This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate avian2d

Dependencies

(20 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 approx^0.50.5.1up to date
 arrayvec^0.70.7.8up to date
 avian_derive^0.20.2.3up to date
 bevy^0.19.00.19.1up to date
 bevy_heavy^0.50.5.0up to date
 bevy_math^0.19.00.19.1up to date
 bevy_transform_interpolation^0.50.5.0up to date
 bitflags^2.5.02.13.1up to date
 derive_more^22.1.1up to date
 disqualified^1.01.0.0up to date
 glam_matrix_extras^0.30.3.0up to date
 itertools^0.150.15.0up to date
 libm^0.20.2.16up to date
 obvhs^0.30.3.3up to date
 parry2d^0.270.30.2out of date
 parry2d-f64^0.270.30.2out of date
 serde^11.0.229up to date
 smallvec^1.151.15.2up to date
 thiserror^22.0.20up to date
 thread_local ⚠️^1.11.1.10maybe insecure

Dev dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 bevy^0.19.00.19.1up to date
 bevy_heavy^0.50.5.0up to date
 bevy_mod_debugdump^0.160.16.0up to date
 bytemuck^1.191.25.2up to date
 criterion^0.80.8.2up to date
 glam^0.320.33.5out of date

Security Vulnerabilities

thread_local: Data race in `Iter` and `IterMut`

RUSTSEC-2022-0006

In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race when iterating over a ThreadLocal's values.

Crates using Iter::next, or IterMut::next are affected by this issue.