This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate amethyst_ui

Dependencies

(21 total, 16 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 amethyst_assets^0.4.00.15.3out of date
 amethyst_audio^0.3.00.15.3out of date
 amethyst_core^0.3.00.15.3out of date
 amethyst_input^0.4.00.15.3out of date
 amethyst_renderer^0.8.00.10.4out of date
 clipboard^0.40.5.0out of date
 derivative^1.02.2.0out of date
 fnv^11.0.7up to date
 gfx^0.170.18.3out of date
 gfx_glyph^0.11.00.17.1out of date
 glsl-layout ⚠️^0.1.10.5.0out of date
 hibitset^0.5.00.6.4out of date
 log^0.40.4.21up to date
 ron^0.20.8.1out of date
 serde^1.01.0.198up to date
 shred^0.70.16.0out of date
 shred-derive^0.50.7.0out of date
 thread_profiler^0.10.3.0out of date
 unicode-normalization^0.10.1.23up to date
 unicode-segmentation^1.21.11.0up to date
 winit^0.150.29.15out of date

Security Vulnerabilities

glsl-layout: Double drop upon panic in 'fn map_array()'

RUSTSEC-2021-0005

Affected versions of this crate did not guard against panic within the user-provided function f (2nd parameter of fn map_array), and thus panic within f causes double drop of a single object.

The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within ManuallyDrop<T>.