This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate binance

Dependencies

(9 total, 4 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 error-chain^0.120.12.4up to date
 hex^0.30.4.3out of date
 reqwest^0.90.12.4out of date
 ring^0.160.17.8out of date
 serde^1.01.0.198up to date
 serde_derive^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 tungstenite ⚠️^0.90.21.0out of date
 url^2.12.5.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 csv^1.0.01.3.0up to date

Security Vulnerabilities

tungstenite: Tungstenite allows remote attackers to cause a denial of service

RUSTSEC-2023-0065

The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).