This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate lspower

Dependencies

(18 total, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.01.0.44up to date
 async-codec-lite^0.0.00.0.0up to date
 async-trait^0.10.1.51up to date
 auto_impl^0.40.4.1up to date
 bytes^1.01.1.0up to date
 dashmap^4.04.0.2up to date
 futures^0.30.3.17up to date
 httparse^1.3.51.5.1up to date
 log^0.40.4.14up to date
 lsp-types^0.890.89.2up to date
 lspower-macros^0.20.2.1up to date
 serde^1.01.0.130up to date
 serde_json^1.01.0.68up to date
 thiserror^1.01.0.29up to date
 tokio ⚠️^1.31.12.0maybe insecure
 tokio-util^0.60.6.8up to date
 tower-service^0.30.3.1up to date
 twoway^0.2.10.2.2up to date

Dev dependencies

(6 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 async-tungstenite^0.130.15.0out of date
 env_logger^0.80.9.0out of date
 serde_json^1.01.0.68up to date
 tokio ⚠️^1.31.12.0maybe insecure
 tower-test^0.40.4.0up to date
 ws_stream_tungstenite^0.60.6.1up to date

Security Vulnerabilities

tokio: Task dropped in wrong thread when aborting `LocalSet` task

RUSTSEC-2021-0072

When aborting a task with JoinHandle::abort, the future is dropped in the thread calling abort if the task is not currently being executed. This is incorrect for tasks spawned on a LocalSet.

This can easily result in race conditions as many projects use Rc or RefCell in their Tokio tasks for better performance.

See tokio#3929 for more details.