This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate polars-time

Dependencies

(17 total, 4 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 polars-arrow^0.53.00.53.0up to date
 atoi_simd^0.170.18.1out of date
 bytemuck^1.221.25.0up to date
 chrono ⚠️<=0.4.410.4.44out of date
 chrono-tz^0.100.10.4up to date
 now^0.10.1.3up to date
 num-traits^0.20.2.19up to date
 polars-compute^0.53.00.53.0up to date
 polars-core^0.53.00.53.0up to date
 polars-error^0.53.00.53.0up to date
 polars-ops^0.53.00.53.0up to date
 polars-utils^0.53.00.53.0up to date
 rayon^1.91.11.0up to date
 regex^1.91.12.3up to date
 schemars^0.9.01.2.1out of date
 serde^1.0.1881.0.228up to date
 strum_macros^0.270.28.0out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 polars-ops^0.53.00.53.0up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References