This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate azul-layout

Dependencies

(43 total, 8 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 accesskit^0.21.10.24.0out of date
 allsorts^0.16.10.16.1up to date
 azul-core^0.0.70.0.7up to date
 azul-css^0.0.70.0.7up to date
 base64^0.22.10.22.1up to date
 chrono ⚠️^0.40.4.44maybe insecure
 dirs^6.06.0.0up to date
 fluent^0.170.17.0up to date
 fluent-syntax^0.120.12.0up to date
 geo^0.31.00.32.0out of date
 geo-booleanop^0.3.20.3.2up to date
 gl-context-loader^0.1.80.1.10up to date
 hyphenation^0.8.40.8.4up to date
 icu^2.12.1.1up to date
 icu_provider_blob^2.12.1.1up to date
 image^0.250.25.9up to date
 intl-memoizer^0.50.5.3up to date
 lru^0.16.10.16.3up to date
 lyon^1.0.11.0.16up to date
 material-icons^0.30.3.0up to date
 resvg^0.45.00.47.0out of date
 roxmltree^0.21.10.21.1up to date
 rust-fontconfig^2.0.02.0.0up to date
 serde^1.01.0.228up to date
 serde_json^1.01.0.149up to date
 strfmt^0.20.2.5up to date
 taffy^0.9.10.9.2up to date
 tfd^0.10.1.0up to date
 thiserror^2.0.172.0.18up to date
 tiny-skia^0.11.40.12.0out of date
 tinyvec^1.9.01.10.0up to date
 unic-langid^0.90.9.6up to date
 unicode-bidi^0.3.180.3.18up to date
 unicode-normalization^0.1.240.1.25up to date
 unicode-segmentation^1.12.01.12.0up to date
 ureq^2.93.2.0out of date
 url^2.52.5.8up to date
 usvg^0.45.00.47.0out of date
 writeable^0.60.6.2up to date
 xmlparser^0.13.60.13.6up to date
 xmlwriter^0.1.00.1.0up to date
 zip^2.18.1.0out of date
 zune-jpeg^0.40.5.12out of date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References