This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate ructe

Dependencies

(9 total, 7 outdated, 1 insecure)

CrateRequiredLatestStatus
 base64^0.10.00.23.1out of date
 bytecount^0.5.10.6.9out of date
 itertools^0.8.00.15.0out of date
 lazy_static^1.01.5.0up to date
 md5^0.60.8.1out of date
 mime^0.30.3.17up to date
 nom^4.1.18.0.0out of date
 rsass^0.9.80.29.2out of date
 warp ⚠️^0.1.90.4.3insecure

Security Vulnerabilities

warp: Improper validation of Windows paths could lead to directory traversal attack

RUSTSEC-2022-0082

Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem.

This only impacts Windows. Linux and other unix likes are not impacted by this.