This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate pdf

Dependencies

(15 total, 11 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 ansi_term^0.9.00.12.1out of date
 byteorder^1.0.01.5.0up to date
 chrono ⚠️^0.4.00.4.38maybe insecure
 encoding^0.2.330.2.33up to date
 error-chain^0.11.00.12.4out of date
 glob^0.2.110.3.1out of date
 inflate^0.1.10.4.5out of date
 isatty^0.10.2.0out of date
 itertools^0.6.00.12.1out of date
 lzw^0.10.00.10.0up to date
 memmap^0.5.20.7.0out of date
 num-traits^0.1.360.2.18out of date
 ordermap^0.2.90.4.2out of date
 pdf_derive^0.1.170.2.0out of date
 tuple^0.4.00.5.2out of date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References