This project contains known security vulnerabilities. Find detailed information at the bottom.
javelin(19 total, 12 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| bytes | ^0.4 | 1.12.1 | out of date |
| chrono | ^0.4 | 0.4.45 | up to date |
| clap | ~2.32 | 4.6.7 | out of date |
| futures | ^0.1 | 0.3.34 | out of date |
| javelin-codec | ^0.3.4 | 0.3.4 | up to date |
| log | ^0.4 | 0.4.34 | up to date |
| m3u8-rs | ^1.0 | 6.0.1 | out of date |
| mpeg2ts | ^0.1 | 0.6.1 | out of date |
| native-tls | ^0.2 | 0.2.18 | up to date |
| parking_lot | ^0.7 | 0.12.5 | out of date |
| rml_rtmp | ^0.2 | 0.8.0 | out of date |
| serde | ^1.0 | 1.0.229 | up to date |
| serde_json | ^1.0 | 1.0.151 | up to date |
| serde_yaml | ^0.8 | 0.9.34+deprecated | out of date |
| simplelog | ^0.5 | 0.12.2 | out of date |
| tempfile | ^3.0 | 3.27.0 | up to date |
| tokio | ^0.1 | 1.53.1 | out of date |
| tokio-tls | ^0.2 | 0.3.1 | out of date |
| warp ⚠️ | ^0.1 | 0.4.3 | insecure |
warp: Improper validation of Windows paths could lead to directory traversal attackPath resolution in warp::filters::fs::dir didn't correctly validate Windows paths
meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed
and respond with the contents of c:/windows/web/screen/img101.png. Thus users
could potentially read files anywhere on the filesystem.
This only impacts Windows. Linux and other unix likes are not impacted by this.