This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate procs

Dependencies

(22 total, 13 outdated, 1 insecure)

CrateRequiredLatestStatus
 anyhow^1.01.0.104up to date
 byte-unit^35.2.6out of date
 chrono^0.40.4.45up to date
 console^0.9.20.16.6out of date
 directories^2.06.0.0out of date
 dockworker^0.0.150.17.0out of date
 errno^0.20.3.14out of date
 getch^0.20.3.1out of date
 lazy_static^1.21.5.0up to date
 libc^0.20.2.189up to date
 libproc^0.50.14.11out of date
 pager^0.150.16.1out of date
 process_path^0.10.1.4up to date
 procfs^0.7.10.18.0out of date
 serde^1.01.0.229up to date
 serde_derive^1.01.0.229up to date
 structopt^0.30.3.26up to date
 toml^0.51.1.6+spec-1.1.0out of date
 unicode-width^0.10.2.2out of date
 users ⚠️^0.90.11.0insecure
 which^38.0.6out of date
 winapi^0.30.3.9up to date

Security Vulnerabilities

users: `root` appended to group listings

RUSTSEC-2025-0040

Affected versions append root to group listings, unless the correct listing has exactly 1024 groups.

This affects both:

  • The supplementary groups of a user
  • The group access list of the current process

If the caller uses this information for access control, this may lead to privilege escalation.

This crate is not currently maintained, so a patched version is not available.

Versions older than 0.8.0 do not contain the affected functions, so downgrading to them is a workaround.

Recommended alternatives

  • uzers (an actively maintained fork of the users crate)
  • sysinfo