This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate submillisecond

Dependencies

(19 total, 6 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 ansi_term^0.120.12.1up to date
 askama^0.110.12.1out of date
 base64ct^1.51.7.3up to date
 cookie^0.170.18.1out of date
 headers^0.30.4.0out of date
 http^0.2.71.3.1out of date
 httparse^1.7.11.10.1up to date
 lunatic^0.130.14.1out of date
 lunatic-log^0.40.4.0up to date
 mime^0.3.160.3.17up to date
 paste^1.01.0.15up to date
 percent-encoding^2.12.3.1up to date
 serde^1.0.1321.0.219up to date
 serde_bytes^0.110.11.17up to date
 serde_json^1.01.0.140up to date
 serde_urlencoded^0.70.7.1up to date
 sha1^0.100.10.6up to date
 submillisecond_macros^0.30.3.0up to date
 tungstenite ⚠️^0.190.26.2out of date

Dev dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 base64^0.21.00.22.1out of date
 ron^0.80.8.1up to date
 uuid^1.0.01.15.1up to date

Security Vulnerabilities

tungstenite: Tungstenite allows remote attackers to cause a denial of service

RUSTSEC-2023-0065

The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).