Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.
slog-stdlog 3.0.4-pre
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
slog-stdlog
(4 total, 2 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
crossbeam ⚠️ | ^0.2.9 | 0.8.4 | out of date |
log | ^0.3.6 | 0.4.21 | out of date |
slog | ^2 | 2.7.0 | up to date |
slog-scope | ^4 | 4.4.0 | up to date |
(2 total, all up-to-date)
Crate | Required | Latest | Status |
---|---|---|---|
slog-async | ^2 | 2.8.0 | up to date |
slog-term | ^2 | 2.9.1 | up to date |
crossbeam
: `MsQueue` `push`/`pop` use the wrong orderingsAffected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.