monica_rand_core 0.10.1 → 0.10.2
Evidence: 5 changed. Static findings: 2 new, 1 gone. Run check: 0 changed.
100
critical
100
critical
Evidence
5 changed, 9 the same.
| Change | Points | Signal | What |
|---|---|---|---|
| added | 30 | static:environment_enumeration monica_rand_core |
high severity environment_enumeration in build_script code: std::env::vars |
| added | 15 | environment_dumped monica_rand_core |
A build script wrote the whole environment, with the planted github_token_env, into its build directory. |
| added | 10 | new_high_finding monica_rand_core |
New since 0.10.1: environment_enumeration |
| added | 5 | new_behavior monica_rand_core |
New since the previous version: dump:environment. |
| changed | 30 → 0 | static:included_binary monica_rand_core |
high severity included_binary in build_script code (3 places): helper/windows (133632 bytes) |
Package
- Build script
- no change
- Proc macro
- no change
- links
- no change
- New dependencies
- none
Static findings
2 new, 1 gone, 13 the same. Code that only moved counts as the same.
New in 0.10.2
high dropper_pattern build_script 1
helper/windows (133632 bytes) at build.rs:83 with ShellExecuteW at build.rs:20build.rs:83
high environment_enumeration build_script 1
std::env::varsbuild.rs:78
Gone since 0.10.1
1 findings
high dropper_pattern build_script 1
helper/windows (133632 bytes) at build.rs:79 with ShellExecuteW at build.rs:20build.rs:79
Run: check
Processes 0 new, 0 gone, 8 the same
The same processes ran.
Network 0 changed, 0 the same
No change.
Files 0 changed, 0 the same
No change.
Behavior
2 new, 0 gone, 9 the same.
New in 0.10.2
dump:environment static:environment_enumeration