This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate lunatic-distributed

Dependencies

(17 total, 7 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.01.0.97up to date
 async_cell^0.2.10.2.2up to date
 bytes^11.10.1up to date
 dashmap^5.46.1.0out of date
 log^0.40.4.26up to date
 lunatic-control^0.130.13.2up to date
 lunatic-process^0.130.13.2up to date
 quinn^0.90.11.6out of date
 rcgen^0.100.13.2out of date
 reqwest^0.110.12.14out of date
 rmp-serde^1.1.11.3.0up to date
 rustls ⚠️^0.200.23.23out of date
 rustls-pemfile^1.02.2.0out of date
 serde^1.01.0.219up to date
 tokio^1.281.44.1up to date
 uuid^1.01.15.1up to date
 wasmtime^830.0.2out of date

Security Vulnerabilities

rustls: `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input

RUSTSEC-2024-0336

If a close_notify alert is received during a handshake, complete_io does not terminate.

Callers which do not call complete_io are not affected.

rustls-tokio and rustls-ffi do not call complete_io and are not affected.

rustls::Stream and rustls::StreamOwned types use complete_io and are affected.