This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate hifitime

Dependencies

(12 total, 4 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 der^0.7.80.7.9up to date
 js-sys^0.30.3.70up to date
 lexical-core^0.8.51.0.1out of date
 num-traits^0.2.150.2.19up to date
 openssl ⚠️^0.100.10.66maybe insecure
 pyo3^0.20.00.22.3out of date
 reqwest^0.110.12.7out of date
 serde^1.0.1551.0.210up to date
 serde_derive^1.0.1551.0.210up to date
 tabled^0.15.00.16.0out of date
 wasm-bindgen^0.20.2.93up to date
 web-sys^0.30.3.70up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date
 iai^0.10.1.1up to date
 serde_json^1.0.911.0.128up to date

Security Vulnerabilities

openssl: `MemBio::get_buf` has undefined behavior with empty buffers

RUSTSEC-2024-0357

Previously, MemBio::get_buf called slice::from_raw_parts with a null-pointer, which violates the functions invariants, leading to undefined behavior. In debug builds this would produce an assertion failure. This is now fixed.