crossbeam 0.8.5

This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate `crossbeam`

Dependencies

(5 total, 1 possibly insecure)

Crate	Required	Latest	Status
crossbeam-channel	`^0.5.10`	`0.5.17`	up to date
crossbeam-deque	`^0.8.4`	`0.8.8`	up to date
crossbeam-epoch ⚠️	`^0.9.17`	`0.9.21`	maybe insecure
crossbeam-queue	`^0.3.10`	`0.3.14`	up to date
crossbeam-utils	`^0.8.18`	`0.8.23`	up to date

Dev dependencies

(1 total, 1 outdated)

Crate	Required	Latest	Status
rand	`^0.8`	`0.10.2`	out of date

Security Vulnerabilities

`crossbeam-epoch`: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

RUSTSEC-2026-0204

Affected versions of fmt::Display dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with Atomic::null or Shared::null. fmt::Debug impls and pre-0.9 fmt::Display impls, which do not dereference pointers, are not affected by this issue.