This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate hnsw_rs

Dependencies

(17 total, 3 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anndists^0.10.1.3up to date
 anyhow^1.01.0.100up to date
 bincode^1.32.0.1out of date
 cfg-if^1.01.0.4up to date
 cpu-time^1.01.0.0up to date
 env_logger^0.110.11.8up to date
 hashbrown ⚠️^0.150.16.0out of date
 indexmap^2.92.12.0up to date
 lazy_static^1.41.5.0up to date
 log^0.40.4.28up to date
 mmap-rs^0.60.7.0out of date
 num-traits^0.20.2.19up to date
 num_cpus^1.161.17.0up to date
 parking_lot^0.120.12.5up to date
 rand^0.90.9.2up to date
 rayon^1.101.11.0up to date
 serde^1.01.0.228up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 hdf5-metno^0.10.00.10.2up to date
 ndarray^0.160.16.1up to date
 skiplist^0.60.6.0up to date
 tempfile^33.23.0up to date

Security Vulnerabilities

hashbrown: Borsh serialization of HashMap is non-canonical

RUSTSEC-2024-0402

The borsh serialization of the HashMap did not follow the borsh specification. It potentially produced non-canonical encodings dependent on insertion order. It also did not perform canonicty checks on decoding.

This can result in consensus splits and cause equivalent objects to be considered distinct.

This was patched in 0.15.1.