This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate prometheus

Dependencies

(10 total, 4 outdated, 1 insecure)

CrateRequiredLatestStatus
 cfg-if^1.01.0.5up to date
 fnv^1.01.0.7up to date
 lazy_static^1.41.5.0up to date
 libc^0.20.2.189up to date
 memchr^2.32.8.3up to date
 parking_lot^0.120.12.5up to date
 procfs^0.140.18.0out of date
 protobuf ⚠️^2.03.7.2insecure
 reqwest^0.110.13.5out of date
 thiserror^1.02.0.20out of date

Dev dependencies

(4 total, 2 outdated)

CrateRequiredLatestStatus
 criterion^0.40.8.2out of date
 getopts^0.20.2.24up to date
 hyper^0.141.11.1out of date
 tokio^1.01.53.1up to date

Security Vulnerabilities

protobuf: Crash due to uncontrolled recursion in protobuf crate

RUSTSEC-2024-0437

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.