This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate actix-web-async-await

Dependencies

(3 total, 2 outdated, 1 insecure)

CrateRequiredLatestStatus
 actix-web ⚠️^0.7.134.15.0insecure
 futures^0.10.3.34out of date
 tokio-async-await^0.1.40.1.7up to date

Dev dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 failure^0.10.1.8up to date
 tokio^0.11.53.1out of date

Security Vulnerabilities

actix-web: Multiple memory safety issues

RUSTSEC-2018-0019

Affected versions contain multiple memory safety issues, such as:

  • Unsoundly coercing immutable references to mutable references
  • Unsoundly extending lifetimes of strings
  • Adding the Send marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free.

A significant refactoring effort has been conducted to resolve these issues.