Deps.rs

turso_core 0.7.2

This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate turso_core

Dependencies

(64 total, 12 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 aegis^0.9.80.9.15up to date
 aes^0.8.40.9.2out of date
 aes-gcm^0.10.30.11.0out of date
 allocator-api2^0.40.4.0up to date
 antithesis_sdk^0.2.90.2.9up to date
 arc-swap^1.71.9.2up to date
 aristo^0.40.6.1out of date
 bigdecimal^0.40.4.10up to date
 bitflags^2.9.42.13.1up to date
 branches^0.4.30.4.5up to date
 bumpalo^33.20.3up to date
 bytemuck^1.23.11.25.2up to date
 cfg_block^0.1.10.2.0out of date
 chrono^0.4.420.4.45up to date
 crc32c^0.6.80.6.8up to date
 crossbeam-epoch ⚠️^0.9.180.9.20maybe insecure
 crossbeam-utils^0.8.210.8.22up to date
 either^1.151.17.0up to date
 fallible-iterator^0.3.00.3.0up to date
 fastbloom^0.14.10.17.0out of date
 hex^0.40.4.3up to date
 icu_collator^2.2.02.2.1up to date
 icu_locale^2.2.02.2.0up to date
 intrusive-collections^0.9.70.10.2out of date
 io-uring^0.7.50.7.13up to date
 libc^0.2.1720.2.189up to date
 libloading^0.8.60.9.0out of date
 libm^0.20.2.16up to date
 loom^0.70.7.2up to date
 miette^7.6.07.6.0up to date
 num-bigint^0.40.5.1out of date
 num-traits^0.20.2.19up to date
 pack1^1.0.01.1.0up to date
 parking_lot^0.12.40.12.5up to date
 pastey^0.2.10.2.3up to date
 polling^3.7.43.11.0up to date
 rand^0.9.20.10.2out of date
 rapidhash^4.1.14.5.1up to date
 regex^1.11.11.13.1up to date
 regex-syntax^0.8.50.8.11up to date
 roaring^0.11.20.11.4up to date
 rustc-hash^2.02.1.3up to date
 rustix^1.0.51.1.4up to date
 ryu^1.0.191.0.23up to date
 serde^1.01.0.229up to date
 serde_json^1.01.0.151up to date
 shuttle^0.8.10.9.1out of date
 simsimd^6.5.36.5.16up to date
 smallvec^1.15.11.15.2up to date
 stacker^0.10.1.25up to date
 strum^0.260.28.0out of date
 strum_macros^0.260.28.0out of date
 tantivy^0.26.00.26.1up to date
 tempfile^3.20.03.27.0up to date
 thiserror^2.0.162.0.19up to date
 tracing^0.1.410.1.44up to date
 tracing-subscriber^0.3.200.3.23up to date
 turso_ext^0.7.20.7.2up to date
 turso_macros^0.7.20.7.2up to date
 turso_parser^0.7.20.7.2up to date
 twox-hash^2.1.12.1.3up to date
 uncased^0.9.100.9.10up to date
 uuid^1.11.01.24.0up to date
 windows-sys^0.61.20.61.2up to date

Dev dependencies

(14 total, 7 outdated)

CrateRequiredLatestStatus
 codspeed-criterion-compat^4.2.15.0.1out of date
 criterion^0.5.00.8.2out of date
 codspeed-divan-compat^4.2.15.0.1out of date
 env_logger^0.11.60.11.11up to date
 memory-stats^1.2.01.2.0up to date
 mimalloc^0.1.470.1.52up to date
 pprof^0.14.00.15.0out of date
 quickcheck^1.01.1.0up to date
 quickcheck_macros^1.01.2.0up to date
 rand_chacha^0.9.00.10.0out of date
 rstest^0.18.20.26.1out of date
 rusqlite^0.37.00.40.1out of date
 sorted-vec^0.8.60.8.11up to date
 test-log^0.2.170.2.21up to date

Security Vulnerabilities

crossbeam-epoch: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

RUSTSEC-2026-0204

Affected versions of fmt::Display dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with Atomic::null or Shared::null. fmt::Debug impls and pre-0.9 fmt::Display impls, which do not dereference pointers, are not affected by this issue.