tfs-ssh 0.7.1

15 vulnerabilities

processes: 576
operations: 54K
packages: 283
compiler runs: 309
connections: 1
job time: 2m 09s
capture: 710 KB
records: 99K
bytes / record: 7.2

Build behaviourhas a build scriptcompiled C/C++

run 1200a1eb-ecd9-4952-a9a2-e815c317c767 · built 2026-10-11 · complete Release

Artifact

binary · retained · product · graph v2

Checks	Detections
Build behavior
✓ Network activity	—
✓ Sensitive data access and transfer	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Data flow analysis	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
▲ Build-time dependency advisories	—
▲ Dependency advisories	—
✓ Declared and observed dependencies	—
✓ Dependency and toolchain versions	—
Pipeline
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 54K flows.

Network

0 peers

cargo fetched 17,227 files from static.crates.io

Vulnerable dependencies12	Package	Version	Fix	Severity	Title	Reach
CVE-2026-102823	russh	0.62.3	>=0.63.1	high	russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened	retained
CVE-2023-49092	rsa	0.10.0-rc.18	none published	medium	Marvin Attack: potential key recovery through timing sidechannels	retained
CVE-2026-102821	russh	0.62.3	>=0.63.2	medium	Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey	retained
CVE-2026-102824	russh	0.62.3	>=0.63.0	medium	Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange	retained
CVE-2026-68930	russh	0.62.3	>=0.62.5	medium	Russh: Channel-scoped server callbacks can be reached without an open channel	retained
CVE-2026-73429	russh	0.62.3	>=0.62.4	medium	Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)	retained
CVE-2026-73430	russh	0.62.3	>=0.62.4	medium	Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)	retained
CVE-2026-73489	russh	0.62.3	>=0.62.4	medium	Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records	retained
GHSA-rhfx-m35p-ff5j	lru	0.12.5	>=0.16.3	low	`IterMut` violates Stacked Borrows by invalidating internal pointer	retained
RUSTSEC-2026-0253	lru	0.12.5	>=0.18.2	low	Potential use-after-free due to lack of panic safety in `LruCache::pop()`	retained
CVE-2026-102822	russh	0.62.3	>=0.63.1	low	russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic	retained
CVE-2026-102825	russh	0.62.3	>=0.62.6	low	Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path	retained

Dependencies

294 packages, 27 with a build script that ran, 11 doing more than compiling

Package	Version	Usage	Build behaviour
ring	0.17.14	linked	build scriptprebuilt objects
winapi-i686-pc-windows-gnu	0.4.0	platform_gated	build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu	0.4.0	platform_gated	build script, not runprebuilt objects
windows_aarch64_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
windows_aarch64_msvc	0.52.6	platform_gated	build script, not runprebuilt objects
windows_i686_gnu	0.52.6	platform_gated	build script, not runprebuilt objects
windows_i686_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
windows_i686_msvc	0.52.6	platform_gated	build script, not runprebuilt objects
windows_x86_64_gnu	0.52.6	platform_gated	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
windows_x86_64_msvc	0.52.6	platform_gated	build script, not runprebuilt objects
anyhow direct	1.0.104	linked	build script
crc32fast	1.5.0	linked	build script
crossbeam-utils	0.8.22	linked	build script
curve25519-dalek	5.0.0	linked	build script
curve25519-dalek-derive	0.1.1	linked	proc macro
darling_macro	0.23.0	linked	proc macro
delegate	0.13.5	linked	proc macro
enum_dispatch	0.3.13	linked	proc macro
futures-macro	0.3.33	linked	proc macro
generic-array	0.14.9	linked	build script
getrandom	0.4.3	linked	build script
iana-time-zone-haiku	0.1.2	platform_gated	build script, not run
indoc	2.0.7	linked	proc macro
instability	0.3.12	linked	build scriptproc macro
ld-linux-x86-64.so.2		linked	system library
libc	0.2.187	linked	build script
libc.so.6		linked	system library
libgcc_s.so.1		linked	system library
libm.so.6		linked	system library
libmvec.so.1		linked	system library
nix	0.31.3	linked	build script
num-traits	0.2.19	linked	build script
objc2	0.6.4	platform_gated	build script, not run
parking_lot_core	0.9.12	linked	build script
paste	1.0.15	linked	build scriptproc macro
proc-macro2	1.0.107	linked	build script
quote	1.0.47	linked	build script
rustix	0.38.44	linked	build script
rustix	1.1.4	linked	build script
rustversion	1.0.23	linked	build scriptproc macro
serde direct	1.0.229	linked	build script
serde_core	1.0.229	linked	build script
serde_derive	1.0.229	linked	proc macro
serde_json direct	1.0.151	linked	build script
signal-hook	0.3.18	linked	build script
strum_macros	0.26.4	linked	proc macro
thiserror	2.0.19	linked	build script
thiserror-impl	2.0.19	linked	proc macro
tokio-macros	2.7.1	linked	proc macro
vte_generate_state_changes	0.1.2	linked	proc macro
wasm-bindgen	0.2.126	platform_gated	build script, not run
wasm-bindgen-macro	0.2.126	buildtime_only	proc macro
wasm-bindgen-shared	0.2.126	platform_gated	build script, not run
wayland-backend	0.3.15	linked	build script
wayland-client	0.31.14	linked	build script
wayland-scanner	0.31.10	linked	proc macro
wayland-sys	0.31.11	linked	build script
winapi	0.3.9	platform_gated	build script, not run
windows-implement	0.60.2	buildtime_only	proc macro
windows-interface	0.59.3	buildtime_only	proc macro
zmij	1.0.23	linked	build script
aead	0.6.1	linked
aes	0.9.1	linked
aes-gcm	0.11.0	linked
allocator-api2	0.2.21	linked
android_system_properties	0.1.5	platform_gated
arboard direct	3.6.1	linked
argon2	0.6.0-rc.8	linked
arrayvec	0.7.8	linked
autocfg	1.5.1	buildtime_only
base16ct	1.0.0	linked
base64ct	1.8.3	linked
bcrypt-pbkdf	0.11.0	linked
bitflags	2.13.1	linked
blake2	0.11.0-rc.6	linked
block-buffer	0.12.1	linked
block-padding	0.4.2	linked
blowfish	0.10.0	linked
bumpalo	3.20.3	buildtime_only
byteorder	1.5.0	linked
bytes	1.12.1	linked
cassowary	0.3.0	linked
castaway	0.2.4	linked
cbc	0.2.1	linked
cc	1.3.0	linked
cfg-if	1.0.4	linked
cfg_aliases	0.2.2	buildtime_only
chacha20	0.10.2	linked
chrono	0.4.45	linked
cipher	0.5.2	linked
clipboard-win	5.4.1	platform_gated
cmov	0.5.4	linked
compact_str	0.8.2	linked
const-oid	0.10.2	linked
core-foundation-sys	0.8.7	platform_gated
cpubits	0.1.1	linked
cpufeatures	0.3.0	linked
crossterm direct	0.28.1	linked
crossterm_winapi	0.9.1	platform_gated
crypto-bigint	0.7.5	linked
crypto-common	0.2.2	linked
crypto-primes	0.7.2	linked
ctr	0.10.1	linked
ctutils	0.4.2	linked
darling	0.23.0	linked
darling_core	0.23.0	linked
dashmap	6.2.1	linked
data-encoding	2.11.0	linked
der	0.8.1	linked
des	0.9.0	feature_gated
digest	0.11.3	linked
dispatch2	0.3.1	feature_gated
downcast-rs	1.2.1	linked
ecdsa	0.17.0	linked
ed25519	3.0.0	linked
ed25519-dalek	3.0.0	linked
either	1.16.0	linked
elliptic-curve	0.14.1	linked
equivalent	1.0.2	linked
errno	0.3.14	linked
error-code	3.3.2	platform_gated
ff	0.14.0	linked
fiat-crypto	0.3.0	platform_gated
find-msvc-tools	0.1.9	linked
fixedbitset	0.5.7	linked
flate2	1.1.9	linked
foldhash	0.1.5	linked
futures direct	0.3.33	linked
futures-channel	0.3.33	linked
futures-core	0.3.33	linked
futures-executor	0.3.33	linked
futures-io	0.3.33	linked
futures-sink	0.3.33	linked
futures-task	0.3.33	linked
futures-util	0.3.33	linked
generic-array	1.4.4	linked
gethostname	1.1.0	linked
getrandom	0.2.17	linked
ghash	0.6.0	linked
gloo-timers	0.4.0	platform_gated
group	0.14.0	linked
hashbrown	0.14.5	linked
hashbrown	0.15.5	linked
hashbrown	0.17.1	linked
heck	0.5.0	linked
hex	0.4.3	linked
hex-literal	1.1.0	linked
hkdf	0.13.0	linked
hmac	0.13.0	linked
hybrid-array	0.4.13	linked
iana-time-zone	0.1.65	linked
ident_case	1.0.1	linked
indexmap	2.14.0	linked
inout	0.2.2	linked
internal-russh-num-bigint	0.5.0	linked
itertools	0.13.0	linked
itoa	1.0.18	linked
js-sys	0.3.103	platform_gated
keccak	0.2.0	linked
kem	0.3.0	linked
linux-raw-sys	0.12.1	linked
linux-raw-sys	0.4.15	linked
lock_api	0.4.14	linked
log	0.4.33	linked
lru	0.12.5	linked
md5	0.8.1	linked
memchr	2.8.3	linked
miniz_oxide	0.8.9	linked
mio	1.2.2	linked
ml-kem	0.3.2	linked
module-lattice	0.2.3	linked
nom	8.0.0	linked
num-integer	0.1.46	linked
objc2-app-kit	0.3.2	platform_gated
objc2-core-foundation	0.3.2	platform_gated
objc2-core-graphics	0.3.2	platform_gated
objc2-encode	4.1.0	platform_gated
objc2-foundation	0.3.2	platform_gated
objc2-io-surface	0.3.2	feature_gated
once_cell	1.21.4	linked
os_pipe	1.2.3	linked
p256	0.14.0	linked
p384	0.14.0	linked
p521	0.14.0	linked
pageant	0.2.1	platform_gated
parking_lot	0.12.5	linked
password-hash	0.6.1	feature_gated
pbkdf2	0.13.0	linked
pem-rfc7468	1.0.0	linked
percent-encoding	2.3.2	linked
petgraph	0.8.3	linked
phc	0.6.1	feature_gated
pin-project-lite	0.2.17	linked
pkcs1	0.8.0-rc.4	linked
pkcs5	0.8.1	linked
pkcs8	0.11.0	linked
pkg-config	0.3.33	buildtime_only
poly1305	0.9.1	linked
polyval	0.7.3	linked
primefield	0.14.0	linked
primeorder	0.14.0	linked
quick-xml	0.39.4	linked
r-efi	6.0.0	platform_gated
rand	0.10.2	linked
rand_core	0.10.1	linked
ratatui direct	0.29.0	linked
redox_syscall	0.5.18	platform_gated
rfc6979	0.6.0	linked
rsa	0.10.0-rc.18	linked
russh direct	0.62.3	linked
russh-cryptovec	0.62.0	linked
russh-sftp direct	2.3.0	linked
russh-util	0.52.0	linked
rustc_version	0.4.1	buildtime_only
ryu	1.0.23	linked
scopeguard	1.2.0	linked
scrypt	0.12.0	linked
sec1	0.8.1	linked
semver	1.0.28	buildtime_only
serde_bytes	0.11.19	linked
serde_spanned	1.1.1	buildtime_only
serdect	0.4.3	feature_gated
sha1	0.11.0	linked
sha2 direct	0.11.0	linked
sha3	0.11.0	linked
shlex	2.0.1	linked
signal-hook-mio	0.2.5	linked
signal-hook-registry	1.4.8	linked
signature	3.0.0	linked
simd-adler32	0.3.10	linked
slab	0.4.12	linked
smallvec	1.15.2	linked
socket2	0.6.5	linked
spki	0.8.0	linked
ssh-cipher	0.3.0	linked
ssh-encoding	0.3.0	linked
ssh-key	0.7.0-rc.11	linked
static_assertions	1.1.0	linked
strsim	0.11.1	linked
strum	0.26.3	linked
subtle	2.6.1	linked
syn	2.0.119	linked
syn	3.0.2	linked
tokio direct	1.53.1	linked
tokio-util	0.7.18	linked
toml	1.1.6+spec-1.1.0	buildtime_only
toml_datetime	1.1.1+spec-1.1.0	buildtime_only
toml_parser	1.1.3+spec-1.1.0	buildtime_only
toml_writer	1.1.2+spec-1.1.0	buildtime_only
tree_magic_mini	3.2.2	linked
tui-term direct	0.2.0	linked
typenum	1.20.1	linked
unicode-ident	1.0.24	linked
unicode-segmentation	1.13.3	linked
unicode-truncate	1.1.0	linked
unicode-width	0.1.14	linked
unicode-width	0.2.0	linked
universal-hash	0.6.1	linked
untrusted	0.9.0	linked
utf8parse	0.2.2	linked
version_check	0.9.5	buildtime_only
vt100 direct	0.15.2	linked
vte	0.11.1	linked
wasi	0.11.1+wasi-snapshot-preview1	platform_gated
wasm-bindgen-futures	0.4.76	platform_gated
wasm-bindgen-macro-support	0.2.126	buildtime_only
wayland-protocols	0.32.13	linked
wayland-protocols-wlr	0.3.12	linked
windows	0.62.2	platform_gated
windows-collections	0.3.2	platform_gated
windows-core	0.62.2	platform_gated
windows-future	0.3.2	platform_gated
windows-link	0.2.1	platform_gated
windows-numerics	0.3.1	platform_gated
windows-result	0.4.1	platform_gated
windows-strings	0.5.1	platform_gated
windows-targets	0.52.6	platform_gated
windows-threading	0.2.1	platform_gated
winnow	1.0.4	buildtime_only
winresource direct	0.1.31	buildtime_only
wl-clipboard-rs	0.9.3	linked
wnaf	0.14.1	linked
x11rb	0.13.2	linked
x11rb-protocol	0.13.2	linked
zeroize	1.9.0	linked
adler2	2.0.1	dead
num-bigint	0.4.8	dead
salsa20	0.11.0	dead
sha3	0.12.0	dead
sponge-cursor	0.1.0	dead
windows-sys	0.52.0	unverified
windows-sys	0.59.0	unverified
windows-sys	0.61.2	unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-11 · run 1200a1eb-ecd9-4952-a9a2-e815c317c767

analysis 0.1.0 · 2026-10-10 · ce2b8d5 · graph v2