This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate hyper

Dependencies

(17 total, 1 possibly insecure)

CrateRequiredLatestStatus
 bytes^11.1.0up to date
 futures-channel^0.30.3.17up to date
 futures-core^0.30.3.17up to date
 futures-util^0.30.3.17up to date
 h2^0.3.30.3.4up to date
 http^0.20.2.4up to date
 http-body^0.40.4.3up to date
 httparse^1.5.11.5.1up to date
 httpdate^1.01.0.1up to date
 itoa^0.4.10.4.8up to date
 libc^0.20.2.102up to date
 pin-project-lite^0.2.40.2.7up to date
 socket2^0.40.4.2up to date
 tokio ⚠️^11.11.0maybe insecure
 tower-service^0.30.3.1up to date
 tracing^0.10.1.27up to date
 want^0.30.3.0up to date

Dev dependencies

(14 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 futures-util^0.30.3.17up to date
 matches^0.10.1.9up to date
 num_cpus^1.01.13.0up to date
 pretty_env_logger^0.40.4.0up to date
 serde^1.01.0.130up to date
 serde_derive^1.01.0.130up to date
 serde_json^1.01.0.68up to date
 spmc^0.30.3.0up to date
 tokio ⚠️^11.11.0maybe insecure
 tokio-test^0.40.4.2up to date
 tokio-util^0.60.6.8up to date
 tower^0.40.4.8up to date
 url^2.22.2.2up to date
 pnet_datalink^0.27.20.28.0out of date

Security Vulnerabilities

tokio: Task dropped in wrong thread when aborting `LocalSet` task

RUSTSEC-2021-0072

When aborting a task with JoinHandle::abort, the future is dropped in the thread calling abort if the task is not currently being executed. This is incorrect for tasks spawned on a LocalSet.

This can easily result in race conditions as many projects use Rc or RefCell in their Tokio tasks for better performance.

See tokio#3929 for more details.