This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate argonautica

Dependencies

(24 total, 15 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 actix-web ⚠️^0.64.5.1out of date
 argon2rs^0.2.50.2.5up to date
 base64^0.90.22.1out of date
 bindgen^0.370.69.4out of date
 bitflags^1.02.5.0out of date
 blake2-rfc^0.20.2.18up to date
 cbindgen^0.60.26.0out of date
 criterion^0.20.5.1out of date
 env_logger^0.50.11.3out of date
 failure^0.10.1.8up to date
 futures^0.10.3.30out of date
 futures-cpupool^0.10.1.8up to date
 futures-timer^0.13.0.3out of date
 libc^0.20.2.155up to date
 log^0.40.4.21up to date
 md5^0.3.70.7.0out of date
 nom^4.07.1.3out of date
 num_cpus^1.81.16.0up to date
 rand^0.50.8.5out of date
 rust-argon2^0.3.02.1.0out of date
 scopeguard^0.31.2.0out of date
 serde^1.01.0.202up to date
 sha2^0.7.10.10.8out of date
 tempdir^0.30.3.7up to date

Dev dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 dotenv^0.130.15.0out of date
 lazy_static^1.01.4.0up to date
 serde_json^1.01.0.117up to date

Security Vulnerabilities

actix-web: Multiple memory safety issues

RUSTSEC-2018-0019

Affected versions contain multiple memory safety issues, such as:

  • Unsoundly coercing immutable references to mutable references
  • Unsoundly extending lifetimes of strings
  • Adding the Send marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free.

A significant refactoring effort has been conducted to resolve these issues.