This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate nu-cli

Dependencies

(20 total, 13 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 chrono ⚠️^0.40.4.38maybe insecure
 crossterm^0.270.28.1out of date
 fancy-regex^0.110.13.0out of date
 fuzzy-matcher^0.30.3.7up to date
 is_executable^1.01.0.3up to date
 log^0.40.4.22up to date
 miette^5.107.2.0out of date
 nu-ansi-term^0.49.00.50.1out of date
 nu-cmd-base^0.85.00.97.1out of date
 nu-color-config^0.85.00.97.1out of date
 nu-engine^0.85.00.97.1out of date
 nu-parser^0.85.00.97.1out of date
 nu-path^0.85.00.97.1out of date
 nu-protocol^0.85.00.97.1out of date
 nu-utils^0.85.00.97.1out of date
 once_cell^1.181.20.0up to date
 percent-encoding^22.3.1up to date
 reedline^0.24.00.34.0out of date
 sysinfo^0.290.31.4out of date
 unicode-segmentation^1.101.12.0up to date

Dev dependencies

(4 total, 4 outdated)

CrateRequiredLatestStatus
 nu-cmd-lang^0.85.00.97.1out of date
 nu-command^0.85.00.97.1out of date
 nu-test-support^0.85.00.97.1out of date
 rstest^0.18.10.22.0out of date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References