This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate ratatui-widgets

Dependencies

(13 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 bitflags^2.92.9.4up to date
 document-features^0.20.2.11up to date
 hashbrown ⚠️^0.150.16.0out of date
 indoc^22.0.6up to date
 instability^0.30.3.9up to date
 itertools^0.140.14.0up to date
 line-clipping^0.30.3.4up to date
 ratatui-core^0.1.0-alpha.60.0.0up to date
 serde^11.0.228up to date
 strum^0.270.27.2up to date
 time^0.30.3.44up to date
 unicode-segmentation^11.12.0up to date
 unicode-width=0.2.00.2.2out of date

Dev dependencies

(4 total, 1 outdated)

CrateRequiredLatestStatus
 color-eyre^0.60.6.5up to date
 crossterm^0.290.29.0up to date
 pretty_assertions^11.4.1up to date
 rstest^0.250.26.1out of date

Security Vulnerabilities

hashbrown: Borsh serialization of HashMap is non-canonical

RUSTSEC-2024-0402

The borsh serialization of the HashMap did not follow the borsh specification. It potentially produced non-canonical encodings dependent on insertion order. It also did not perform canonicty checks on decoding.

This can result in consensus splits and cause equivalent objects to be considered distinct.

This was patched in 0.15.1.