This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate in_stream

Dependencies

(15 total, 11 outdated, 1 insecure)

CrateRequiredLatestStatus
 crossbeam-channel^0.30.5.17out of date
 env_logger^0.60.11.11out of date
 lazy_static=1.4.01.5.0out of date
 log^0.40.4.34up to date
 nanoid^0.20.5.0out of date
 native-tls^0.20.2.18up to date
 net2^0.20.2.39up to date
 openssl^0.100.10.81up to date
 parking_lot^0.90.12.5out of date
 serde=1.0.1041.0.229out of date
 serde_derive=1.0.1041.0.229out of date
 serde_json=1.0.471.0.151out of date
 shrinkwraprs^0.20.3.0out of date
 tungstenite ⚠️^0.9.20.30.0insecure
 url2^0.0.40.0.6out of date

Security Vulnerabilities

tungstenite: Tungstenite allows remote attackers to cause a denial of service

RUSTSEC-2023-0065

The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).