This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate hifitime

Dependencies

(12 total, 4 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 der^0.7.80.7.9up to date
 js-sys^0.30.3.72up to date
 lexical-core^0.8.51.0.2out of date
 num-traits^0.2.150.2.19up to date
 openssl ⚠️^0.100.10.68maybe insecure
 pyo3^0.20.00.23.0out of date
 reqwest^0.110.12.9out of date
 serde^1.0.1551.0.215up to date
 serde_derive^1.0.1551.0.215up to date
 tabled^0.15.00.16.0out of date
 wasm-bindgen^0.20.2.95up to date
 web-sys^0.30.3.72up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date
 iai^0.10.1.1up to date
 serde_json^1.0.911.0.132up to date

Security Vulnerabilities

openssl: `MemBio::get_buf` has undefined behavior with empty buffers

RUSTSEC-2024-0357

Previously, MemBio::get_buf called slice::from_raw_parts with a null-pointer, which violates the functions invariants, leading to undefined behavior. In debug builds this would produce an assertion failure. This is now fixed.