cargo / trusty-review / 0.38.5

trusty-review 0.38.5

4 vulnerabilities

processes: 465
operations: 147K
packages: 339
compiler runs: 1,754
connections: 1
job time: 8m 37s
capture: 1.3 MB
records: 238K
bytes / record: 5.5

Build behaviourcompiled C/C++

run 506a80ff-7d95-44c5-a486-b17ef7b61e7f · built 2026-10-10 · complete Release

Artifact

binary · retained · product · graph v1

Checks

12 of 14 clear Known vulnerabilities Dependency advisories

Build behavior✓✓✓✓✓✓✓✓

Supply chain▲✓▲✓✓

Pipeline✓

Detections

No detections

No abnormal activity detected across 147K flows.

Network

1 peers

static.crates.io:8080 the package manager · cargo (trusty-tools) via crates.io · 26,328 files · went into an output ecosystem

Dependencies383	Build behaviour
aws-lc-sys0.45.0	build scriptprebuilt objects
ring0.17.14	build scriptprebuilt objects
winapi-i686-pc-windows-gnu0.4.0	build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0	build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1	build script, not runprebuilt objects
windows_aarch64_msvc0.53.1	build script, not runprebuilt objects
windows_i686_gnu0.53.1	build script, not runprebuilt objects
windows_i686_gnullvm0.53.1	build script, not runprebuilt objects
windows_i686_msvc0.53.1	build script, not runprebuilt objects
windows_x86_64_gnu0.53.1	build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1	build script, not runprebuilt objects
windows_x86_64_msvc0.53.1	build script, not runprebuilt objects
anyhow1.0.102	build script
async-trait0.1.89	proc macro
aws-lc-rs1.18.1	build script
aws-smithy-runtime-api-macros1.0.0	proc macro
aws-types1.3.16	build script
clap_derive4.6.1	proc macro
crc32fast1.5.0	build script
crossbeam-utils0.8.21	build script
displaydoc0.2.5	proc macro
futures-macro0.3.32	proc macro
generic-array0.14.7	build script
getrandom0.3.4	build script, not run
getrandom0.4.2	build script
httparse1.10.1	build script
iana-time-zone-haiku0.1.2	build script, not run
icu_normalizer_data2.2.0	build script
icu_properties_data2.2.0	build script
ld-linux-x86-64.so.2	system library
libc0.2.186	build script
libc.so.6	system library
libgcc_s.so.1	system library
libm.so.6	system library
libmvec.so.1	system library
ntapi0.4.3	build script, not run
num-traits0.2.19	build script
parking_lot_core0.9.12	build script
prettyplease0.2.37	build script, not run
proc-macro21.0.106	build script
quinn0.11.9	build script, not run
quinn-udp0.5.14	build script, not run
quote1.0.45	build script
redb4.3.0	build script
rustix1.1.4	build script
rustls0.23.45	build script
rustversion1.0.22	build scriptproc macro
serde1.0.228	build script
serde_core1.0.228	build script
serde_derive1.0.228	proc macro
serde_json1.0.150	build script
serial_test_derive3.4.0	proc macro
thiserror1.0.69	build script
thiserror2.0.18	build script
thiserror-impl1.0.69	proc macro
thiserror-impl2.0.18	proc macro
time-macros0.2.27	proc macro
tokio-macros2.7.0	proc macro
tracing-attributes0.1.31	proc macro
trusty-common0.59.1	build script
valuable0.1.1	build script, not run
wasm-bindgen0.2.121	build script, not run
wasm-bindgen-macro0.2.121	proc macro
wasm-bindgen-shared0.2.121	build script, not run
winapi0.3.9	build script, not run
windows-implement0.57.0	proc macro
windows-implement0.60.2	proc macro
windows-interface0.57.0	proc macro
windows-interface0.59.3	proc macro
wit-bindgen-rust0.51.0	build script, not run
wit-bindgen-rust-macro0.51.0	build script, not runproc macro
yoke-derive0.8.2	proc macro
zerofrom-derive0.1.7	proc macro
zeroize_derive1.5.0	proc macro
zerovec-derive0.11.3	proc macro
zmij1.0.21	build script
aho-corasick1.1.4
android_system_properties0.1.5
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anstyle-wincon3.0.11
arc-swap1.9.2
atomic-waker1.1.2
autocfg1.5.0
aws-config1.8.17
aws-credential-types1.2.14
aws-runtime1.7.4
aws-sdk-bedrockruntime1.132.0
aws-sdk-sso1.99.0
aws-sdk-ssooidc1.101.0
aws-sdk-sts1.104.0
aws-sigv41.4.4
aws-smithy-async1.2.14
aws-smithy-eventstream0.60.20
aws-smithy-http0.63.6
aws-smithy-http-client1.1.12
aws-smithy-json0.62.6
aws-smithy-observability0.2.6
aws-smithy-query0.60.15
aws-smithy-runtime1.11.3
aws-smithy-runtime-api1.12.1
aws-smithy-schema0.1.0
aws-smithy-types1.4.8
aws-smithy-xml0.60.15
base640.22.1
base64-simd0.8.0
bitflags2.13.1
block-buffer0.10.4
block-buffer0.12.0
bumpalo3.20.2
bytemuck1.25.0
byteorder-lite0.1.0
bytes1.11.1
bytes-utils0.1.4
cc1.2.62
cfg-if1.0.4
cfg_aliases0.2.1
chacha200.10.2
chrono0.4.44
clap4.6.1
clap_builder4.6.0
clap_lex1.1.0
cmake0.1.58
cmov0.5.4
colorchoice1.0.5
colored2.2.0
const-oid0.10.2
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
cpufeatures0.3.0
crypto-common0.1.7
crypto-common0.2.2
ctutils0.4.2
dashmap6.2.1
deranged0.5.8
digest0.10.7
digest0.11.3
dirs5.0.1
dirs-sys0.4.1
dotenvy0.15.7
dunce1.0.5
either1.16.0
equivalent1.0.2
errno0.3.14
fastrand2.4.1
fd-lock4.0.4
fdeflate0.3.7
find-msvc-tools0.1.9
flate21.1.9
fnv1.0.7
foldhash0.1.5
form_urlencoded1.2.2
fs_extra1.3.0
fslock0.2.1
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-io0.3.32
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
getrandom0.2.17
h20.4.14
hashbrown0.14.5
hashbrown0.15.5
hashbrown0.17.1
heck0.5.0
hex0.4.3
hmac0.12.1
hmac0.13.0
http0.2.12
http1.4.0
http-body0.4.6
http-body1.0.1
http-body-util0.1.3
hybrid-array0.4.12
hyper1.9.0
hyper-rustls0.27.9
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_properties2.2.0
icu_provider2.2.0
id-arena2.3.0
idna1.1.0
idna_adapter1.2.2
image0.25.10
image-webp0.2.4
indexmap2.14.0
ipnet2.12.0
is_terminal_polyfill1.70.2
itoa1.0.18
jobserver0.1.34
js-sys0.3.98
jsonwebtoken10.4.0
lazy_static1.5.0
leb128fmt0.1.0
libredox0.1.16
linux-raw-sys0.12.1
litemap0.8.2
lock_api0.4.14
log0.4.29
lru-slab0.1.2
matchers0.2.0
memchr2.8.0
miniz_oxide0.8.9
mio1.2.0
moxcms0.8.1
nu-ansi-term0.50.3
num-bigint0.4.6
num-conv0.2.2
num-integer0.1.46
once_cell1.21.4
once_cell_polyfill1.70.2
openssl-probe0.2.1
option-ext0.2.0
outref0.5.2
parking_lot0.12.5
pem3.0.6
percent-encoding2.3.2
pin-project-lite0.2.17
pin-utils0.1.0
pkg-config0.3.33
png0.18.1
potential_utf0.1.5
powerfmt0.2.0
pxfm0.1.29
quick-error2.0.1
quinn-proto0.11.16
r-efi5.3.0
rand0.10.2
rand_core0.6.4
rand_pcg0.10.2
redox_syscall0.5.18
redox_users0.4.6
regex1.12.3
regex-automata0.4.14
regex-lite0.1.9
regex-syntax0.8.10
reqwest0.12.28
rpassword7.5.4
rtoolbox0.0.5
rustc-hash2.1.2
rustc_version0.4.1
rustls-native-certs0.8.3
rustls-pki-types1.14.1
rustls-webpki0.103.15
ryu1.0.23
scc2.4.0
schannel0.1.29
scopeguard1.2.0
sdd3.0.10
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde_spanned0.6.9
serde_urlencoded0.7.1
serde_yaml0.9.34+deprecated
serial_test3.4.0
sha10.10.6
sha1_smol1.0.1
sha20.10.9
sha20.11.0
sharded-slab0.1.7
shlex1.3.0
signal-hook-registry1.4.8
signature2.2.0
simd-adler320.3.9
simple_asn10.6.4
slab0.4.12
smallvec1.15.1
socket20.6.3
stable_deref_trait1.2.1
strsim0.11.1
subtle2.6.1
syn2.0.117
sync_wrapper1.0.2
synstructure0.13.2
sysinfo0.33.1
tempfile3.27.0
thread_local1.1.9
time0.3.47
time-core0.1.8
tinystr0.8.3
tinyvec1.11.0
tinyvec_macros0.1.1
tokio1.52.3
tokio-rustls0.26.4
tokio-util0.7.18
toml0.8.23
toml_datetime0.6.11
toml_edit0.22.27
toml_write0.1.2
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
trusty-mcp0.2.1
try-lock0.2.5
typenum1.20.0
unicode-ident1.0.24
unicode-xid0.2.6
unsafe-libyaml0.2.11
untrusted0.7.1
untrusted0.9.0
url2.5.8
urlencoding2.1.3
utf8_iter1.0.4
utf8parse0.2.2
uuid1.23.1
version_check0.9.5
vsimd0.8.0
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.3+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen-futures0.4.71
wasm-bindgen-macro-support0.2.121
wasm-encoder0.244.0
wasm-metadata0.244.0
wasm-streams0.4.2
wasmparser0.244.0
web-sys0.3.98
web-time1.1.0
webpki-roots1.0.7
windows0.57.0
windows-strings0.4.2
windows-sys0.60.2
windows-targets0.53.5
winnow0.7.15
wit-bindgen-core0.51.0
wit-component0.244.0
wit-parser0.244.0
writeable0.6.3
xmlparser0.13.6
yoke0.8.2
zerofrom0.1.8
zeroize1.8.2
zerotrie0.2.4
zerovec0.11.6
zune-core0.5.1
zune-jpeg0.5.15
windows_aarch64_gnullvm0.48.5	build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6	build script, not runprebuilt objects
windows_aarch64_msvc0.48.5	build script, not runprebuilt objects
windows_aarch64_msvc0.52.6	build script, not runprebuilt objects
windows_i686_gnu0.48.5	build script, not runprebuilt objects
windows_i686_gnu0.52.6	build script, not runprebuilt objects
windows_i686_gnullvm0.52.6	build script, not runprebuilt objects
windows_i686_msvc0.48.5	build script, not runprebuilt objects
windows_i686_msvc0.52.6	build script, not runprebuilt objects
windows_x86_64_gnu0.48.5	build script, not runprebuilt objects
windows_x86_64_gnu0.52.6	build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5	build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6	build script, not runprebuilt objects
windows_x86_64_msvc0.48.5	build script, not runprebuilt objects
windows_x86_64_msvc0.52.6	build script, not runprebuilt objects
wit-bindgen0.51.0	build script, not runprebuilt objects
wit-bindgen0.57.1	build script, not runprebuilt objects
adler22.0.1
r-efi6.0.0
rand_core0.10.1
windows-core0.57.0
windows-core0.61.2
windows-link0.1.3
windows-link0.2.1
windows-result0.1.2
windows-result0.3.4
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6

Vulnerabilities4	Package	Version	Fix	Severity	Title	Reach
CVE-2026-18140	aws-smithy-json	0.62.6	>=0.62.7	high	aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers	retained
RUSTSEC-2026-0258	h2	0.4.14	>=0.4.16	high	h2 unbounded empty DATA frames	retained
RUSTSEC-2026-0190	anyhow	1.0.102	>=1.0.103	low	Unsoundness in `Error::downcast_mut()`	retained
RUSTSEC-2026-0205	scc	2.4.0	>=3.8.4	low	`Array::insert` violates exception safety if compare function panics, leading to potential Double-Free	retained

1 of 1 jobs captured: build-test success · Generated 2026-10-10 · run 506a80ff-7d95-44c5-a486-b17ef7b61e7f

analysis 0.1.0 · 2026-10-09 · 814b5de · graph v1