This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
trezor-client(8 total, 3 outdated, 1 possibly insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| bitcoin | ^0.31 | 0.32.6 | out of date |
| byteorder | ^1.4 | 1.5.0 | up to date |
| hex | ^0.4 | 0.4.3 | up to date |
| protobuf ⚠️ | =3.3.0 | 3.7.2 | out of date |
| rusb | ^0.9 | 0.9.4 | up to date |
| thiserror | ^1.0 | 2.0.12 | out of date |
| tracing | ^0.1 | 0.1.41 | up to date |
| unicode-normalization | ^0.1.22 | 0.1.24 | up to date |
(2 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serial_test | ^2.0.0 | 3.2.0 | out of date |
| tracing-subscriber | ^0.3 | 0.3.19 | up to date |
protobuf: Crash due to uncontrolled recursion in protobuf crateAffected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.