monica_rand_core 0.10.2 → 0.10.3
Evidence: 5 changed. Static findings: 1 new, 2 gone. Run check: 0 changed.
100
critical
100
critical
Evidence
5 changed, 9 the same.
| Change | Points | Signal | What |
|---|---|---|---|
| changed | 0 → 30 | static:included_binary monica_rand_core |
high severity included_binary in build_script code (3 places): helper/windows (133632 bytes) |
| removed | 30 | static:environment_enumeration monica_rand_core |
high severity environment_enumeration in build_script code: std::env::vars |
| removed | 15 | environment_dumped monica_rand_core |
A build script wrote the whole environment, with the planted github_token_env, into its build directory. |
| removed | 10 | new_high_finding monica_rand_core |
New since 0.10.1: environment_enumeration |
| removed | 5 | new_behavior monica_rand_core |
New since the previous version: dump:environment. |
Package
- Build script
- no change
- Proc macro
- no change
- links
- no change
- New dependencies
- none
Static findings
1 new, 2 gone, 13 the same. Code that only moved counts as the same.
New in 0.10.3
high dropper_pattern build_script 1
helper/windows (133632 bytes) at build.rs:89 with ShellExecuteW at build.rs:27build.rs:89
Gone since 0.10.2
2 findings
high dropper_pattern build_script 1
helper/windows (133632 bytes) at build.rs:83 with ShellExecuteW at build.rs:20build.rs:83
high environment_enumeration build_script 1
std::env::varsbuild.rs:78
Run: check
Processes 0 new, 0 gone, 8 the same
The same processes ran.
Network 0 changed, 0 the same
No change.
Files 0 changed, 0 the same
No change.
Behavior
0 new, 2 gone, 9 the same.
Gone since 0.10.2
dump:environment static:environment_enumeration