{"id":3690691,"name":"bytes","ecosystem":"cargo","description":"Types and traits for working with bytes","homepage":null,"licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/tokio-rs/bytes","keywords_array":["buffers","io","zero-copy"],"namespace":null,"versions_count":57,"first_release_published_at":"2015-01-30T08:04:59.465Z","latest_release_published_at":"2026-02-03T14:10:43.302Z","latest_release_number":"1.11.1","last_synced_at":"2026-06-02T00:02:22.417Z","created_at":"2022-04-11T11:27:57.467Z","updated_at":"2026-06-02T00:03:42.152Z","registry_url":"https://crates.io/crates/bytes/","install_command":"cargo install bytes","documentation_url":"https://docs.rs/bytes/","metadata":{"categories":["data-structures","network-programming"]},"repo_metadata":{"id":26607447,"uuid":"30062547","full_name":"tokio-rs/bytes","owner":"tokio-rs","description":"Utilities for working with bytes","archived":false,"fork":false,"pushed_at":"2026-05-19T17:31:00.000Z","size":2394,"stargazers_count":2218,"open_issues_count":85,"forks_count":334,"subscribers_count":36,"default_branch":"master","last_synced_at":"2026-05-27T00:06:29.089Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tokio-rs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-01-30T08:05:46.000Z","updated_at":"2026-05-25T00:36:16.000Z","dependencies_parsed_at":"2023-07-14T08:53:15.044Z","dependency_job_id":"887abe25-3341-4e37-908e-0481a1409df5","html_url":"https://github.com/tokio-rs/bytes","commit_stats":{"total_commits":509,"total_committers":120,"mean_commits":4.241666666666666,"dds":0.6227897838899803,"last_synced_commit":"4cd8969e850d0a66b181c388ead281c37d360621"},"previous_names":["carllerche/bytes"],"tags_count":42,"template":false,"template_full_name":null,"purl":"pkg:github/tokio-rs/bytes","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tokio-rs","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/sbom","scorecard":{"id":265930,"data":{"date":"2025-08-04","repo":{"name":"github.com/tokio-rs/bytes","commit":"8b4f54d0f317724bfeab29232f8a9333b3d8625e"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/tokio-rs/bytes/ci.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T12:02:26.099Z","repository_id":26607447,"created_at":"2025-08-17T12:02:26.099Z","updated_at":"2025-08-17T12:02:26.099Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33556543,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-05-27T02:00:06.184Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tokio-rs","name":"Tokio","uuid":"20248544","kind":"organization","description":"Rust's asynchronous runtime.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/20248544?v=4","repositories_count":47,"last_synced_at":"2026-05-24T00:24:13.005Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/tokio-rs","funding_links":["https://github.com/sponsors/tokio-rs"],"total_stars":103933,"followers":2799,"following":0,"created_at":"2022-11-02T16:27:21.792Z","updated_at":"2026-05-24T00:24:13.006Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tokio-rs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tokio-rs/repositories"},"tags":[{"name":"v1.11.1","sha":"417dccdeff249e0c011327de7d92e0d6fbe7cc43","kind":"commit","published_at":"2026-02-03T13:43:56.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.11.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"a7952fb4478f6dc226f623b217432fbc6f8dad24","kind":"commit","published_at":"2025-11-14T14:44:53.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.11.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.11.0/manifests"},{"name":"v1.10.1","sha":"19d1427c971f6b619356966163459e43f797de2f","kind":"commit","published_at":"2025-03-05T12:11:49.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.10.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.10.1/manifests"},{"name":"v1.10.0","sha":"e0f3a25faeca8babae5b4c5a810b8655adbcb96e","kind":"commit","published_at":"2025-02-03T11:49:49.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.10.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"d0a14deeb5d94839f101a02cc650a3a14949305b","kind":"commit","published_at":"2024-11-28T12:43:45.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.9.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"c45697ce4230777aa8467db7ef91e89f282a539f","kind":"commit","published_at":"2024-10-21T19:54:34.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.8.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.8.0/manifests"},{"name":"v1.7.2","sha":"d7c1d658d90c922eeee1dbc29bc6f6fd9a1a1a66","kind":"commit","published_at":"2024-09-18T05:39:32.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.7.2","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.7.2/manifests"},{"name":"v1.7.1","sha":"dc4fb3e8f45650500187f8cdbad5ac8ffdb7df0a","kind":"commit","published_at":"2024-08-01T20:55:24.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.7.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.7.1/manifests"},{"name":"v1.7.0","sha":"03fdde9dcfe69caf681ecaa1d97f8105a9c9a6c1","kind":"commit","published_at":"2024-07-31T11:33:47.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.7.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.7.0/manifests"},{"name":"v1.6.1","sha":"fd13c7dcdb840653bf81294d141da77d3f1f9e1f","kind":"commit","published_at":"2024-07-13T07:45:33.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.6.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"ce8d8a0a029c0d296ade752ecc8c3e1ce9eee47f","kind":"commit","published_at":"2024-03-22T19:55:20.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.6.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"74e6e200fd671340d4d4a874f83776def04f6c7b","kind":"commit","published_at":"2023-09-07T08:52:15.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.5.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"21ed3328364716fa30a4bf7502c913bbf0a90f45","kind":"commit","published_at":"2023-01-31T19:38:32.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.4.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"9b227220dfeb5d176b807c9bf27e1ee438935f78","kind":"commit","published_at":"2022-11-21T07:06:49.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.3.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.3.0/manifests"},{"name":"v1.2.1","sha":"b7249149a926f0d5f9f89897853eb7dc7506d27b","kind":"commit","published_at":"2022-07-30T09:35:26.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.2.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"38fd42acbaced11ff19f0a4ca2af44a308af5063","kind":"commit","published_at":"2022-07-19T11:39:58.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.2.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"ebc61e5af14cd9b436ba880cf19e849b05a04c29","kind":"commit","published_at":"2021-08-25T15:48:41.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.1.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"7b18c1c076adf9dff4dca28ffc1bbd8759860798","kind":"commit","published_at":"2021-01-11T17:07:46.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.0.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"064ad9a1a07e3fb62fb0e8ec17a637f45c0890ed","kind":"commit","published_at":"2020-12-22T23:30:20.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v1.0.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v1.0.0/manifests"},{"name":"v0.6.0","sha":"b7f75829ab521663b8906ae5bdfeadf47427d7b5","kind":"commit","published_at":"2020-10-20T23:08:25.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.6.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.6.0/manifests"},{"name":"v0.5.6","sha":"6fdb7391ce83dc71ccaeda6a54211ce723e5d9a5","kind":"commit","published_at":"2020-07-14T00:58:36.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.6","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.6/manifests"},{"name":"v0.5.5","sha":"008d3e508e2247dbfbf5a73918e2fe999a4e9158","kind":"commit","published_at":"2020-06-18T21:30:11.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.5","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.5/manifests"},{"name":"v0.5.4","sha":"fe6e67386451715c5d609c90a41e98ef80f0e1d1","kind":"commit","published_at":"2020-01-23T18:41:50.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.4","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.4/manifests"},{"name":"v0.5.3","sha":"8ae3bb2104fda9a02d55ac5635974ca1b5a49ebb","kind":"commit","published_at":"2019-12-12T20:00:21.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.3","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.3/manifests"},{"name":"v0.5.2","sha":"98951ba26cccb0d613edf0286976aebf48257af0","kind":"commit","published_at":"2019-11-27T20:59:28.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.2","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.2/manifests"},{"name":"v0.5.1","sha":"3cf91283f8b4019d84d9b57674cb788179f40f58","kind":"commit","published_at":"2019-11-26T22:15:57.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"b7c1f2a1357f7f9cdf2eb0187398fc80aaf7e28d","kind":"commit","published_at":"2019-11-25T19:19:30.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.5.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.5.0/manifests"},{"name":"v0.4.12","sha":"4948b1053b1af8f474a107b958dd0086ada06b17","kind":"commit","published_at":"2019-03-06T20:42:20.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.12","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.12/manifests"},{"name":"v0.4.11","sha":"b3248c8807684dbc3996d61fff47f9a630511662","kind":"commit","published_at":"2018-11-17T22:33:25.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.11","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.11/manifests"},{"name":"v0.4.10","sha":"456221d16521cf54cea0e6569669e47120a1b738","kind":"commit","published_at":"2018-09-04T20:31:26.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.10","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.10/manifests"},{"name":"v0.4.9","sha":"ed244d3b548d44d6bdc9d0fec5d0c21f9f898753","kind":"commit","published_at":"2018-07-23T02:30:41.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.9","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.9/manifests"},{"name":"v0.4.8","sha":"406b048ae6f60237f71881c34eee441af035a275","kind":"commit","published_at":"2018-05-25T23:50:42.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.8","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.8/manifests"},{"name":"v0.4.7","sha":"ef09e98fbcdad09d49b84b67f1584c3e64bbd508","kind":"commit","published_at":"2018-04-27T17:51:09.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.7","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.7/manifests"},{"name":"v0.4.6","sha":"e5c4c6028d5e33bd472dcba5f4ef4c4e1e5d4bbc","kind":"commit","published_at":"2018-01-08T17:11:42.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.6","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.6/manifests"},{"name":"v0.4.5","sha":"c8c46d8513a9641fc2cf480a998db4fd837ef113","kind":"commit","published_at":"2017-08-12T17:59:31.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.5","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.5/manifests"},{"name":"v0.4.4","sha":"3240fb9cd9566c6713a131e467fb51b0f7f43d60","kind":"commit","published_at":"2017-05-26T17:09:43.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.4","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.4/manifests"},{"name":"v0.4.3","sha":"e5c7ef3b867b862395eaa53f999da26487111dcc","kind":"commit","published_at":"2017-04-30T23:25:54.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.3","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.3/manifests"},{"name":"v0.4.2","sha":"1a6901cdcd58f7353e3841dc9c37fde889f7702b","kind":"commit","published_at":"2017-04-05T19:12:05.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.2","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"dcd6c184e43ca1617114cfb76b4b29d01626e4f4","kind":"commit","published_at":"2017-03-15T16:36:52.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.1","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"9eb5bd50b8254d34b7e4d64ca283992d6c541833","kind":"commit","published_at":"2017-02-24T18:35:53.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.4.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"12dfc417ce3de87ca0ae867636fcb9faeccdb242","kind":"commit","published_at":"2015-12-04T04:40:52.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.3.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.3.0/manifests"},{"name":"v0.1.0","sha":"053b97a6e785103f95ad6780ba20883920250635","kind":"commit","published_at":"2015-02-10T07:36:43.000Z","download_url":"https://codeload.github.com/tokio-rs/bytes/tar.gz/v0.1.0","html_url":"https://github.com/tokio-rs/bytes/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tokio-rs/bytes@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-06-02T00:03:42.152Z","dependent_packages_count":6245,"downloads":755808120,"downloads_period":"total","dependent_repos_count":57682,"rankings":{"downloads":0.026798874447273215,"dependent_repos_count":0.03455644336622073,"dependent_packages_count":0.014809904299808881,"stargazers_count":3.7729994287608344,"forks_count":2.996537303327997,"docker_downloads_count":0.07122858734669986,"average":1.1528217569248056},"purl":"pkg:cargo/bytes","advisories":[{"uuid":"GSA_kwCzR0hTQS00MzR4LXc2NmctcXczcs4ABR4z","url":"https://github.com/advisories/GHSA-434x-w66g-qw3r","title":"bytes has integer overflow in BytesMut::reserve","description":"# Details\n\nIn the unique reclaim path of `BytesMut::reserve`, the condition\n```rs\nif v_capacity \u003e= new_cap + offset\n```\nuses an unchecked addition. When `new_cap + offset` overflows `usize` in release builds, this condition may incorrectly pass, causing `self.cap` to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as `spare_capacity_mut()` then trust this corrupted `cap` value and may create out-of-bounds slices, leading to UB.\n\nThis behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks.\n\n## PoC\n\n```rs\nuse bytes::*;\n\nfn main() {\n    let mut a = BytesMut::from(\u0026b\"hello world\"[..]);\n    let mut b = a.split_off(5);\n\n    // Ensure b becomes the unique owner of the backing storage\n    drop(a);\n\n    // Trigger overflow in new_cap + offset inside reserve\n    b.reserve(usize::MAX - 6);\n\n    // This call relies on the corrupted cap and may cause UB \u0026 HBO\n    b.put_u8(b'h');\n}\n```\n\n# Workarounds\n\nUsers of `BytesMut::reserve` are only affected if integer overflow checks are configured to wrap. When integer overflow is configured to panic, this issue does not apply.\n\nThis vulnerability is also known as [RUSTSEC-2026-0007](https://rustsec.org/advisories/RUSTSEC-2026-0007.html).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-02-03T19:17:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","references":["https://github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r","https://github.com/tokio-rs/bytes/commit/d0293b0e35838123c51ca5dfdf468ecafee4398f","https://github.com/tokio-rs/bytes/releases/tag/v1.11.1","https://rustsec.org/advisories/RUSTSEC-2026-0007.html","https://nvd.nist.gov/vuln/detail/CVE-2026-25541","https://github.com/advisories/GHSA-434x-w66g-qw3r"],"source_kind":"github","identifiers":["GHSA-434x-w66g-qw3r","CVE-2026-25541"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-02-03T20:00:07.965Z","updated_at":"2026-05-23T03:02:05.724Z","epss_percentage":0.00019,"epss_percentile":0.05623,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00MzR4LXc2NmctcXczcs4ABR4z","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00MzR4LXc2NmctcXczcs4ABR4z","packages":[{"ecosystem":"cargo","package_name":"bytes","versions":[{"first_patched_version":"1.11.1","vulnerable_version_range":"\u003e= 1.2.1, \u003c 1.11.1"}],"purl":"pkg:cargo/bytes"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00MzR4LXc2NmctcXczcs4ABR4z/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/cargo/bytes","docker_dependents_count":875,"docker_downloads_count":52211283,"usage_url":"https://repos.ecosyste.ms/usage/cargo/bytes","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/cargo/bytes/dependencies","status":null,"funding_links":["https://github.com/sponsors/tokio-rs"],"critical":true,"issue_metadata":{"last_synced_at":"2026-05-29T22:24:53.378Z","issues_count":127,"pull_requests_count":285,"avg_time_to_close_issue":22248180.626506023,"avg_time_to_close_pull_request":11292715.466386555,"issues_closed_count":83,"pull_requests_closed_count":238,"pull_request_authors_count":94,"issue_authors_count":108,"avg_comments_per_issue":3.1811023622047245,"avg_comments_per_pull_request":1.6526315789473685,"merged_pull_requests_count":181,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":9,"past_year_pull_requests_count":28,"past_year_avg_time_to_close_issue":496797.0,"past_year_avg_time_to_close_pull_request":1005532.5384615385,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":13,"past_year_pull_request_authors_count":12,"past_year_issue_authors_count":8,"past_year_avg_comments_per_issue":1.777777777777778,"past_year_avg_comments_per_pull_request":0.8928571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tokio-rs%2Fbytes/issues","maintainers":[{"login":"taiki-e","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/taiki-e"},{"login":"seanmonstar","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/seanmonstar"},{"login":"carllerche","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/carllerche"},{"login":"mox692","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mox692"},{"login":"LucioFranco","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/LucioFranco"},{"login":"martin-g","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/martin-g"}],"active_maintainers":[{"login":"martin-g","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/martin-g"},{"login":"taiki-e","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/taiki-e"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/bytes/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/bytes/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/bytes/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/bytes/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/bytes/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/bytes/codemeta","maintainers":[{"uuid":"10","login":"carllerche","name":"Carl Lerche","email":null,"url":"https://github.com/carllerche","packages_count":292,"html_url":"https://crates.io/users/carllerche","role":null,"created_at":"2022-11-07T17:23:55.533Z","updated_at":"2022-11-07T17:23:55.533Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/carllerche/packages"},{"uuid":"6741","login":"Darksonn","name":"Alice Ryhl","email":null,"url":"https://github.com/Darksonn","packages_count":60,"html_url":"https://crates.io/users/Darksonn","role":null,"created_at":"2023-03-24T09:15:32.781Z","updated_at":"2023-03-24T09:15:32.781Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/Darksonn/packages"}]}