This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate rp2040-hal

Dependencies

(20 total, 7 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 chrono ⚠️^0.40.4.41maybe insecure
 cortex-m^0.7.20.7.7up to date
 critical-section^1.0.01.2.0up to date
 defmt>=0.2.0, <0.41.0.1out of date
 embedded-hal^0.2.51.0.0out of date
 embedded-hal-nb^1.0.01.0.0up to date
 embedded-dma^0.2.00.2.0up to date
 frunk^0.4.10.4.4up to date
 fugit^0.3.60.3.7up to date
 itertools^0.10.10.14.0out of date
 nb^1.01.1.0up to date
 paste^1.01.0.15up to date
 pio^0.2.00.3.0out of date
 rand_core^0.6.30.9.3out of date
 rp2040-hal-macros^0.1.00.1.0up to date
 rp2040-pac^0.5.00.6.0out of date
 rtic-monotonic^1.0.01.0.0up to date
 usb-device^0.2.90.3.2out of date
 vcell^0.10.1.3up to date
 void^1.0.21.0.2up to date

Dev dependencies

(7 total, 2 outdated)

CrateRequiredLatestStatus
 cortex-m-rt^0.70.7.5up to date
 cortex-m-rtic^1.1.41.1.4up to date
 dht-sensor^0.2.10.2.1up to date
 hd44780-driver^0.4.00.4.0up to date
 panic-halt^0.2.01.0.0out of date
 pio-proc^0.2.00.3.0out of date
 rp2040-boot2^0.3.00.3.0up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References