Informational scan, not a security audit. How this is computed.
API keys, passwords or tokens committed into the repo.
Nothing found by this check. ✓
Packages you depend on that have known security holes (CVEs).
CVE-2021-32810 rust-crossbeam-deque: race condition may lead to double freeCVE-2019-25009 An issue was discovered in the http crate before 0.1.20 for Rust. The ...CVE-2021-25900 An issue was discovered in the smallvec crate before 0.6.14 and 1.x be ...CVE-2020-36465 An issue was discovered in the generic-array crate before 0.13.3 for R ...GHSA-6888-wf7j-34jq `SegQueue` creates zero value of any typeCVE-2022-23639 crossbeam-utils provides atomics, synchronization primitives, scoped t ...CVE-2020-36465 An issue was discovered in the generic-array crate before 0.13.3 for R ...CVE-2023-26964 An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occ ...GHSA-8r5v-vm4m-4g25 Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)GHSA-q6cp-qfwq-4gcv h2 servers vulnerable to degradation of service with CONTINUATION FloodCVE-2020-25574 An issue was discovered in the http crate before 0.1.20 for Rust. An i ...GHSA-f67m-9j94-qv9j Parser creates invalid uninitialized valueCVE-2021-21299 hyper is an open-source HTTP library for Rust (crates.io). In hyper fr ...CVE-2021-32714 hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper ...CVE-2024-12224 idna: idna accepts Punycode labels that do not produce any non-ASCII when decodedCVE-2024-12224 idna: idna accepts Punycode labels that do not produce any non-ASCII when decodedCVE-2020-35910 An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...CVE-2020-35911 An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...CVE-2020-35912 An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...CVE-2020-35913 An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...CVE-2020-35914 An issue was discovered in the lock_api crate before 0.4.2 for Rust. A ...GHSA-wfg4-322g-9vqv memoffset allows reading uninitialized memoryCVE-2020-35919 An issue was discovered in the net2 crate before 0.2.36 for Rust. It h ...CVE-2020-35920 An issue was discovered in the socket2 crate before 0.3.16 for Rust. I ...CVE-2026-41676 rust-openssl provides OpenSSL bindings for the Rust programming langua ...Your dependencies cross-checked against the OSV vulnerability database.
RUSTSEC-2020-0025 bigint is unmaintained, use uint insteadRUSTSEC-2021-0093 Data race in crossbeam-dequeRUSTSEC-2020-0025 bigint is unmaintained, use uint insteadRUSTSEC-2021-0093 Data race in crossbeam-dequeRUSTSEC-2019-0036 Type confusion if __private_get_type_id__ is overriddenRUSTSEC-2019-0034 HeaderMap::Drain API is unsoundRUSTSEC-2021-0079 Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data lossRUSTSEC-2021-0003 Buffer overflow in SmallVec::insert_manyRUSTSEC-2020-0025 bigint is unmaintained, use uint insteadRUSTSEC-2022-0041 Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64RUSTSEC-2020-0146 arr! macro erases lifetimesRUSTSEC-2022-0041 Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64RUSTSEC-2020-0146 arr! macro erases lifetimesRUSTSEC-2024-0332 Degradation of service in h2 servers with CONTINUATION FloodRUSTSEC-2019-0033 Integer Overflow in HeaderMap::reserve() can cause Denial of ServiceRUSTSEC-2021-0020 Multiple Transfer-Encoding headers misinterprets request payloadRUSTSEC-2021-0078 Lenient `hyper` header parsing of `Content-Length` could allow request smugglingRUSTSEC-2024-0421 `idna` accepts Punycode labels that do not produce any non-ASCII when decodedRUSTSEC-2024-0421 `idna` accepts Punycode labels that do not produce any non-ASCII when decodedRUSTSEC-2020-0070 Some lock_api lock guard objects can cause data racesRUSTSEC-2020-0080 `miow` invalidly assumes the memory layout of std::net::SocketAddrRUSTSEC-2020-0078 `net2` invalidly assumes the memory layout of std::net::SocketAddrRUSTSEC-2023-0044 `openssl` `X509VerifyParamRef::set_host` buffer over-readRUSTSEC-2024-0357 `MemBio::get_buf` has undefined behavior with empty buffersRUSTSEC-2025-0004 ssl::select_next_proto use after freeCode that can be exploited: injection, hardcoded credentials and similar.
Nothing found by this check. ✓
Packages that look intentionally malicious: typosquats, sneaky install scripts.
Nothing found by this check. ✓
A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.
Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.
This check didn’t finish — that’s not the same as “clean.” Try Check again above.