a public repository, read by nittim

CluvexStudio/Aether security audit

What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.

A Rust userspace WARP core for censored networks, built around MASQUE over HTTP/3 and HTTP/2.

Rust · 2.4k stars · last push November 3, 2026

CluvexStudio/Aether is a Rust userspace WARP core designed for censored networks. It builds around MASQUE over HTTP/3 and HTTP/2 to provide network access in restricted environments.

Nittim scanned 340 of 345 files in the repository and found evidence of concern. The scan identified 2 vulnerable runtime dependencies. The package quinn-proto has 2 known vulnerabilities: RUSTSEC-2026-0340 and RUSTSEC-2026-0343.

Developers should run an audit to understand the details of these vulnerabilities and their impact on CluvexStudio/Aether. After addressing the issues, rescan the repository to confirm the vulnerabilities have been resolved.

Written from nittim's own scan on November 5, 2026; rescanned when the repository changes.

No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.

What was read — rule-based scan

Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.

Read 340 of 345 eligible files. Commit 9ebdcc9. 2026-11-05.

What the scanners found

Committed secrets on production paths
0
Vulnerable runtime dependencies
2

quinn-proto (RUSTSEC-2026-0340, RUSTSEC-2026-0343)

Run it yourself

Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.

Scan your own repo

Questions

What did nittim read in CluvexStudio/Aether?
nittim read 340 of 345 eligible files in CluvexStudio/Aether. The reading ran on November 5, 2026. It was taken at commit 9ebdcc9.
Did nittim find committed secrets or vulnerable dependencies in CluvexStudio/Aether?
The rule-based scan found 0 committed secrets and 2 vulnerable dependencies in CluvexStudio/Aether. Affected: quinn-proto (RUSTSEC-2026-0340, RUSTSEC-2026-0343).
Is CluvexStudio/Aether production ready?
A free scan is not a verdict. A full audit gives one.

More like this

More Rust repositories →

Add the badge to your README
README badge
nittim verdict badge for CluvexStudio/Aether[![nittim](https://nittim.com/api/badge/CluvexStudio/Aether)](https://nittim.com/library/CluvexStudio/Aether)