	dead
windows-sys	0.48.0	unverified
windows-sys	0.52.0	unverified
windows-sys	0.59.0	unverified
windows-targets	0.48.5	unverified
windows-targets	0.52.6	unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-08 · tarp 0.1.0+20261008141706-g2aea6e37e0b6 · run aa8a554b-5884-47a0-93f3-09dec33db449