cargo / zulook / 1.1.0

zulook 1.1.0

17 vulnerabilities

processes: 292
operations: 40K
packages: 227
compiler runs: 165
connections: 1
job time: 1m 55s
capture: 540 KB
records: 74K
bytes / record: 7.3

Build behaviourcompiled and nothing more

run 5bc98735-1cc7-4c07-98f9-8e9d3696665a · built 2026-10-12 · complete Release

Artifact

binary · retained · product · graph v2

Checks

11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 more

Build behavior✓✓✓✓✓✓✓✓

Supply chain▲▲▲✓✓

Pipeline✓

Detections

No detections

No abnormal activity detected across 40K flows.

Network

1 peers

static.crates.io:8080 the package manager · cargo (zulook) via crates.io · 13,172 files · went into an output ecosystem

Dependencies239	Build behaviour
ring0.17.14	build script, not runprebuilt objects
vcpkg0.2.15	prebuilt objects
windows_aarch64_gnullvm0.52.6	build script, not runprebuilt objects
windows_aarch64_msvc0.52.6	build script, not runprebuilt objects
windows_i686_gnu0.52.6	build script, not runprebuilt objects
windows_i686_gnullvm0.52.6	build script, not runprebuilt objects
windows_i686_msvc0.52.6	build script, not runprebuilt objects
windows_x86_64_gnu0.52.6	build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6	build script, not runprebuilt objects
windows_x86_64_msvc0.52.6	build script, not runprebuilt objects
wit-bindgen0.51.0	build script, not runprebuilt objects
anyhow1.0.101	build script
async-trait0.1.89	proc macro
darling_macro0.23.0	proc macro
derive_more-impl2.1.1	proc macro
displaydoc0.2.5	proc macro
futures-macro0.3.31	proc macro
getrandom0.3.4	build script
httparse1.10.1	build script
iana-time-zone-haiku0.1.2	build script, not run
icu_normalizer_data2.1.1	build script
icu_properties_data2.1.2	build script
ld-linux-x86-64.so.2	system library
libc0.2.180	build script
libc.so.6	system library
libcrypto.so.3	system library
libgcc_s.so.1	system library
libm.so.6	system library
libmvec.so.1	system library
libssl.so.3	system library
native-tls0.2.14	build script
num-traits0.2.19	build script
openssl0.10.75	build script
openssl-macros0.1.1	proc macro
openssl-sys0.9.111	build script
parking_lot_core0.9.12	build script
pastey0.2.1	proc macro
pin-project-internal1.1.10	proc macro
proc-macro21.0.106	build script
quote1.0.44	build script
ref-cast1.0.25	build script
ref-cast-impl1.0.25	proc macro
rmcp-macros0.12.0	proc macro
rustix1.1.3	build script, not run
rustls0.23.36	build script, not run
rustversion1.0.22	build script, not runproc macro
sacp-derive11.0.0-alpha.1	proc macro
schemars_derive1.2.1	proc macro
serde1.0.228	build script
serde_core1.0.228	build script
serde_derive1.0.228	proc macro
serde_json1.0.149	build script
strum_macros0.27.2	proc macro
system-configuration-sys0.6.0	build script, not run
thiserror2.0.18	build script
thiserror-impl2.0.18	proc macro
tokio-macros2.6.0	proc macro
tracing-attributes0.1.31	proc macro
wasm-bindgen0.2.108	build script, not run
wasm-bindgen-macro0.2.108	proc macro
wasm-bindgen-shared0.2.108	build script, not run
windows-implement0.60.2	proc macro
windows-interface0.59.3	proc macro
yoke-derive0.8.1	proc macro
zerofrom-derive0.1.6	proc macro
zerovec-derive0.11.2	proc macro
zmij1.0.19	build script
agent-client-protocol-schema0.10.8
android_system_properties0.1.5
atomic-waker1.1.2
autocfg1.5.0
base640.22.1
bitflags2.10.0
boxfnonce0.1.1
bumpalo3.19.1
byteorder1.5.0
bytes1.11.1
cc1.2.55
cfg-if1.0.4
chrono0.4.43
convert_case0.10.0
core-foundation0.9.4
core-foundation-sys0.8.7
darling0.23.0
darling_core0.23.0
derive_more2.1.1
dyn-clone1.0.20
encoding_rs0.8.35
equivalent1.0.2
errno0.3.14
find-msvc-tools0.1.9
fixedbitset0.5.7
fnv1.0.7
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures0.3.31
futures-channel0.3.31
futures-concurrency7.7.1
futures-core0.3.31
futures-executor0.3.31
futures-io0.3.31
futures-lite2.6.1
futures-sink0.3.31
futures-task0.3.31
futures-util0.3.31
fxhash0.2.1
getrandom0.2.17
h20.4.13
hashbrown0.16.1
heck0.5.0
http1.4.0
http-body1.0.1
http-body-util0.1.3
hyper1.8.1
hyper-rustls0.27.7
hyper-tls0.6.0
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.1.1
icu_locale_core2.1.1
icu_normalizer2.1.1
icu_properties2.1.2
icu_provider2.1.1
ident_case1.0.1
idna1.1.0
idna_adapter1.2.1
indexmap2.13.0
ipnet2.11.0
iri-string0.7.10
itoa1.0.17
js-sys0.3.85
jsonrpcmsg0.1.2
linux-raw-sys0.11.0
litemap0.8.1
lock_api0.4.14
log0.4.29
memchr2.7.6
mime0.3.17
mio1.1.1
once_cell1.21.3
openssl-probe0.1.6
parking2.2.1
parking_lot0.12.5
percent-encoding2.3.2
pin-project1.1.10
pin-project-lite0.2.16
pin-utils0.1.0
pkg-config0.3.32
potential_utf0.1.4
r-efi5.3.0
redox_syscall0.5.18
reqwest0.12.28
rmcp0.12.0
rustc_version0.4.1
rustls-pki-types1.14.0
rustls-webpki0.103.9
ryu1.0.22
sacp11.0.0-alpha.1
sacp-tokio11.0.0-alpha.1
schannel0.1.28
schemars1.2.1
scopeguard1.2.0
security-framework2.11.1
security-framework-sys2.15.0
semver1.0.27
serde_derive_internals0.29.1
serde_spanned0.6.9
serde_urlencoded0.7.1
shell-words1.1.1
shlex1.3.0
signal-hook-registry1.4.8
slab0.4.12
smallvec1.15.1
socket20.6.2
stable_deref_trait1.2.1
strsim0.11.1
strum0.27.2
subtle2.6.1
syn2.0.114
sync_wrapper1.0.2
synstructure0.13.2
system-configuration0.7.0
tempfile3.24.0
tinystr0.8.2
tokio1.49.0
tokio-native-tls0.3.1
tokio-rustls0.26.4
tokio-util0.7.18
toml0.8.23
toml_datetime0.6.11
toml_edit0.22.27
toml_write0.1.2
tower0.5.3
tower-http0.6.8
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
try-lock0.2.5
unicode-ident1.0.22
unicode-segmentation1.12.0
unicode-xid0.2.6
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
uuid1.20.0
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.2+wasi-0.2.9
wasm-bindgen-futures0.4.58
wasm-bindgen-macro-support0.2.108
web-sys0.3.85
windows-core0.62.2
windows-link0.2.1
windows-registry0.6.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-targets0.52.6
winnow0.7.15
writeable0.6.2
yoke0.8.1
zerofrom0.1.6
zeroize1.8.2
zerotrie0.2.3
zerovec0.11.5
windows_aarch64_gnullvm0.53.1	build script, not runprebuilt objects
windows_aarch64_msvc0.53.1	build script, not runprebuilt objects
windows_i686_gnu0.53.1	build script, not runprebuilt objects
windows_i686_gnullvm0.53.1	build script, not runprebuilt objects
windows_i686_msvc0.53.1	build script, not runprebuilt objects
windows_x86_64_gnu0.53.1	build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1	build script, not runprebuilt objects
windows_x86_64_msvc0.53.1	build script, not runprebuilt objects
fastrand2.3.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.53.5

Vulnerabilities17	Package	Version	Fix	Severity	Title	Reach
RUSTSEC-2026-0258	h2	0.4.13	>=0.4.16	high	h2 unbounded empty DATA frames	retained
CVE-2026-41676	openssl	0.10.75	>=0.10.78	high	rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1	retained
CVE-2026-41678	openssl	0.10.75	>=0.10.78	high	rust-openssl has incorrect bounds assertion in aes key wrap	retained
CVE-2026-41681	openssl	0.10.75	>=0.10.78	high	rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check	retained
CVE-2026-41898	openssl	0.10.75	>=0.10.78	high	rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer	retained
CVE-2026-42327	openssl	0.10.75	>=0.10.79	high	rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs	retained
CVE-2026-42559	rmcp	0.12.0	>=1.4.0	high	rmcp Streamable HTTP server transport has a DNS rebinding vulnerability	retained
CVE-2026-63127	rmcp	0.12.0	>=2.0.0	high	RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery	retained
CVE-2026-63128	rmcp	0.12.0	>=2.0.0	high	RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service	retained
CVE-2026-44662	openssl	0.10.75	>=0.10.79	medium	rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding	retained
CVE-2026-45784	openssl	0.10.75	>=0.10.80	medium	rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers	retained
CVE-2026-64684	rmcp	0.12.0	>=2.1.0	medium	RMCP: Custom HTTP headers leak to cross-origin redirect targets	retained
GHSA-c9xm-49cp-xcr9	rmcp	0.12.0	>=2.0.0	medium	rmcp OAuth client fetches server-controlled resource_metadata URLs	retained
RUSTSEC-2026-0190	anyhow	1.0.101	>=1.0.103	low	Unsoundness in `Error::downcast_mut()`	retained
RUSTSEC-2019-0040	boxfnonce	0.1.1	none published	low	`boxfnonce` obsolete with release of Rust 1.35.0	retained
RUSTSEC-2025-0057	fxhash	0.2.1	none published	low	fxhash - no longer maintained	retained
CVE-2026-41677	openssl	0.10.75	>=0.10.78	low	rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length	retained

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 5bc98735-1cc7-4c07-98f9-8e9d3696665a

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2