This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate rust-embed

Dependencies

(7 total, 5 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 actix-web ⚠️^0.74.5.1out of date
 mime_guess^2.0.0-alpha.62.0.4up to date
 rocket^0.3.60.5.0out of date
 rocket_codegen^0.3.60.5.0out of date
 rocket_contrib^0.3.60.4.11out of date
 rust-embed-impl^4.2.08.3.0out of date
 walkdir^2.1.42.5.0up to date

Security Vulnerabilities

actix-web: Multiple memory safety issues

RUSTSEC-2018-0019

Affected versions contain multiple memory safety issues, such as:

  • Unsoundly coercing immutable references to mutable references
  • Unsoundly extending lifetimes of strings
  • Adding the Send marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free.

A significant refactoring effort has been conducted to resolve these issues.