This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate protobuf-codegen

Dependencies

(7 total, 3 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.0.531.0.99up to date
 once_cell^1.10.01.21.3up to date
 protobuf ⚠️=3.7.13.7.2out of date
 protobuf-parse=3.7.13.7.2out of date
 regex^1.5.51.11.2up to date
 tempfile^33.22.0up to date
 thiserror^1.0.302.0.16out of date

Security Vulnerabilities

protobuf: Crash due to uncontrolled recursion in protobuf crate

RUSTSEC-2024-0437

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.