This project contains known security vulnerabilities. Find detailed information at the bottom.
tonic(26 total, 13 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| async-stream | ^0.3 | 0.3.6 | up to date |
| async-trait | ^0.1.13 | 0.1.92 | up to date |
| axum | ^0.6.9 | 0.8.9 | out of date |
| base64 | ^0.21 | 0.23.1 | out of date |
| bytes | ^1.0 | 1.12.1 | up to date |
| flate2 | ^1.0 | 1.1.10 | up to date |
| h2 ⚠️ | ^0.3.24 | 0.4.20 | insecure |
| http | ^0.2 | 1.5.0 | out of date |
| http-body | ^0.4.4 | 1.1.0 | out of date |
| hyper | ^0.14.26 | 1.12.0 | out of date |
| hyper-timeout | ^0.4 | 0.5.2 | out of date |
| percent-encoding | ^2.1 | 2.3.2 | up to date |
| pin-project | ^1.0.11 | 1.1.13 | up to date |
| prost | ^0.12 | 0.14.4 | out of date |
| rustls-native-certs | ^0.7 | 0.8.4 | out of date |
| rustls-pemfile | ^2.0 | 2.2.0 | up to date |
| rustls-pki-types | ^1.0 | 1.15.1 | up to date |
| tokio | ^1.0.1 | 1.53.2 | up to date |
| tokio-rustls | ^0.25 | 0.26.6 | out of date |
| tokio-stream | ^0.1 | 0.1.19 | up to date |
| tower | ^0.4.7 | 0.5.3 | out of date |
| tower-layer | ^0.3 | 0.3.3 | up to date |
| tower-service | ^0.3 | 0.3.3 | up to date |
| tracing | ^0.1 | 0.1.44 | up to date |
| webpki-roots | ^0.26 | 1.0.9 | out of date |
| zstd | ^0.12.3 | 0.14.0 | out of date |
(7 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| bencher | ^0.1.5 | 0.1.5 | up to date |
| quickcheck | ^1.0 | 1.1.0 | up to date |
| quickcheck_macros | ^1.0 | 1.2.0 | up to date |
| rand | ^0.8 | 0.10.3 | out of date |
| static_assertions | ^1.0 | 1.1.0 | up to date |
| tokio | ^1.0 | 1.53.2 | up to date |
| tower | ^0.4.7 | 0.5.3 | out of date |
h2: h2 unbounded empty DATA framesThe h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit. If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows.
Low severity.
Patched in v0.4.16.