This project contains known security vulnerabilities. Find detailed information at the bottom.
pyoxidizer(32 total, 19 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| byteorder | ^1.2 | 1.5.0 | up to date |
| cargo_toml | ^0.6 | 1.0.1 | out of date |
| cc | ^1.0 | 1.4.6 | up to date |
| clap | ^2.32 | 4.6.7 | out of date |
| encoding_rs | ^0.8 | 0.8.41 | up to date |
| git2 | ^0.9 | 0.21.0 | out of date |
| glob | ^0.3 | 0.3.4 | up to date |
| goblin | ^0.0 | 0.10.7 | out of date |
| handlebars | ^1.1 | 6.4.4 | out of date |
| hex | ^0.3 | 0.4.3 | out of date |
| itertools | ^0.8 | 0.15.0 | out of date |
| lazy_static | ^1.3 | 1.5.0 | up to date |
| libc | ^0.2 | 0.2.189 | up to date |
| regex | ^1 | 1.13.1 | up to date |
| reqwest | ^0.9 | 0.13.5 | out of date |
| rustc_version | ^0.2 | 0.4.1 | out of date |
| semver | ^0.9 | 1.0.28 | out of date |
| serde | ^1.0 | 1.0.229 | up to date |
| serde_cbor ⚠️ | ^0.9 | 0.11.2 | insecure |
| serde_json | ^1.0 | 1.0.151 | up to date |
| sha2 | ^0.8 | 0.11.0 | out of date |
| slog | ^2.4 | 2.8.2 | up to date |
| tar | ^0.4 | 0.4.46 | up to date |
| tempdir | ^0.3 | 0.3.7 | up to date |
| toml | ^0.5 | 1.1.6+spec-1.1.0 | out of date |
| url | ^1.7 | 2.5.8 | out of date |
| uuid | ^0.7 | 1.26.1 | out of date |
| version-compare | ^0.0 | 0.2.1 | out of date |
| walkdir | ^2 | 2.5.0 | up to date |
| xml-rs | ^0.8 | 1.0.0 | out of date |
| zip | ^0.5 | 8.6.0 | out of date |
| zstd | ^0.4 | 0.14.0 | out of date |
serde_cbor: Flaw in CBOR deserializer allows stack overflowAffected versions of this crate did not properly check if semantic tags were nested excessively during deserialization.
This allows an attacker to craft small (< 1 kB) CBOR documents that cause a stack overflow.
The flaw was corrected by limiting the allowed number of nested tags.