This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate fvm

Dependencies

(28 total, 4 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 ambassador^0.4.10.5.1out of date
 anyhow^1.0.971.0.102up to date
 arbitrary^1.4.11.4.2up to date
 cid^0.11.10.11.3up to date
 derive_more^2.0.12.1.1up to date
 filecoin-proofs-api^1919.1.0up to date
 fvm-wasm-instrument^0.4.00.4.0up to date
 fvm_ipld_amt^0.7.70.7.7up to date
 fvm_ipld_blockstore^0.3.20.3.2up to date
 fvm_ipld_encoding^0.5.40.5.4up to date
 fvm_ipld_hamt^0.10.60.10.6up to date
 fvm_shared~4.8.24.8.2up to date
 lazy_static^1.5.01.5.0up to date
 log^0.4.270.4.32up to date
 minstant^0.1.70.1.7up to date
 multihash-codetable^0.20.2.2up to date
 multihash-derive^0.9.10.9.3up to date
 num-traits^0.2.190.2.19up to date
 quickcheck^1.0.31.1.0up to date
 rand^0.8.50.10.1out of date
 rayon^11.12.0up to date
 replace_with^0.1.70.1.8up to date
 serde^1.0.2281.0.228up to date
 static_assertions^1.1.01.1.0up to date
 thiserror^2.0.122.0.18up to date
 wasmtime ⚠️^3645.0.1out of date
 wasmtime-environ^3645.0.1out of date
 yastl^0.1.20.1.2up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 coverage-helper^0.2.40.2.4up to date
 pretty_assertions^1.4.11.4.1up to date

Security Vulnerabilities

wasmtime: Panic when allocating a table exceeding the size of the host's address space

RUSTSEC-2026-0114

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p8xm-42r7-89xg For more information see the GitHub-hosted security advisory.