This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate dioxus-fullstack

Dependencies

(39 total, 4 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 async-trait^0.1.580.1.83up to date
 aws-lc-rs^1.8.11.12.0up to date
 axum^0.7.00.7.9up to date
 base64^0.22.10.22.1up to date
 bytes^1.4.01.9.0up to date
 ciborium^0.2.10.2.2up to date
 dioxus-cli-config^0.6.10.6.1up to date
 dioxus-desktop^0.6.10.6.1up to date
 dioxus-devtools^0.6.10.6.1up to date
 dioxus-history^0.6.10.6.1up to date
 dioxus-interpreter-js^0.6.10.6.1up to date
 dioxus-isrg^0.6.10.6.1up to date
 dioxus-lib^0.6.10.6.1up to date
 dioxus-mobile^0.6.10.6.1up to date
 dioxus-ssr^0.6.10.6.1up to date
 dioxus-web^0.6.10.6.1up to date
 dioxus_server_macro^0.6.10.6.1up to date
 futures-channel^0.3.210.3.31up to date
 futures-util^0.30.3.31up to date
 generational-box^0.6.10.6.1up to date
 http^1.0.01.2.0up to date
 hyper^1.0.01.5.2up to date
 hyper-rustls^0.27.20.27.5up to date
 once_cell^1.17.11.20.2up to date
 parking_lot^0.12.10.12.3up to date
 pin-project^1.1.21.1.7up to date
 rustls ⚠️^0.23.120.23.20maybe insecure
 serde^1.0.1591.0.216up to date
 server_fn^0.6.50.7.2out of date
 thiserror^1.0.402.0.9out of date
 tokio^1.401.42.0up to date
 tokio-stream^0.1.120.1.17up to date
 tokio-util^0.7.80.7.13up to date
 tower^0.4.130.5.2out of date
 tower-http^0.5.20.6.2out of date
 tower-layer^0.3.20.3.3up to date
 tracing^0.1.370.1.41up to date
 tracing-futures^0.2.50.2.5up to date
 web-sys^0.3.610.3.76up to date

Security Vulnerabilities

rustls: rustls network-reachable panic in `Acceptor::accept`

RUSTSEC-2024-0399

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use rustls::server::Acceptor::accept() are affected.

Servers that use tokio-rustls's LazyConfigAcceptor API are affected.

Servers that use tokio-rustls's TlsAcceptor API are not affected.

Servers that use rustls-ffi's rustls_acceptor_accept API are affected.