This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate flume

Dependencies

(4 total, 2 outdated, 1 insecure)

CrateRequiredLatestStatus
 futures-core^0.3.50.3.34up to date
 futures-sink^0.3.50.3.34up to date
 nanorand ⚠️^0.40.8.0insecure
 spinning_top^0.20.3.0out of date

Dev dependencies

(7 total, 4 outdated)

CrateRequiredLatestStatus
 async-std^1.51.13.2up to date
 criterion^0.3.10.8.2out of date
 crossbeam-channel^0.40.5.17out of date
 crossbeam-utils^0.70.8.23out of date
 futures^0.30.3.34up to date
 rand^0.70.10.3out of date
 waker-fn^1.1.01.2.0up to date

Security Vulnerabilities

nanorand: nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

RUSTSEC-2020-0089

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion.

This often manifested as RNGs returning nothing but 0, including the cryptographically secure ChaCha random number generator..