panic-attack estate sweep — Track E bridge triage
panic-attack bridge triage (RustSec advisory DB, with reachability analysis) found 5 CVE/advisory findings in this repo's Cargo.lock (out of 227 total dependencies; 5 vulnerable).
Severity: medium: 5
Reachability: phantom: 5
Classification: informational: 5
Each finding includes a recommended action (often Remove unused dependency for phantom-imported crates). Reachability phantom = declared in Cargo.toml but never imported in any .rs file — removing the dep eliminates the CVE entirely with no behavioural change.
Estate tracker: hyperpolymath/panic-attack#32.
Findings
full advisory list
RUSTSEC-2021-0153 encoding@0.2.33 medium reach=phantom class=informational fix=
GHSA-h97m-ww89-6jmq idna@0.4.0 medium reach=phantom class=informational fix=
RUSTSEC-2024-0421 idna@0.4.0 medium reach=phantom class=informational fix=
GHSA-phqj-4mhp-q6mq openssl@0.10.79 medium reach=phantom class=informational fix=
RUSTSEC-2025-0017 trust-dns-proto@0.23.2 medium reach=phantom class=informational fix=
🤖 Discovered during the panic-attack estate sweep (2026-05-26) — Track E (bridge triage). See hyperpolymath/panic-attack#32 for campaign tracker.
panic-attack estate sweep — Track E bridge triage
panic-attack bridge triage(RustSec advisory DB, with reachability analysis) found 5 CVE/advisory findings in this repo'sCargo.lock(out of 227 total dependencies; 5 vulnerable).Severity: medium: 5
Reachability: phantom: 5
Classification: informational: 5
Each finding includes a recommended action (often
Remove unused dependencyfor phantom-imported crates). Reachabilityphantom= declared inCargo.tomlbut never imported in any.rsfile — removing the dep eliminates the CVE entirely with no behavioural change.Estate tracker: hyperpolymath/panic-attack#32.
Findings
full advisory list
🤖 Discovered during the panic-attack estate sweep (2026-05-26) — Track E (bridge triage). See hyperpolymath/panic-attack#32 for campaign tracker.