Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.
slog-stdlog 1.1.0
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
slog-stdlog
(5 total, 5 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
crossbeam ⚠️ | ^0.2.9 | 0.8.4 | out of date |
lazy_static | ^0.2.1 | 1.5.0 | out of date |
log | ^0.3.6 | 0.4.27 | out of date |
slog | ^1.1 | 2.7.0 | out of date |
slog-term | ^1 | 2.9.1 | out of date |
crossbeam
: `MsQueue` `push`/`pop` use the wrong orderingsAffected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.