This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate aw-client-rust

Dependencies

(6 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 reqwest^0.110.12.9out of date
 gethostname^0.40.5.0out of date
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 chrono ⚠️^0.40.4.38maybe insecure
 tokio^1.28.21.41.1up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 rocket^0.5.0-rc.10.5.1up to date
 tokio-test*0.4.4up to date

Crate aw-datastore

Dependencies

(7 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 appdirs^0.20.2.0up to date
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 chrono ⚠️^0.40.4.38maybe insecure
 rusqlite^0.300.32.1out of date
 mpsc_requests^0.30.3.4up to date
 log^0.40.4.22up to date

Crate aw-models

Dependencies

(5 total, 1 possibly insecure)

CrateRequiredLatestStatus
 chrono ⚠️^0.40.4.38maybe insecure
 log^0.40.4.22up to date
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 schemars^0.80.8.21up to date

Crate aw-transform

Dependencies

(6 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 serde^1.01.0.215up to date
 url>=2.22.5.4up to date
 serde_json^1.01.0.133up to date
 fancy-regex^0.12.00.14.0out of date
 log^0.40.4.22up to date
 chrono ⚠️^0.40.4.38maybe insecure

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date

Crate aw-server

Dependencies

(15 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 rocket^0.5.00.5.1up to date
 rocket_cors^0.6.00.6.0up to date
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 chrono ⚠️^0.40.4.38maybe insecure
 appdirs^0.2.00.2.0up to date
 lazy_static^1.41.5.0up to date
 log^0.40.4.22up to date
 fern^0.60.7.0out of date
 toml^0.80.8.19up to date
 gethostname^0.40.5.0out of date
 uuid^1.31.11.0up to date
 clap^4.14.5.21up to date
 log-panics^22.1.0up to date
 rust-embed^8.0.08.5.0up to date

Crate aw-sync

Dependencies

(10 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 log^0.40.4.22up to date
 toml^0.80.8.19up to date
 chrono ⚠️^0.40.4.38maybe insecure
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 reqwest^0.110.12.9out of date
 clap^4.14.5.21up to date
 appdirs^0.2.00.2.0up to date
 dirs^5.0.15.0.1up to date
 gethostname^0.4.30.5.0out of date

Crate aw-query

Dependencies

(6 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 chrono ⚠️^0.40.4.38maybe insecure
 plex^0.3.00.3.1up to date
 log^0.40.4.22up to date
 fancy-regex^0.12.00.14.0out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References