This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate hnsw_rs

Dependencies

(17 total, 3 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anndists^0.10.1.4up to date
 anyhow^1.01.0.102up to date
 bincode^1.33.0.0out of date
 cfg-if^1.01.0.4up to date
 cpu-time^1.01.0.0up to date
 env_logger^0.110.11.9up to date
 hashbrown ⚠️^0.150.16.1out of date
 indexmap>=2.112.13.0up to date
 lazy_static^1.41.5.0up to date
 log^0.40.4.29up to date
 mmap-rs^0.70.7.0up to date
 num-traits^0.20.2.19up to date
 num_cpus^1.161.17.0up to date
 parking_lot^0.120.12.5up to date
 rand^0.90.10.0out of date
 rayon^1.111.11.0up to date
 serde^1.01.0.228up to date

Dev dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 hdf5-metno^0.120.12.3up to date
 itertools^0.140.14.0up to date
 ndarray>=0.16.0, <0.180.17.2up to date
 skiplist^0.61.0.0out of date
 tempfile^33.27.0up to date

Security Vulnerabilities

hashbrown: Borsh serialization of HashMap is non-canonical

RUSTSEC-2024-0402

The borsh serialization of the HashMap did not follow the borsh specification. It potentially produced non-canonical encodings dependent on insertion order. It also did not perform canonicty checks on decoding.

This can result in consensus splits and cause equivalent objects to be considered distinct.

This was patched in 0.15.1.