This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate polars-compute

Dependencies

(19 total, 5 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 polars-arrow^0.53.00.53.0up to date
 atoi_simd^0.170.18.1out of date
 bytemuck^1.221.25.0up to date
 chrono ⚠️<=0.4.410.4.44out of date
 either^1.141.15.0up to date
 fast-float2^0.2.20.2.3up to date
 half^2.7.12.7.1up to date
 hashbrown^0.16.00.16.1up to date
 itoa^1.0.61.0.18up to date
 num-traits^0.20.2.19up to date
 polars-buffer^0.53.00.53.0up to date
 polars-error^0.53.00.53.0up to date
 polars-utils^0.53.00.53.0up to date
 rand^0.90.10.0out of date
 schemars^0.9.01.2.1out of date
 serde^1.0.1881.0.228up to date
 strength_reduce^0.20.2.4up to date
 strum_macros^0.270.28.0out of date
 zmij^1.0.01.0.21up to date

Dev dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 polars-arrow^0.53.00.53.0up to date
 bigdecimal^0.4.80.4.10up to date
 num-bigint^0.4.60.4.6up to date
 proptest^1.61.11.0up to date
 rand^0.90.10.0out of date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References