This project might be open to known security vulnerabilities , which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom .
Crate converge-model Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status trybuild ^1.01.0.116up to date
Crate converge-pack No external dependencies! 🙌
Crate converge-protocol No external dependencies! 🙌
Crate converge-kernel No external dependencies! 🙌
Crate converge-client No external dependencies! 🙌
Crate converge-core Dev dependencies (6 total, 1 outdated)
Crate converge-provider-api No external dependencies! 🙌
Crate converge-provider No external dependencies! 🙌
Crate converge-domain Dev dependencies (1 total, all up-to-date)
Crate converge-experience No external dependencies! 🙌
Crate converge-knowledge Dev dependencies (2 total, 1 outdated)
Crate converge-optimization Dev dependencies (2 total, 1 outdated)
Crate Required Latest Status criterion ^0.50.8.2out of date approx ^0.50.5.1up to date
Crate ortools-sys Build dependencies (2 total, all up-to-date)
Crate Required Latest Status cc ^11.2.60up to date pkg-config ^0.30.3.33up to date
Crate converge-analytics No external dependencies! 🙌
Crate converge-policy No external dependencies! 🙌
Crate converge-runtime Dev dependencies (2 total, all up-to-date)
Crate converge-storage No external dependencies! 🙌
Crate example-hello-convergence No external dependencies! 🙌
Crate example-custom-agent No external dependencies! 🙌
Crate example-meeting-scheduler Dependencies (1 total, all up-to-date)
Crate Required Latest Status serde_json ^11.0.149up to date
Crate example-custom-provider Dependencies (1 total, 1 possibly insecure)
Crate Required Latest Status tokio ⚠️ ^11.52.1maybe insecure
Crate example-expense-approval No external dependencies! 🙌
Crate example-vendor-selection No external dependencies! 🙌
Crate example-loan-application No external dependencies! 🙌
Crate example-formation-mixed Dependencies (3 total, 1 possibly insecure)
Crate example-live-formation Dependencies (3 total, 1 possibly insecure)
Crate example-intent-codec-loop No external dependencies! 🙌
Crate example-analytics-packs Dependencies (3 total, 1 possibly insecure)
Crate example-adaptive-gap-loop No external dependencies! 🙌
Crate example-fixed-point-vs-budget No external dependencies! 🙌
Crate example-reconciliation-loop No external dependencies! 🙌
Security Vulnerabilities tokio: reject_remote_clients Configuration corruptionRUSTSEC-2023-0001
On Windows, configuring a named pipe server with pipe_mode will force ServerOptions ::reject_remote_clients as false.
This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.
The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.
Workarounds
Ensure that pipe_mode is set first after initializing a ServerOptions . For example:
let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);
Patched
>=1.18.4, <1.19.0
>=1.20.3, <1.21.0
>=1.23.1