This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate embassy-stm32

Dependencies

(33 total, 11 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 bit_field^0.10.20.10.2up to date
 bxcan^0.7.00.8.0out of date
 cfg-if^1.0.01.0.0up to date
 chrono ⚠️^0.40.4.39maybe insecure
 cortex-m^0.7.60.7.7up to date
 cortex-m-rt>=0.6.15, <0.80.7.5up to date
 critical-section^1.11.2.0up to date
 defmt^0.30.3.10up to date
 document-features^0.2.70.2.10up to date
 embassy-embedded-hal^0.1.00.3.0out of date
 embassy-executor^0.5.00.7.0out of date
 embassy-futures^0.1.00.1.1up to date
 embassy-hal-internal^0.1.00.2.0out of date
 embassy-net-driver^0.2.00.2.0up to date
 embassy-sync^0.5.00.6.2out of date
 embassy-time^0.3.00.4.0out of date
 embassy-time-driver^0.10.2.0out of date
 embassy-usb-driver^0.1.00.1.0up to date
 embedded-hal^1.01.0.0up to date
 embedded-hal-async^1.01.0.0up to date
 embedded-hal-nb^1.01.0.0up to date
 embedded-io^0.6.00.6.1up to date
 embedded-io-async^0.6.10.6.1up to date
 embedded-storage^0.3.10.3.1up to date
 embedded-storage-async^0.4.10.4.1up to date
 futures^0.3.170.3.31up to date
 log^0.4.140.4.25up to date
 nb^1.0.01.1.0up to date
 rand_core^0.6.30.9.0out of date
 sdio-host^0.5.00.9.0out of date
 stm32-fmc^0.3.00.4.0out of date
 stm32-metapac^1516.0.0out of date
 vcell^0.1.30.1.3up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 critical-section^1.11.2.0up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References