This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate aw-client-rust

Dependencies

(6 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 reqwest^0.110.12.4out of date
 gethostname^0.40.4.3up to date
 serde^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 chrono ⚠️^0.40.4.38maybe insecure
 tokio^1.28.21.37.0up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 rocket^0.5.0-rc.10.5.0up to date
 tokio-test*0.4.4up to date

Crate aw-datastore

Dependencies

(7 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 appdirs^0.20.2.0up to date
 serde^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 chrono ⚠️^0.40.4.38maybe insecure
 rusqlite^0.300.31.0out of date
 mpsc_requests^0.30.3.3up to date
 log^0.40.4.21up to date

Crate aw-models

Dependencies

(5 total, 1 possibly insecure)

CrateRequiredLatestStatus
 chrono ⚠️^0.40.4.38maybe insecure
 log^0.40.4.21up to date
 serde^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 schemars^0.80.8.16up to date

Crate aw-transform

Dependencies

(6 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 serde^1.01.0.198up to date
 rocket^0.5.0-rc.10.5.0up to date
 serde_json^1.01.0.116up to date
 fancy-regex^0.12.00.13.0out of date
 log^0.40.4.21up to date
 chrono ⚠️^0.40.4.38maybe insecure

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date

Crate aw-server

Dependencies

(16 total, 1 possibly insecure)

CrateRequiredLatestStatus
 rocket^0.5.00.5.0up to date
 rocket_cors^0.6.00.6.0up to date
 multipart^0.180.18.0up to date
 serde^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 chrono ⚠️^0.40.4.38maybe insecure
 appdirs^0.2.00.2.0up to date
 lazy_static^1.41.4.0up to date
 log^0.40.4.21up to date
 fern^0.60.6.2up to date
 toml^0.80.8.12up to date
 gethostname^0.40.4.3up to date
 uuid^1.31.8.0up to date
 clap^4.14.5.4up to date
 log-panics^22.1.0up to date
 rust-embed^8.0.08.3.0up to date

Crate aw-sync

Dependencies

(10 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 log^0.40.4.21up to date
 toml^0.80.8.12up to date
 chrono ⚠️^0.40.4.38maybe insecure
 serde^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 reqwest^0.110.12.4out of date
 clap^4.14.5.4up to date
 appdirs^0.2.00.2.0up to date
 dirs^5.0.15.0.1up to date
 gethostname^0.4.30.4.3up to date

Crate aw-query

Dependencies

(6 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 serde^1.01.0.198up to date
 serde_json^1.01.0.116up to date
 chrono ⚠️^0.40.4.38maybe insecure
 plex^0.3.00.3.0up to date
 log^0.40.4.21up to date
 fancy-regex^0.12.00.13.0out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References