This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate polars-ops

Dependencies

(33 total, 5 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 aho-corasick^1.11.1.4up to date
 argminmax^0.6.30.6.3up to date
 polars-arrow^0.53.00.53.0up to date
 base64^0.22.00.22.1up to date
 bytemuck^1.221.25.0up to date
 chrono ⚠️<=0.4.410.4.44out of date
 chrono-tz^0.100.10.4up to date
 either^1.141.15.0up to date
 hashbrown^0.16.00.16.1up to date
 hex^0.4.30.4.3up to date
 indexmap^2.122.13.1up to date
 jsonpath_lib_polars_vendor^0.0.10.0.1up to date
 libm^0.20.2.16up to date
 memchr^2.62.8.0up to date
 num-traits^0.20.2.19up to date
 polars-buffer^0.53.00.53.0up to date
 polars-compute^0.53.00.53.0up to date
 polars-core^0.53.00.53.0up to date
 polars-error^0.53.00.53.0up to date
 polars-json^0.53.00.53.0up to date
 polars-schema^0.53.00.53.0up to date
 polars-utils^0.53.00.53.0up to date
 rand^0.90.10.0out of date
 rand_distr^0.50.6.0out of date
 rayon^1.91.11.0up to date
 regex^1.91.12.3up to date
 regex-syntax^0.8.50.8.10up to date
 schemars^0.9.01.2.1out of date
 serde^1.0.1881.0.228up to date
 serde_json^11.0.149up to date
 strum_macros^0.270.28.0out of date
 unicode-normalization^0.1.240.1.25up to date
 unicode-reverse^1.0.81.0.9up to date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 rand^0.90.10.0out of date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References