This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate deno_permissions

Dependencies

(22 total, 6 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 capacity_builder^0.5.00.5.0up to date
 chrono ⚠️^0.40.4.42maybe insecure
 deno_error=0.7.10.7.3out of date
 deno_path_util=0.6.40.6.4up to date
 deno_terminal=0.2.30.2.3up to date
 deno_unsync^0.4.40.4.4up to date
 fqdn^0.4.60.5.0out of date
 ipnetwork^0.20.00.21.1out of date
 libc^0.2.1680.2.178up to date
 log^0.4.280.4.29up to date
 nix=0.27.10.30.1out of date
 once_cell^1.17.11.21.3up to date
 parking_lot^0.12.00.12.5up to date
 percent-encoding^2.3.02.3.2up to date
 serde^1.0.1491.0.228up to date
 serde_json^1.0.851.0.145up to date
 sys_traits=0.1.170.1.21out of date
 thiserror^2.0.122.0.17up to date
 url^2.52.5.7up to date
 which^8.0.08.0.0up to date
 winapi=0.3.90.3.9up to date
 windows-sys^0.59.00.61.2out of date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 sys_traits=0.1.170.1.21out of date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References