Deps.rs

tantivy 0.7.0

[![dependency status](https://deps.rs/crate/tantivy/0.7.0/status.svg)](https://deps.rs/crate/tantivy/0.7.0)

This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate tantivy

Dependencies

(38 total, 18 outdated, 1 insecure)

CrateRequiredLatestStatus
 atomicwrites^0.2.20.4.4out of date
 base64^0.9.10.23.1out of date
 bit-set^0.50.11.1out of date
 bitpacking^0.50.9.3out of date
 byteorder^1.01.5.0up to date
 census^0.10.4.2out of date
 combine^34.6.8out of date
 crossbeam^0.40.8.5out of date
 crossbeam-channel^0.20.5.17out of date
 downcast^0.90.11.0out of date
 fail^0.20.5.1out of date
 failure^0.10.1.8up to date
 fnv^1.0.61.0.7up to date
 fst^0.30.4.7out of date
 fst-regex^0.20.3.0out of date
 futures^0.10.3.34out of date
 futures-cpupool^0.10.1.8up to date
 htmlescape^0.3.10.3.1up to date
 itertools^0.70.15.0out of date
 lazy_static^11.5.0up to date
 levenshtein_automata^0.10.2.1out of date
 log^0.40.4.34up to date
 lz4^1.201.28.1up to date
 matches^0.10.1.10up to date
 num_cpus^1.21.17.0up to date
 owned-read^0.40.4.1up to date
 owning_ref ⚠️^0.40.4.1insecure
 regex^1.01.13.1up to date
 rust-stemmers^11.2.0up to date
 serde^1.01.0.229up to date
 serde_derive^1.01.0.229up to date
 serde_json^1.01.0.151up to date
 snap^0.21.1.2out of date
 stable_deref_trait^1.0.01.2.1up to date
 tempdir^0.30.3.7up to date
 tempfile^3.03.27.0up to date
 uuid^0.71.26.1out of date
 winapi^0.20.3.9out of date

Dev dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 maplit^11.0.2up to date
 rand^0.50.10.3out of date

Security Vulnerabilities

owning_ref: Multiple soundness issues in `owning_ref`

RUSTSEC-2022-0040

  • OwningRef::map_with_owner is unsound and may result in a use-after-free.
  • OwningRef::map is unsound and may result in a use-after-free.
  • OwningRefMut::as_owner and OwningRefMut::as_owner_mut are unsound and may result in a use-after-free.
  • The crate violates Rust's aliasing rules, which may cause miscompilations on recent compilers that emit the LLVM noalias attribute.

safer_owning_ref is a replacement crate which fixes these issues. No patched versions of the original crate are available, and the maintainer is unresponsive.