This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate serde_qs

Dependencies

(5 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 actix-web ⚠️^0.74.5.1out of date
 data-encoding^2.1.22.5.0up to date
 error-chain^0.12.00.12.4up to date
 percent-encoding^1.0.12.3.1out of date
 serde^1.0.851.0.198up to date

Dev dependencies

(4 total, 2 outdated)

CrateRequiredLatestStatus
 csv^1.0.51.3.0up to date
 rand^0.6.40.8.5out of date
 serde_derive^1.0.851.0.198up to date
 serde_urlencoded^0.5.40.7.1out of date

Security Vulnerabilities

actix-web: Multiple memory safety issues

RUSTSEC-2018-0019

Affected versions contain multiple memory safety issues, such as:

  • Unsoundly coercing immutable references to mutable references
  • Unsoundly extending lifetimes of strings
  • Adding the Send marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free.

A significant refactoring effort has been conducted to resolve these issues.