This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate bevy_animation

Dependencies

(22 total, 1 possibly insecure)

CrateRequiredLatestStatus
 bevy_app^0.14.20.14.2up to date
 bevy_asset^0.14.20.14.2up to date
 bevy_color^0.14.30.14.3up to date
 bevy_core^0.14.20.14.2up to date
 bevy_derive^0.14.20.14.2up to date
 bevy_ecs^0.14.20.14.2up to date
 bevy_hierarchy^0.14.20.14.2up to date
 bevy_log^0.14.20.14.2up to date
 bevy_math^0.14.20.14.2up to date
 bevy_reflect^0.14.20.14.2up to date
 bevy_render^0.14.20.14.2up to date
 bevy_time^0.14.20.14.2up to date
 bevy_transform^0.14.20.14.2up to date
 bevy_utils^0.14.20.14.2up to date
 blake3^1.01.5.4up to date
 fixedbitset^0.50.5.7up to date
 petgraph^0.60.6.5up to date
 ron^0.80.8.1up to date
 serde^11.0.210up to date
 thiserror^11.0.63up to date
 thread_local ⚠️^11.1.8maybe insecure
 uuid^1.71.10.0up to date

Security Vulnerabilities

thread_local: Data race in `Iter` and `IterMut`

RUSTSEC-2022-0006

In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race when iterating over a ThreadLocal's values.

Crates using Iter::next, or IterMut::next are affected by this issue.