BinaryArray performs insufficient validation on creation, which allows out-of-bounds reads in safe code.
[](https://deps.rs/crate/argminmax/0.6.3)
This project contains known security vulnerabilities. Find detailed information at the bottom.
argminmax(5 total, 1 insecure, 1 possibly insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| arrow ⚠️ | >0 | 55.1.0 | maybe insecure |
| arrow2 ⚠️ | >0.0 | 0.18.0 | insecure |
| half | ^2.6 | 2.6.0 | up to date |
| ndarray | ^0.16.1 | 0.16.1 | up to date |
| num-traits | ^0.2 | 0.2.19 | up to date |
(6 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| codspeed-criterion-compat | ^2.10.1 | 2.10.1 | up to date |
| criterion | ^0.5.1 | 0.6.0 | out of date |
| half | ^2.6 | 2.6.0 | up to date |
| rand | ^0.9 | 0.9.1 | up to date |
| rstest | ^0.25 | 0.25.0 | up to date |
| rstest_reuse | ^0.7 | 0.7.0 | up to date |
arrow: `BinaryArray` does not perform bound checks on reading values and offsetsBinaryArray performs insufficient validation on creation, which allows out-of-bounds reads in safe code.
arrow: `DecimalArray` does not perform bound checks on accessing values and offsetsDecimalArray performs insufficient bounds checks,
which allows out-of-bounds reads in safe code
if the length of the backing buffer is not a multiple of 16.
arrow: `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsetsFixedSizeBinaryArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code.
arrow2: Out of bounds access in public safe APIRows::row_unchecked() allows out of bounds access to the underlying
buffer without sufficient checks.
The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead.