This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate cargo

Dependencies

(70 total, 5 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 annotate-snippets^0.11.20.11.4up to date
 anstream^0.6.130.6.15up to date
 anstyle^1.0.61.0.8up to date
 anyhow^1.0.821.0.89up to date
 base64^0.22.10.22.1up to date
 bytesize^1.31.3.0up to date
 cargo-credential^0.4.20.4.6up to date
 cargo-credential-libsecret^0.4.70.4.7up to date
 cargo-credential-macos-keychain^0.4.70.4.7up to date
 cargo-credential-wincred^0.4.70.4.7up to date
 cargo-platform^0.1.50.1.8up to date
 cargo-util^0.2.140.2.14up to date
 cargo-util-schemas^0.5.00.5.0up to date
 clap^4.5.44.5.20up to date
 color-print^0.3.60.3.6up to date
 crates-io^0.40.40.40.4up to date
 curl^0.4.460.4.47up to date
 curl-sys^0.4.720.4.77+curl-8.10.1up to date
 filetime^0.2.230.2.25up to date
 flate2^1.0.301.0.34up to date
 git2^0.19.00.19.0up to date
 git2-curl^0.20.00.20.0up to date
 gix^0.64.00.66.0out of date
 glob^0.3.10.3.1up to date
 hex^0.4.30.4.3up to date
 hmac^0.12.10.12.1up to date
 home^0.5.90.5.9up to date
 http-auth^0.1.90.1.10up to date
 humantime^2.1.02.1.0up to date
 ignore^0.4.220.4.23up to date
 im-rc^15.1.015.1.0up to date
 indexmap^2.2.62.6.0up to date
 itertools^0.13.00.13.0up to date
 jobserver^0.1.280.1.32up to date
 lazycell^1.3.01.3.0up to date
 libc^0.2.1540.2.159up to date
 libgit2-sys^0.17.00.17.0+1.8.1up to date
 memchr^2.7.22.7.4up to date
 opener^0.7.00.7.2up to date
 openssl ⚠️^0.10.570.10.66maybe insecure
 os_info^3.8.23.8.2up to date
 pasetors^0.6.80.7.0out of date
 pathdiff^0.2.10.2.2up to date
 rand^0.8.50.8.5up to date
 regex^1.10.41.11.0up to date
 rusqlite^0.31.00.32.1out of date
 rustfix^0.8.20.8.5up to date
 same-file^1.0.61.0.6up to date
 semver^1.0.221.0.23up to date
 serde^1.0.1991.0.210up to date
 serde-untagged^0.1.50.1.6up to date
 serde_ignored^0.1.100.1.10up to date
 serde_json^1.0.1161.0.128up to date
 sha1^0.10.60.10.6up to date
 shell-escape^0.1.50.1.5up to date
 supports-hyperlinks^3.0.03.0.0up to date
 supports-unicode^3.0.03.0.0up to date
 tar^0.4.400.4.42up to date
 tempfile^3.10.13.13.0up to date
 time^0.3.360.3.36up to date
 toml^0.8.140.8.19up to date
 toml_edit^0.22.140.22.22up to date
 tracing^0.1.400.1.40up to date
 tracing-chrome^0.7.20.7.2up to date
 tracing-subscriber^0.3.180.3.18up to date
 unicase^2.7.02.7.0up to date
 unicode-width^0.1.120.2.0out of date
 url^2.5.02.5.2up to date
 walkdir^2.5.02.5.0up to date
 windows-sys^0.520.59.0out of date

Dev dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 annotate-snippets^0.11.20.11.4up to date
 cargo-test-support^0.3.00.3.0up to date
 gix^0.64.00.66.0out of date
 same-file^1.0.61.0.6up to date
 snapbox^0.6.90.6.18up to date

Security Vulnerabilities

openssl: `MemBio::get_buf` has undefined behavior with empty buffers

RUSTSEC-2024-0357

Previously, MemBio::get_buf called slice::from_raw_parts with a null-pointer, which violates the functions invariants, leading to undefined behavior. In debug builds this would produce an assertion failure. This is now fixed.