This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate webdriver


(13 total, 6 outdated, 1 insecure)

 base64^ of date
 cookie^ of date
 log^ to date
 regex^ to date
 serde^ to date
 serde_derive^ to date
 serde_json^ to date
 time^ of date
 tokio^ of date
 unicode-segmentation^ to date
 url^ to date
 warp^ of date

Dev dependencies

(1 total, all up-to-date)

 lazy_static^ to date

Security Vulnerabilities

http: Integer Overflow in HeaderMap::reserve() can cause Denial of Service


HeaderMap::reserve() used usize::next_power_of_two() to calculate the increased capacity. However, next_power_of_two() silently overflows to 0 if given a sufficently large number in release mode.

If the map was not empty when the overflow happens, the library will invoke self.grow(0) and start infinite probing. This allows an attacker who controls the argument to reserve() to cause a potential denial of service (DoS).

The flaw was corrected in 0.1.20 release of http crate.

http: HeaderMap::Drain API is unsound