This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate ooproxy

Dependencies

(13 total, 9 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 actix^0.70.13.3out of date
 actix-web ⚠️^0.74.5.1out of date
 base64^0.100.22.0out of date
 bytes^0.41.6.0out of date
 config^0.90.14.0out of date
 env_logger^0.60.11.3out of date
 futures^0.10.3.30out of date
 jsonwebtoken^59.3.0out of date
 log^0.40.4.21up to date
 native-tls^0.20.2.11up to date
 num^0.20.4.2out of date
 serde^11.0.198up to date
 serde_json^11.0.116up to date

Security Vulnerabilities

actix-web: Multiple memory safety issues

RUSTSEC-2018-0019

Affected versions contain multiple memory safety issues, such as:

  • Unsoundly coercing immutable references to mutable references
  • Unsoundly extending lifetimes of strings
  • Adding the Send marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free.

A significant refactoring effort has been conducted to resolve these issues.