This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate regalloc2

Dependencies

(8 total, 1 possibly insecure)

CrateRequiredLatestStatus
 allocator-api2^0.2.180.2.21up to date
 bumpalo^3.16.03.17.0up to date
 hashbrown ⚠️^0.150.15.2maybe insecure
 libfuzzer-sys^0.4.20.4.9up to date
 log^0.4.80.4.26up to date
 rustc-hash^2.0.02.1.1up to date
 serde^1.0.1361.0.219up to date
 smallvec^1.6.11.14.0up to date

Security Vulnerabilities

hashbrown: Borsh serialization of HashMap is non-canonical

RUSTSEC-2024-0402

The borsh serialization of the HashMap did not follow the borsh specification. It potentially produced non-canonical encodings dependent on insertion order. It also did not perform canonicty checks on decoding.

This can result in consensus splits and cause equivalent objects to be considered distinct.

This was patched in 0.15.1.