This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate cli-batteries

Dependencies

(41 total, 18 outdated, 1 insecure)

CrateRequiredLatestStatus
 ansi_term^0.12.10.12.1up to date
 chrono^0.40.4.45up to date
 clap^4.04.6.7up to date
 color-eyre^0.60.6.5up to date
 console-subscriber^0.10.5.0out of date
 criterion^0.40.8.2out of date
 eyre^0.60.6.14up to date
 futures^0.30.3.34up to date
 heck^0.40.5.0out of date
 hex^0.4.30.4.3up to date
 hex-literal^0.31.1.0out of date
 http^0.2.81.5.0out of date
 hyper^0.14.171.12.0out of date
 itertools^0.100.15.0out of date
 mimalloc^0.10.1.52up to date
 num_cpus^1.13.11.17.0up to date
 once_cell^1.121.21.4up to date
 opentelemetry^0.180.33.1out of date
 opentelemetry-http^0.70.33.1out of date
 opentelemetry-otlp^0.110.33.1out of date
 opentelemetry-semantic-conventions^0.100.33.1out of date
 prometheus^0.130.14.0out of date
 proptest^1.01.12.0up to date
 rand^0.8.50.10.3out of date
 rand_chacha^0.3.10.10.0out of date
 rayon^1.5.31.12.0up to date
 serde^1.01.0.229up to date
 serde_json^1.01.0.154up to date
 thiserror^1.02.0.21out of date
 time^0.3.50.3.55up to date
 tokio^1.171.54.1up to date
 tracing^0.10.1.44up to date
 tracing-error^0.20.2.1up to date
 tracing-flame^0.2.00.2.0up to date
 tracing-futures^0.20.2.5up to date
 tracing-log^0.1.30.2.0out of date
 tracing-opentelemetry^0.180.34.0out of date
 tracing-serde^0.10.2.0out of date
 tracing-subscriber^0.3.150.3.23up to date
 url^2.22.5.8up to date
 users ⚠️^0.110.11.0insecure

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 proptest^1.01.12.0up to date
 tokio^1.171.54.1up to date
 tracing-test^0.20.2.6up to date

Security Vulnerabilities

users: `root` appended to group listings

RUSTSEC-2025-0040

Affected versions append root to group listings, unless the correct listing has exactly 1024 groups.

This affects both:

  • The supplementary groups of a user
  • The group access list of the current process

If the caller uses this information for access control, this may lead to privilege escalation.

This crate is not currently maintained, so a patched version is not available.

Versions older than 0.8.0 do not contain the affected functions, so downgrading to them is a workaround.

Recommended alternatives

  • uzers (an actively maintained fork of the users crate)
  • sysinfo