This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate libsql-rusqlite

Dependencies

(12 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 bitflags^2.02.10.0up to date
 chrono ⚠️^0.40.4.42maybe insecure
 csv^1.11.4.0up to date
 fallible-iterator^0.20.3.0out of date
 fallible-streaming-iterator^0.10.1.9up to date
 hashlink^0.80.11.0out of date
 libsql-ffi^0.9.290.9.29up to date
 serde_json^1.01.0.145up to date
 smallvec^1.6.11.15.1up to date
 time^0.3.00.3.44up to date
 url^2.12.5.7up to date
 uuid^1.01.18.1up to date

Dev dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 bencher^0.10.1.5up to date
 doc-comment^0.30.3.4up to date
 lazy_static^1.41.5.0up to date
 regex^1.5.51.12.2up to date
 tempfile^3.1.03.23.0up to date
 unicase^2.6.02.8.1up to date
 uuid^1.01.18.1up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References