This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate ws-actix-web

Dependencies

(7 total, 6 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 actix^0.90.13.3out of date
 actix-codec ⚠️^0.20.5.2out of date
 actix-web^24.5.1out of date
 actix-web-actors^24.3.0out of date
 awc^13.4.0out of date
 bytes^0.51.6.0out of date
 futures^0.30.3.30up to date

Security Vulnerabilities

actix-codec: Use-after-free in Framed due to lack of pinning

RUSTSEC-2020-0049

Affected versions of this crate did not require the buffer wrapped in Framed to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free.

The flaw was corrected by making the affected functions accept Pin<&mut Self> instead of &mut self.