windows-headless 0.1.0-alpha

19 vulnerabilities

processes: 879
operations: 118K
packages: 370
compiler runs: 3,097
connections: 1
job time: 3m 23s
capture: 1.1 MB
records: 188K
bytes / record: 5.9

Build behaviourits build script ran gitcompiled C/C++

run d501fc8a-6486-4441-80c9-c42329ff2877 · built 2026-10-12 · complete Release

Artifact

binary · retained · product · graph v2

Checks	Detections
Build behavior
✓ Network activity	—
✓ Sensitive data access and transfer	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Data flow analysis	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
▲ Build-time dependency advisories	—
✓ Dependency advisories	—
✓ Declared and observed dependencies	—
✓ Dependency and toolchain versions	—
Pipeline
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 118K flows.

Network

0 peers

cargo fetched 23,436 files from static.crates.io

Vulnerable dependencies19	Package	Version	Fix	Severity	Title	Reach
CVE-2026-102823	russh	0.52.1	>=0.63.1	high	russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened	retained
CVE-2026-42189	russh	0.52.1	>=0.60.1	high	russh has pre-auth DoS via unbounded allocation in its keyboard-interactive auth handler	retained
CVE-2026-46673	russh	0.52.1	>=0.60.3	high	Russh: Unchecked CryptoVec allocation and growth handling is reachable	retained
CVE-2026-46702	russh	0.52.1	>=0.61.1	high	russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets	retained
CVE-2026-48110	russh	0.52.1	>=0.61.0	high	Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds	retained
CVE-2026-46673	russh-cryptovec	0.52.0	>=0.60.3	high	Russh: Unchecked CryptoVec allocation and growth handling is reachable	retained
CVE-2023-49092	rsa	0.9.10	none published	medium	Marvin Attack: potential key recovery through timing sidechannels	retained
CVE-2025-54804	russh	0.52.1	>=0.54.1	medium	russh is missing overflow checks during channel windows adjust	retained
CVE-2026-102821	russh	0.52.1	>=0.63.2	medium	Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey	retained
CVE-2026-102824	russh	0.52.1	>=0.63.0	medium	Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange	retained
CVE-2026-46705	russh	0.52.1	>=0.61.0	medium	russh server userauth state is not reset when authentication principal changes	retained
CVE-2026-48107	russh	0.52.1	>=0.61.0	medium	Russh: Unchecked keyboard-interactive prompt count in client auth path	retained
CVE-2026-48108	russh	0.52.1	>=0.61.0	medium	Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input	retained
CVE-2026-68930	russh	0.52.1	>=0.62.5	medium	Russh: Channel-scoped server callbacks can be reached without an open channel	retained
CVE-2026-73429	russh	0.52.1	>=0.62.4	medium	Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)	retained
CVE-2026-73430	russh	0.52.1	>=0.62.4	medium	Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)	retained
CVE-2026-73489	russh	0.52.1	>=0.62.4	medium	Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records	retained
CVE-2026-102822	russh	0.52.1	>=0.63.1	low	russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic	retained
CVE-2026-102825	russh	0.52.1	>=0.62.6	low	Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path	retained

Dependencies

394 packages, 33 with a build script that ran, 12 doing more than compiling

Package	Version	Usage	Build behaviour
aws-lc-sys	0.45.0	linked	build scriptprebuilt objects
ring	0.17.14	feature_gated	build script, not runprebuilt objects
winapi-i686-pc-windows-gnu	0.4.0	platform_gated	build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu	0.4.0	platform_gated	build script, not runprebuilt objects
windows_aarch64_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
windows_aarch64_msvc	0.52.6	platform_gated	build script, not runprebuilt objects
windows_i686_gnu	0.52.6	platform_gated	build script, not runprebuilt objects
windows_i686_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
windows_i686_msvc	0.52.6	platform_gated	build script, not runprebuilt objects
windows_x86_64_gnu	0.52.6	platform_gated	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.52.6	platform_gated	build script, not runprebuilt objects
windows_x86_64_msvc	0.52.6	platform_gated	build script, not runprebuilt objects
anyhow direct	1.0.104	linked	build script
aws-lc-rs	1.18.1	linked	build script
bytemuck_derive	1.12.1	linked	proc macro
clap_derive	4.6.7	linked	proc macro
crc32fast direct	1.5.2	linked	build script
curve25519-dalek	4.1.3	linked	build script
curve25519-dalek-derive	0.1.1	linked	proc macro
delegate	0.13.5	linked	proc macro
displaydoc	0.2.7	linked	proc macro
doctest-file	1.1.1	buildtime_only	proc macro
document-features	0.2.12	linked	proc macro
encoding_rs	0.8.41	linked	build script
enum_dispatch	0.3.13	linked	proc macro
futures-macro	0.3.34	linked	proc macro
generic-array	0.14.7	linked	build script
getrandom	0.4.3	linked	build script
hadris-fat direct	2.4.0	linked	build script
hadris-macros	2.4.0	linked	proc macro
heapless	0.9.3	linked	build script
httparse	1.10.1	linked	build script
iana-time-zone-haiku	0.1.2	platform_gated	build script, not run
icu_normalizer_data	2.3.0	linked	build script
icu_properties_data	2.3.0	linked	build script
jni	0.22.4	platform_gated	build script, not run
jni-macros	0.22.4	buildtime_only	build script, not runproc macro
jni-sys-macros	0.4.1	buildtime_only	proc macro
ld-linux-x86-64.so.2		linked	system library
libc	0.2.189	linked	build script
libc.so.6		linked	system library
libgcc_s.so.1		linked	system library
liblzma-sys	0.4.9	linked	build script
liblzma.so.5		linked	system library
libm	0.2.16	linked	build script
libm.so.6		linked	system library
libmvec.so.1		linked	system library
multiversion-macros	0.9.0	buildtime_only	proc macro
multiversion_no_op	1.0.0	linked	proc macro
nix	0.29.0	linked	build script
num-bigint-dig	0.8.6	linked	build script
num-traits	0.2.19	linked	build script
parking_lot_core	0.9.12	linked	build script
proc-macro2	1.0.107	linked	build script
quinn	0.11.12	feature_gated	build script, not run
quinn-udp	0.5.15	feature_gated	build script, not run
quote	1.0.47	linked	build script
rustix	1.1.5	linked	build script
rustls	0.23.45	linked	build script
rustversion	1.0.23	buildtime_only	build scriptproc macro
serde direct	1.0.229	linked	build script
serde_core	1.0.229	linked	build script
serde_derive	1.0.229	linked	proc macro
serde_json direct	1.0.151	linked	build script
signal-hook	0.3.18	linked	build script
system-configuration-sys	0.6.0	platform_gated	build script, not run
thiserror	1.0.69	linked	build script
thiserror-impl	1.0.69	linked	proc macro
thiserror-impl	2.0.20	linked	proc macro
tokio-macros	2.7.2	linked	proc macro
tracing-attributes	0.1.31	linked	proc macro
valuable	0.1.1	feature_gated	build script, not run
wasm-bindgen	0.2.128	platform_gated	build script, not run
wasm-bindgen-macro	0.2.128	buildtime_only	proc macro
wasm-bindgen-shared	0.2.128	platform_gated	build script, not run
winapi	0.3.9	platform_gated	build script, not run
windows-implement	0.58.0	buildtime_only	proc macro
windows-implement	0.60.2	buildtime_only	proc macro
windows-interface	0.58.0	buildtime_only	proc macro
windows-interface	0.59.3	buildtime_only	proc macro
yoke-derive	0.8.3	linked	proc macro
zerocopy	0.8.57	linked	build script
zerocopy-derive	0.8.57	linked	proc macro
zerofrom-derive	0.1.8	linked	proc macro
zerovec-derive	0.11.6	linked	proc macro
zmij	1.0.23	linked	build script
aead	0.5.2	linked
aes	0.8.4	linked
aes-gcm	0.10.3	linked
aho-corasick	1.1.5	feature_gated
android_system_properties	0.1.6	platform_gated
anstream	1.0.0	linked
anstyle	1.0.14	linked
anstyle-parse	1.0.0	linked
anstyle-query	1.1.5	linked
anstyle-wincon	3.0.11	platform_gated
argon2	0.5.3	linked
atomic-waker	1.1.2	linked
autocfg	1.5.1	buildtime_only
base16ct	0.2.0	linked
base64	0.22.1	linked
base64	0.23.1	linked
base64ct	1.8.3	linked
bcrypt-pbkdf	0.10.0	linked
bitflags	1.3.2	linked
bitflags	2.13.2	linked
blake2	0.10.6	linked
block-buffer	0.10.4	linked
block-buffer	0.12.1	linked
block-padding	0.3.3	linked
blowfish	0.9.1	linked
bumpalo	3.20.3	buildtime_only
bytemuck	1.25.2	linked
byteorder	1.5.0	linked
bytes	1.12.1	linked
cache-manager direct	0.6.0	linked
cbc	0.1.2	linked
cc	1.4.7	linked
cfg-if	1.0.5	linked
cfg_aliases	0.2.2	buildtime_only
chacha20	0.9.1	linked
chrono	0.4.45	linked
cipher	0.4.4	linked
clap direct	4.6.7	linked
clap_builder	4.6.7	linked
clap_lex	1.1.1	linked
cmake	0.1.58	linked
colorchoice	1.0.5	linked
combine	4.6.8	platform_gated
console	0.16.6	linked_undeclared
const-oid	0.10.2	linked
const-oid	0.9.6	linked
core-foundation-sys	0.8.7	platform_gated
core_detect	1.0.0	linked
cpufeatures	0.2.17	linked
cpufeatures	0.3.1	linked
crc	3.4.0	linked
crc-catalog	2.5.0	linked
crossterm direct	0.29.0	linked
crossterm_winapi	0.9.1	platform_gated
crypto-bigint	0.5.5	linked
crypto-common	0.1.7	linked
crypto-common	0.2.2	linked
ctr	0.9.2	linked
data-encoding	2.11.1	linked
der	0.7.10	linked
digest	0.10.7	linked
digest	0.11.3	linked
directories	6.0.0	linked
dirs-sys	0.5.0	linked
dunce	1.0.5	linked
ecdsa	0.16.9	linked
ed25519	2.2.3	linked
ed25519-dalek	2.2.0	linked
elliptic-curve	0.13.8	linked
embedded-io	0.7.1	linked
embedded-io-async	0.7.0	feature_gated
encode_unicode	1.0.0	unrelated
equivalent	1.0.2	linked
errno	0.3.14	linked
fastrand	2.5.0	linked
fdeflate	0.3.7	linked
ff	0.13.1	linked
fiat-crypto	0.2.9	platform_gated
filetime	0.2.29	linked
find-msvc-tools	0.1.13	linked
flate2 direct	1.1.10	linked
fnv	1.0.7	linked
form_urlencoded	1.2.2	linked
fs_extra	1.3.0	linked
futures	0.3.34	linked
futures-channel	0.3.34	linked
futures-core	0.3.34	linked
futures-executor	0.3.34	linked
futures-io	0.3.34	linked
futures-sink	0.3.34	linked
futures-task	0.3.34	linked
futures-util	0.3.34	linked
getrandom	0.2.17	linked
ghash	0.5.1	linked
group	0.13.0	linked
h2	0.4.19	linked
hadris-common	2.4.0	linked
hadris-fixed	2.4.0	linked
hadris-io	2.4.0	linked
hadris-path	2.4.0	linked
hadris-udf direct	2.4.0	linked
hash32	0.3.1	linked
hashbrown	0.17.1	linked
heck	0.5.0	linked
hex direct	0.4.3	linked
hex-literal	0.4.1	linked
hkdf	0.12.4	linked
hmac	0.12.1	linked
home	0.5.12	linked
http	1.5.0	linked
http-body	1.1.0	linked
http-body-util	0.1.5	linked
hybrid-array	0.4.15	linked
hyper	1.11.1	linked
hyper-rustls	0.27.10	linked
hyper-util	0.1.20	linked
iana-time-zone	0.1.65	linked
icu_collections	2.3.0	linked
icu_locale_core	2.3.0	linked
icu_normalizer	2.3.0	linked
icu_properties	2.3.0	linked
icu_provider	2.3.1	linked
idna	1.1.0	linked
idna_adapter	1.2.2	linked
indexmap	2.14.2	linked
inout	0.1.4	linked
insta	1.49.0	linked_undeclared
internal-russh-forked-ssh-key	0.6.10+upstream-0.6.7	linked
interprocess direct	2.4.4	linked
ipnet	2.12.2	linked
is_terminal_polyfill	1.70.2	linked
isomage direct	2.1.0	linked
itoa	1.0.18	linked
jni-sys	0.4.1	platform_gated
jobserver	0.1.35	linked
js-sys	0.3.105	platform_gated
lazy_static	1.5.0	linked
liblzma direct	0.4.8	linked
libredox	0.1.25	platform_gated
linux-raw-sys	0.12.1	linked
litemap	0.8.3	linked
litrs	1.0.0	linked
lock_api	0.4.14	linked
log	0.4.34	linked
lru-slab	0.1.3	feature_gated
matchers	0.2.0	linked
md5	0.7.0	linked
memchr	2.8.3	linked
mime	0.3.17	linked
miniz_oxide	0.9.1	linked
mio	1.2.3	linked
nu-ansi-term	0.50.3	linked
num-bigint	0.4.8	linked
num-integer	0.1.47	linked
num-iter	0.1.46	linked
once_cell	1.21.4	linked
once_cell_polyfill	1.70.2	platform_gated
opaque-debug	0.3.1	linked
openssl-probe	0.2.1	linked
option-ext	0.2.0	linked
p256	0.13.2	linked
p384	0.13.1	linked
p521	0.13.3	linked
pageant	0.0.3	platform_gated
parking_lot	0.12.5	linked
parse-size	1.1.0	buildtime_only
password-hash	0.5.0	linked
pbkdf2	0.12.2	linked
pem-rfc7468	0.7.0	linked
percent-encoding	2.3.2	linked
pin-project-lite	0.2.17	linked
pkcs1	0.7.5	linked
pkcs5	0.7.1	linked
pkcs8	0.10.2	linked
pkg-config	0.3.34	linked
png direct	0.17.16	linked
poly1305	0.8.0	linked
polyval	0.6.2	linked
potential_utf	0.1.6	linked
ppv-lite86	0.2.21	linked
primeorder	0.13.6	linked
quick-xml direct	0.42.0	linked
quinn-proto	0.11.18	feature_gated
r-efi	6.0.0	platform_gated
rand	0.8.8	linked
rand_chacha	0.3.1	linked
rand_core	0.10.1	linked
rand_core	0.6.4	linked
rand_pcg	0.10.2	feature_gated
recvmsg	1.0.0	platform_gated
redox_syscall	0.5.18	platform_gated
redox_users	0.5.3	platform_gated
regex-automata	0.4.18	linked
regex-syntax	0.8.11	linked
reqwest direct	0.13.5	linked
rfc6979	0.4.0	linked
rsa	0.9.10	linked
russh direct	0.52.1	linked
russh-cryptovec	0.52.0	linked
russh-util	0.52.0	linked
rustc-hash	2.1.3	feature_gated
rustc_version	0.4.1	buildtime_only
rustls-native-certs	0.8.4	linked
rustls-pki-types	1.15.1	linked
rustls-platform-verifier	0.7.0	linked
rustls-platform-verifier-android	0.1.1	platform_gated
rustls-webpki	0.103.15	linked
salsa20	0.10.2	linked
same-file	1.0.6	buildtime_only
schannel	0.1.29	platform_gated
scopeguard	1.2.0	linked
scrypt	0.11.0	linked
sec1	0.7.3	linked
security-framework	3.7.0	platform_gated
security-framework-sys	2.17.0	platform_gated
semver	1.0.28	buildtime_only
sha1	0.10.7	linked
sha2	0.10.9	linked
sha2 direct	0.11.0	linked
sharded-slab	0.1.7	linked
shlex	2.0.1	linked
signal-hook-mio	0.2.5	linked
signal-hook-registry	1.4.8	linked
signature	2.2.0	linked
simd-adler32	0.3.10	linked
simd_cesu8	1.2.0	platform_gated
simdutf8	0.1.5	linked
similar	2.7.0	linked_undeclared
slab	0.4.12	linked
smallvec	1.16.1	linked
socket2	0.6.5	linked
spin	0.12.3	linked
spin	0.9.9	linked
spki	0.7.3	linked
ssh-cipher	0.2.0	linked
ssh-encoding	0.2.0	linked
stable_deref_trait	1.2.1	linked
strsim	0.11.1	linked
subtle	2.6.1	linked
syn	2.0.119	linked
syn	3.0.6	linked
sync_wrapper	1.0.2	linked
synstructure	0.14.0	linked
system-configuration	0.7.0	platform_gated
tar direct	0.4.46	linked
tempfile direct	3.27.0	linked
thread_local	1.1.10	linked
tinystr	0.8.4	linked
tinyvec	1.13.3	feature_gated
tokio direct	1.53.1	linked
tokio-rustls	0.26.5	linked
tokio-util	0.7.19	linked
tower	0.5.3	linked
tower-http	0.6.11	linked
tower-layer	0.3.3	linked
tower-service	0.3.3	linked
tracing direct	0.1.44	linked
tracing-core	0.1.36	linked
tracing-log	0.2.0	linked
tracing-subscriber direct	0.3.23	linked
try-lock	0.2.5	linked
typenum	1.20.1	linked
unicode-ident	1.0.26	linked
universal-hash	0.5.1	linked
untrusted	0.9.0	linked
url	2.5.8	linked
utf8_iter	1.0.4	linked
utf8parse	0.2.2	linked
version_check	0.9.5	buildtime_only
walkdir	2.5.0	buildtime_only
want	0.3.1	linked
wasi	0.11.1+wasi-snapshot-preview1	platform_gated
wasm-bindgen-futures	0.4.78	platform_gated
wasm-bindgen-macro-support	0.2.128	buildtime_only
wasm-streams	0.5.0	platform_gated
web-sys	0.3.105	platform_gated
web-time	1.1.0	platform_gated
webpki-root-certs	1.0.9	platform_gated
widestring	1.2.1	platform_gated
winapi-util	0.1.11	buildtime_only
windows	0.58.0	platform_gated
windows-link	0.2.1	platform_gated
windows-registry	0.6.1	platform_gated
windows-sys	0.52.0	feature_gated
windows-targets	0.52.6	platform_gated
writeable	0.6.4	linked
xattr	1.6.1	linked
yoke	0.8.3	linked
zerofrom	0.1.8	linked
zeroize	1.9.0	linked
zerotrie	0.2.5	linked
zerovec	0.11.8	linked
zlib-rs	0.6.8	feature_gated
thiserror	2.0.20	dead	build script
adler2	2.0.1	dead
chacha20	0.10.2	dead
core-foundation	0.10.1	unverified
core-foundation	0.9.4	unverified
miniz_oxide	0.8.9	dead
multiversion	0.9.0	dead
rand	0.10.3	dead
windows-core	0.58.0	unverified
windows-core	0.62.2	unverified
windows-result	0.2.0	unverified
windows-result	0.4.1	unverified
windows-strings	0.1.0	unverified
windows-strings	0.5.1	unverified
windows-sys	0.61.2	unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run d501fc8a-6486-4441-80c9-c42329ff2877

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2