BinaryArray
performs insufficient validation on creation, which allows out-of-bounds reads in safe code.
datafusion 0.3.4
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
datafusion
(11 total, 6 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
arrow ⚠️ | ^0.10.0 | 51.0.0 | out of date |
byteorder | ^1 | 1.5.0 | up to date |
bytes | ^0.4 | 1.6.0 | out of date |
clap | ^2.31.2 | 4.5.4 | out of date |
csv | ^1.0.0 | 1.3.0 | up to date |
datafusion-rustyline | ^2.0.0-alpha-20180628 | N/A | up to date |
fnv | ^1.0.3 | 1.0.7 | up to date |
json | ^0.11.13 | 0.12.4 | out of date |
lazy_static | ^1.0 | 1.4.0 | up to date |
parquet | ^0.4.1 | 51.0.0 | out of date |
sqlparser | ^0.1.8 | 0.44.0 | out of date |
(1 total, 1 outdated)
Crate | Required | Latest | Status |
---|---|---|---|
criterion | ^0.2.0 | 0.5.1 | out of date |
arrow
: `BinaryArray` does not perform bound checks on reading values and offsetsBinaryArray
performs insufficient validation on creation, which allows out-of-bounds reads in safe code.
arrow
: `DecimalArray` does not perform bound checks on accessing values and offsetsDecimalArray
performs insufficient bounds checks,
which allows out-of-bounds reads in safe code
if the length of the backing buffer is not a multiple of 16.
arrow
: `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsetsFixedSizeBinaryArray
performs insufficient bounds checks, which allows out-of-bounds reads in safe code.