This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate bevy_egui

Dependencies

(34 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 arboard^3.2.03.6.1up to date
 bevy_a11y^0.16.00.16.1up to date
 bevy_app^0.16.00.16.1up to date
 bevy_asset^0.16.00.16.1up to date
 bevy_core_pipeline^0.16.10.16.1up to date
 bevy_derive^0.16.00.16.1up to date
 bevy_ecs^0.16.00.16.1up to date
 bevy_image^0.16.00.16.1up to date
 bevy_input^0.16.00.16.1up to date
 bevy_log^0.16.00.16.1up to date
 bevy_math^0.16.00.16.1up to date
 bevy_picking^0.16.00.16.1up to date
 bevy_platform^0.16.00.16.1up to date
 bevy_reflect^0.16.00.16.1up to date
 bevy_render^0.16.00.16.1up to date
 bevy_tasks^0.16.00.16.1up to date
 bevy_time^0.16.00.16.1up to date
 bevy_transform^0.16.10.16.1up to date
 bevy_ui^0.16.10.16.1up to date
 bevy_window^0.16.00.16.1up to date
 bevy_winit^0.16.00.16.1up to date
 bytemuck^11.23.2up to date
 crossbeam-channel^0.5.80.5.15up to date
 egui^0.320.32.1up to date
 encase^0.100.11.2out of date
 image^0.25.50.25.6up to date
 js-sys^0.3.630.3.77up to date
 thread_local ⚠️^1.1.01.1.9maybe insecure
 wasm-bindgen^0.2.930.2.100up to date
 wasm-bindgen-futures^0.4.360.4.50up to date
 web-sys^0.3.740.3.77up to date
 webbrowser^1.0.11.0.5up to date
 wgpu-types^24.026.0.0out of date
 winit^0.300.30.12up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 bevy^0.16.00.16.1up to date
 egui^0.320.32.1up to date
 rfd^0.150.15.4up to date
 version-sync^0.9.50.9.5up to date

Security Vulnerabilities

thread_local: Data race in `Iter` and `IterMut`

RUSTSEC-2022-0006

In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race when iterating over a ThreadLocal's values.

Crates using Iter::next, or IterMut::next are affected by this issue.