This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate tcp-stream

Dependencies

(5 total, 3 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 cfg-if^0.1.51.0.0out of date
 mio^0.6.140.8.11out of date
 native-tls^0.20.2.11up to date
 openssl ⚠️^0.100.10.64maybe insecure
 rustls-connector^0.80.21.0out of date

Security Vulnerabilities

openssl: `openssl` `X509VerifyParamRef::set_host` buffer over-read

RUSTSEC-2023-0044

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte.