This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate bevy_render

Dependencies

(41 total, 6 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 async-channel^2.1.02.3.1up to date
 basis-universal^0.3.00.3.1up to date
 bevy_app^0.13.20.13.2up to date
 bevy_asset^0.13.20.13.2up to date
 bevy_core^0.13.20.13.2up to date
 bevy_derive^0.13.20.13.2up to date
 bevy_ecs^0.13.20.13.2up to date
 bevy_encase_derive^0.13.20.13.2up to date
 bevy_hierarchy^0.13.20.13.2up to date
 bevy_log^0.13.20.13.2up to date
 bevy_math^0.13.20.13.2up to date
 bevy_mikktspace^0.13.20.13.2up to date
 bevy_reflect^0.13.20.13.2up to date
 bevy_render_macros^0.13.20.13.2up to date
 bevy_tasks^0.13.20.13.2up to date
 bevy_time^0.13.20.13.2up to date
 bevy_transform^0.13.20.13.2up to date
 bevy_utils^0.13.20.13.2up to date
 bevy_window^0.13.20.13.2up to date
 bitflags^2.32.5.0up to date
 bytemuck^1.51.16.0up to date
 codespan-reporting^0.11.00.11.1up to date
 ddsfile^0.5.00.5.2up to date
 downcast-rs^1.2.01.2.1up to date
 encase^0.70.8.0out of date
 flate2^1.0.221.0.30up to date
 futures-lite^2.0.12.3.0up to date
 hexasphere^10.012.0.0out of date
 image^0.240.25.1out of date
 js-sys^0.30.3.69up to date
 ktx2^0.3.00.3.0up to date
 naga^0.190.20.0out of date
 naga_oil^0.130.13.0up to date
 profiling^11.0.15up to date
 ruzstd^0.5.00.6.0out of date
 serde^11.0.202up to date
 thiserror^1.01.0.61up to date
 thread_local ⚠️^1.11.1.8maybe insecure
 wasm-bindgen^0.20.2.92up to date
 web-sys^0.3.670.3.69up to date
 wgpu^0.19.30.20.0out of date

Security Vulnerabilities

thread_local: Data race in `Iter` and `IterMut`

RUSTSEC-2022-0006

In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race when iterating over a ThreadLocal's values.

Crates using Iter::next, or IterMut::next are affected by this issue.