Enet4 / dicom-rs

This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate `dicom-dictionary-builder`

Dependencies

(8 total, all up-to-date)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
serde	`^1.0.55`	`1.0.228`	up to date
heck	`^0.5.0`	`0.5.0`	up to date
ureq	`^3.0.11`	`3.1.4`	up to date
sxd-document	`^0.3.2`	`0.3.2`	up to date
eyre	`^0.6.12`	`0.6.12`	up to date
sxd-xpath	`^0.4.2`	`0.4.2`	up to date
regex	`^1.6.0`	`1.12.2`	up to date

Crate `dicom-core`

Dependencies

(7 total, all up-to-date)

Crate	Required	Latest	Status
chrono	`^0.4.31`	`0.4.42`	up to date
either	`^1.13.0`	`1.15.0`	up to date
itertools	`^0.14`	`0.14.0`	up to date
num-traits	`^0.2.12`	`0.2.19`	up to date
safe-transmute	`^0.11.0`	`0.11.3`	up to date
smallvec	`^1.6.1`	`1.15.1`	up to date
snafu	`^0.8`	`0.8.9`	up to date

Crate `dicom-dictionary-std`

Dependencies

(1 total, all up-to-date)

Crate	Required	Latest	Status
once_cell	`^1.18.0`	`1.21.3`	up to date

Crate `dicom-encoding`

Dependencies

(4 total, all up-to-date)

Crate	Required	Latest	Status
encoding	`^0.2.33`	`0.2.33`	up to date
byteordered	`^0.6`	`0.6.0`	up to date
inventory	`^0.3.2`	`0.3.21`	up to date
snafu	`^0.8`	`0.8.9`	up to date

Crate `dicom-transfer-syntax-registry`

Dependencies

(11 total, 2 outdated)

Crate	Required	Latest	Status
lazy_static	`^1.2.0`	`1.5.0`	up to date
byteordered	`^0.6`	`0.6.0`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
flate2	`^1.0.28`	`1.1.5`	up to date
jpeg2k	`^0.10`	`0.10.1`	up to date
jpeg-decoder	`^0.3.0`	`0.3.2`	up to date
jpeg-encoder	`^0.6`	`0.6.1`	up to date
charls	`^0.4.2`	`0.4.2`	up to date
jxl-oxide	`^0.10.2`	`0.12.5`	out of date
zune-jpegxl	`^0.4.0`	`0.4.0`	up to date
zune-core	`^0.4.12`	`0.5.0`	out of date

Dev dependencies

(1 total, all up-to-date)

Crate	Required	Latest	Status
dicom-test-files	`^0.3`	`0.3.1`	up to date

Crate `dicom-ul`

Dependencies

(8 total, all up-to-date)

Crate	Required	Latest	Status
byteordered	`^0.6`	`0.6.0`	up to date
bytes	`^1.6`	`1.11.0`	up to date
cfg-if	`^1.0.3`	`1.0.4`	up to date
rustls	`^0.23.31`	`0.23.35`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tokio-rustls	`^0.26.2`	`0.26.4`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
tokio	`^1.38`	`1.48.0`	up to date

Dev dependencies

(6 total, all up-to-date)

Crate	Required	Latest	Status
matches	`^0.1.8`	`0.1.10`	up to date
rstest	`^0.26.1`	`0.26.1`	up to date
tokio	`^1.38`	`1.48.0`	up to date
time	`^0.3`	`0.3.44`	up to date
rustls-cert-gen	`^0.2.0`	`0.2.0`	up to date
rcgen	`^0.14.4`	`0.14.5`	up to date

Crate `dicom-parser`

Dependencies

(3 total, all up-to-date)

Crate	Required	Latest	Status
smallvec	`^1.6.1`	`1.15.1`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date

Crate `dicom-object`

Dependencies

(5 total, all up-to-date)

Crate	Required	Latest	Status
itertools	`^0.14`	`0.14.0`	up to date
byteordered	`^0.6`	`0.6.0`	up to date
smallvec	`^1.6.1`	`1.15.1`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date

Dev dependencies

(2 total, all up-to-date)

Crate	Required	Latest	Status
tempfile	`^3.2.0`	`3.23.0`	up to date
dicom-test-files	`^0.3`	`0.3.1`	up to date

Crate `dicom-json`

Dependencies

(5 total, all up-to-date)

Crate	Required	Latest	Status
base64	`^0.22`	`0.22.1`	up to date
num-traits	`^0.2.15`	`0.2.19`	up to date
serde	`^1.0.164`	`1.0.228`	up to date
serde_json	`^1.0.96`	`1.0.145`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date

Dev dependencies

(2 total, all up-to-date)

Crate	Required	Latest	Status
dicom-test-files	`^0.3`	`0.3.1`	up to date
pretty_assertions	`^1.3.0`	`1.4.1`	up to date

Crate `dicom-dump`

Dependencies

(5 total, all up-to-date)

Crate	Required	Latest	Status
snafu	`^0.8`	`0.8.9`	up to date
clap	`^4.0.18`	`4.5.53`	up to date
owo-colors	`^4.0.0-rc.1`	`4.2.3`	up to date
serde_json	`^1.0.108`	`1.0.145`	up to date
terminal_size	`^0.4.0`	`0.4.3`	up to date

Crate `dicom-pixeldata`

Dependencies

(11 total, 4 outdated, 1 possibly insecure)

Crate	Required	Latest	Status
snafu	`^0.8`	`0.8.9`	up to date
byteorder	`^1.4.3`	`1.5.0`	up to date
gdcm-rs	`^0.6`	`0.6.0`	up to date
rayon	`>=1.5, <1.11.0`	`1.11.0`	out of date
rayon-core	`~1, <1.13.0`	`1.13.0`	out of date
ndarray	`^0.16.1`	`0.17.1`	out of date
num-traits	`^0.2.12`	`0.2.19`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
image	`>=0.25.1, <0.25.8`	`0.25.9`	out of date
clap	`^4.4.2`	`4.5.53`	up to date
tracing-subscriber ⚠️	`^0.3.17`	`0.3.20`	maybe insecure

Dev dependencies

(2 total, all up-to-date)

Crate	Required	Latest	Status
rstest	`^0.26.1`	`0.26.1`	up to date
dicom-test-files	`^0.3`	`0.3.1`	up to date

Crate `dicom`

No external dependencies! 🙌

Crate `dicom-echoscu`

Dependencies

(4 total, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.11`	`0.3.20`	maybe insecure

Crate `dicom-findscu`

Dependencies

(4 total, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.36`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.15`	`0.3.20`	maybe insecure

Crate `dicom-fromimage`

Dependencies

(5 total, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.11`	`0.3.20`	maybe insecure
image	`^0.25.1`	`0.25.9`	up to date

Crate `dicom-scpproxy`

Dependencies

(5 total, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.11`	`0.3.20`	maybe insecure
bytes	`^1.6`	`1.11.0`	up to date

Crate `dicom-storescp`

Dependencies

(5 total, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.36`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.15`	`0.3.20`	maybe insecure
tokio	`^1.38.0`	`1.48.0`	up to date

Crate `dicom-storescu`

Dependencies

(9 total, 1 outdated, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
walkdir	`^2.3.2`	`2.5.0`	up to date
indicatif	`^0.17.0`	`0.18.3`	out of date
tracing	`^0.1.34`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.11`	`0.3.20`	maybe insecure
snafu	`^0.8`	`0.8.9`	up to date
rustls	`^0.23.31`	`0.23.35`	up to date
tokio-rustls	`^0.26.3`	`0.26.4`	up to date
tokio	`^1.38.0`	`1.48.0`	up to date

Crate `dicom-toimage`

Dependencies

(4 total, 1 possibly insecure)

Crate	Required	Latest	Status
clap	`^4.0.18`	`4.5.53`	up to date
snafu	`^0.8`	`0.8.9`	up to date
tracing	`^0.1.34`	`0.1.41`	up to date
tracing-subscriber ⚠️	`^0.3.11`	`0.3.20`	maybe insecure

Crate `dicom-app-common`

Dependencies

(5 total, all up-to-date)

Crate	Required	Latest	Status
clap	`^4.5.47`	`4.5.53`	up to date
rustls	`^0.23.31`	`0.23.35`	up to date
rustls-native-certs	`^0.8.1`	`0.8.2`	up to date
snafu	`^0.8.9`	`0.8.9`	up to date
tracing	`^0.1.41`	`0.1.41`	up to date

Security Vulnerabilities

`tracing-subscriber`: Logging user input may result in poisoning logs with ANSI escape sequences

RUSTSEC-2025-0055

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

Manipulate terminal title bars
Clear screens or modify terminal display
Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

This was patched in PR #3368 to escape ANSI control characters from user input.

Enet4 / dicom-rs

Crate dicom-dictionary-builder

Dependencies

Crate dicom-core

Dependencies

Crate dicom-dictionary-std

Dependencies

Crate dicom-encoding

Dependencies

Crate dicom-transfer-syntax-registry

Dependencies

Dev dependencies

Crate dicom-ul

Dependencies

Dev dependencies

Crate dicom-parser

Dependencies

Crate dicom-object

Dependencies

Dev dependencies

Crate dicom-json

Dependencies

Dev dependencies

Crate dicom-dump

Dependencies

Crate dicom-pixeldata

Dependencies

Dev dependencies

Crate dicom

Crate dicom-echoscu

Dependencies

Crate dicom-findscu

Dependencies

Crate dicom-fromimage

Dependencies

Crate dicom-scpproxy

Dependencies

Crate dicom-storescp

Dependencies

Crate dicom-storescu

Dependencies

Crate dicom-toimage

Dependencies

Crate dicom-app-common

Dependencies

Security Vulnerabilities

tracing-subscriber: Logging user input may result in poisoning logs with ANSI escape sequences

Crate `dicom-dictionary-builder`

Crate `dicom-core`

Crate `dicom-dictionary-std`

Crate `dicom-encoding`

Crate `dicom-transfer-syntax-registry`

Crate `dicom-ul`

Crate `dicom-parser`

Crate `dicom-object`

Crate `dicom-json`

Crate `dicom-dump`

Crate `dicom-pixeldata`

Crate `dicom`

Crate `dicom-echoscu`

Crate `dicom-findscu`

Crate `dicom-fromimage`

Crate `dicom-scpproxy`

Crate `dicom-storescp`

Crate `dicom-storescu`

Crate `dicom-toimage`

Crate `dicom-app-common`

`tracing-subscriber`: Logging user input may result in poisoning logs with ANSI escape sequences