This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate actix-utils

Dependencies

(10 total, 6 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 actix-codec ⚠️^0.2.00.5.2out of date
 actix-rt^1.0.02.9.0out of date
 actix-service^1.0.12.0.2out of date
 bitflags^1.22.5.0out of date
 bytes^0.5.31.6.0out of date
 either^1.5.31.10.0up to date
 futures^0.3.10.3.30up to date
 log^0.40.4.21up to date
 pin-project^0.4.61.1.5out of date
 slab^0.40.4.9up to date

Security Vulnerabilities

actix-codec: Use-after-free in Framed due to lack of pinning

RUSTSEC-2020-0049

Affected versions of this crate did not require the buffer wrapped in Framed to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free.

The flaw was corrected by making the affected functions accept Pin<&mut Self> instead of &mut self.