This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate kay

Dependencies

(9 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 byteorder^11.5.0up to date
 chunky^0.3.70.3.7up to date
 compact^0.2.130.2.16up to date
 compact_macros^0.1.00.1.0up to date
 serde^1.01.0.200up to date
 serde_derive^1.01.0.200up to date
 stdweb^0.4.70.4.20up to date
 tungstenite ⚠️^0.5.30.21.0out of date
 url^1.7.22.5.0out of date

Security Vulnerabilities

tungstenite: Tungstenite allows remote attackers to cause a denial of service

RUSTSEC-2023-0065

The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).