Deps.rs

metrics-recorder-prometheus 0.2.3

This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate metrics-recorder-prometheus

Dependencies

(3 total, 3 outdated, 1 insecure)

CrateRequiredLatestStatus
 hdrhistogram^6.17.6.0out of date
 metrics-core^0.40.5.2out of date
 metrics-util ⚠️^0.20.20.4insecure

Security Vulnerabilities

metrics-util: AtomicBucket<T> unconditionally implements Send/Sync

RUSTSEC-2021-0113

In the affected versions of the crate, AtomicBucket<T> unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::data_with() API. Such data races can potentially cause memory corruption or other undefined behavior.

The flaw was fixed in commit 8e6daab by adding appropriate Send/Sync bounds to the Send/Sync impl of struct Block<T> (which is a data type contained inside AtomicBucket<T>).