This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate polars-core

Dependencies

(33 total, 6 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 polars-arrow^0.53.00.53.0up to date
 bitflags^22.11.0up to date
 boxcar^0.2.120.2.14up to date
 bytemuck^1.221.25.0up to date
 chrono ⚠️<=0.4.410.4.44out of date
 chrono-tz^0.100.10.4up to date
 comfy-table^7.1.17.2.2up to date
 either^1.141.15.0up to date
 getrandom^0.30.4.2out of date
 half^2.7.12.7.1up to date
 hashbrown^0.16.00.16.1up to date
 indexmap^2.122.13.1up to date
 itoa^1.0.61.0.18up to date
 ndarray^0.170.17.2up to date
 num-traits^0.20.2.19up to date
 polars-buffer^0.53.00.53.0up to date
 polars-compute^0.53.00.53.0up to date
 polars-dtype^0.53.00.53.0up to date
 polars-error^0.53.00.53.0up to date
 polars-row^0.53.00.53.0up to date
 polars-schema^0.53.00.53.0up to date
 polars-utils^0.53.00.53.0up to date
 proptest^1.61.11.0up to date
 rand^0.90.10.0out of date
 rand_distr^0.50.6.0out of date
 rayon^1.91.11.0up to date
 regex^1.91.12.3up to date
 schemars^0.9.01.2.1out of date
 serde^1.0.1881.0.228up to date
 serde_json^11.0.149up to date
 strum_macros^0.270.28.0out of date
 uuid^1.15.11.23.0up to date
 xxhash-rust^0.8.60.8.15up to date

Dev dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 bincode^2.03.0.0out of date
 proptest^1.61.11.0up to date
 serde_json^11.0.149up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References