This project might be open to known security vulnerabilities , which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom .
Crate bevy Dev dependencies (10 total, all up-to-date)
Crate bevy_internal No external dependencies! 🙌
Crate bevy_mobile_example No external dependencies! 🙌
Crate ci Dependencies (3 total, all up-to-date)
Crate Required Latest Status argh ^0.10.1.12up to date xshell ^0.20.2.6up to date bitflags ^2.32.5.0up to date
Crate build-templated-pages Dependencies (5 total, all up-to-date)
Crate build-wasm-example Dependencies (2 total, all up-to-date)
Crate Required Latest Status xshell ^0.20.2.6up to date clap ^4.04.5.4up to date
Crate example-showcase Dependencies (5 total, all up-to-date)
Crate Required Latest Status xshell ^0.20.2.6up to date clap ^4.04.5.4up to date ron ^0.80.8.1up to date toml_edit ^0.22.70.22.13up to date pbr ^1.11.1.1up to date
Crate errors No external dependencies! 🙌
Crate bevy_a11y Dependencies (1 total, 1 outdated)
Crate Required Latest Status accesskit ^0.120.14.0out of date
Crate bevy_app Dependencies (3 total, all up-to-date)
Crate bevy_core Dependencies (2 total, all up-to-date)
Crate Required Latest Status serde ^1.01.0.202up to date uuid ^1.01.8.0up to date
Dev dependencies (2 total, all up-to-date)
Crate bevy_derive Dependencies (2 total, all up-to-date)
Crate Required Latest Status quote ^1.01.0.36up to date syn ^2.02.0.64up to date
Crate bevy_diagnostic Dependencies (1 total, all up-to-date)
Crate bevy_ecs Dependencies (8 total, all up-to-date)
Dev dependencies (2 total, all up-to-date)
Crate bevy_state No external dependencies! 🙌
Crate bevy_hierarchy Dependencies (1 total, all up-to-date)
Crate Required Latest Status smallvec ^1.111.13.2up to date
Crate bevy_input Dependencies (3 total, all up-to-date)
Crate bevy_log Dependencies (6 total, all up-to-date)
Crate bevy_math Dependencies (6 total, all up-to-date)
Crate Required Latest Status glam ^0.270.27.0up to date thiserror ^1.01.0.61up to date serde ^11.0.202up to date libm ^0.20.2.8up to date approx ^0.50.5.1up to date rand ^0.80.8.5up to date
Dev dependencies (3 total, all up-to-date)
Crate Required Latest Status approx ^0.50.5.1up to date rand ^0.80.8.5up to date rand_chacha ^0.30.3.1up to date
Crate bevy_ptr No external dependencies! 🙌
Crate bevy_reflect Dependencies (9 total, all up-to-date)
Dev dependencies (6 total, all up-to-date)
Crate bevy_time Dependencies (3 total, all up-to-date)
Crate bevy_transform Dependencies (2 total, all up-to-date)
Crate Required Latest Status serde ^11.0.202up to date thiserror ^1.01.0.61up to date
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status approx ^0.5.10.5.1up to date
Crate bevy_utils Dependencies (5 total, 1 outdated, 1 possibly insecure)
Dev dependencies (1 total, all up-to-date)
Crate bevy_window Dependencies (3 total, all up-to-date)
Crate bevy_tasks Dependencies (5 total, all up-to-date)
Dev dependencies (1 total, 1 outdated)
Crate Required Latest Status web-time ^0.21.1.0out of date
Crate bevy_animation Dependencies (8 total, 1 possibly insecure)
Crate bevy_asset Dependencies (13 total, 1 outdated)
Crate bevy_audio Dependencies (1 total, 1 outdated)
Crate Required Latest Status rodio ^0.170.18.0out of date
Crate bevy_color Dependencies (5 total, 1 outdated)
Crate bevy_core_pipeline Dependencies (6 total, 1 possibly insecure)
Crate bevy_gltf Dependencies (7 total, all up-to-date)
Crate bevy_pbr Dependencies (15 total, 1 outdated, 1 possibly insecure)
Crate bevy_render Dependencies (21 total, 2 outdated)
Crate bevy_dynamic_plugin Dependencies (2 total, all up-to-date)
Crate bevy_scene Dependencies (3 total, all up-to-date)
Crate Required Latest Status serde ^1.01.0.202up to date uuid ^1.11.8.0up to date thiserror ^1.01.0.61up to date
Dev dependencies (3 total, all up-to-date)
Crate bevy_sprite Dependencies (7 total, all up-to-date)
Crate bevy_text Dependencies (4 total, all up-to-date)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status approx ^0.5.10.5.1up to date
Crate bevy_ui Dependencies (6 total, all up-to-date)
Crate bevy_winit Dependencies (6 total, 2 outdated)
Crate bevy_gilrs Dependencies (2 total, all up-to-date)
Crate Required Latest Status gilrs ^0.10.10.10.7up to date thiserror ^1.01.0.61up to date
Crate bevy_gizmos Dependencies (1 total, all up-to-date)
Crate Required Latest Status bytemuck ^1.01.16.0up to date
Crate bevy_dev_tools Dependencies (2 total, all up-to-date)
Crate Required Latest Status serde ^1.01.0.202up to date ron ^0.8.00.8.1up to date
Crate bevy_macro_utils Dependencies (4 total, all up-to-date)
Crate Required Latest Status toml_edit ^0.22.70.22.13up to date syn ^2.02.0.64up to date quote ^1.01.0.36up to date proc-macro2 ^1.01.0.82up to date
Crate bevy_ecs_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date quote ^1.01.0.36up to date proc-macro2 ^1.01.0.82up to date
Crate bevy_state_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date quote ^1.01.0.36up to date proc-macro2 ^1.01.0.82up to date
Crate bevy_reflect_derive Dependencies (4 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date proc-macro2 ^1.01.0.82up to date quote ^1.01.0.36up to date uuid ^1.11.8.0up to date
Crate bevy_utils_proc_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date quote ^1.01.0.36up to date proc-macro2 ^1.01.0.82up to date
Crate bevy_asset_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date proc-macro2 ^1.01.0.82up to date quote ^1.01.0.36up to date
Crate bevy_encase_derive Dependencies (1 total, all up-to-date)
Crate bevy_mikktspace Dependencies (1 total, all up-to-date)
Crate Required Latest Status glam ^0.270.27.0up to date
Crate bevy_render_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date proc-macro2 ^1.01.0.82up to date quote ^1.01.0.36up to date
Crate bevy_gizmos_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.64up to date proc-macro2 ^1.01.0.82up to date quote ^1.01.0.36up to date
Security Vulnerabilities smallvec: Buffer overflow in SmallVec::insert_manyRUSTSEC-2021-0003
A bug in the SmallVec::insert_many method caused it to allocate a buffer that was smaller than needed. It then wrote past the end of the buffer, causing a buffer overflow and memory corruption on the heap.
This bug was only triggered if the iterator passed to insert_many yielded more items than the lower bound returned from its size_hint method.
The flaw was corrected in smallvec 0.6.14 and 1.6.1, by ensuring that additional space is always reserved for each item inserted. The fix also simplified the implementation of insert_many to use less unsafe code, so it is easier to verify its correctness.
Thank you to Yechan Bae (@Qwaz) and the Rust group at Georgia Tech’s SSLab for finding and reporting this bug.
Patched
>=0.6.14, <1.0.0
>=1.6.1
thread_local: Data race in `Iter` and `IterMut`RUSTSEC-2022-0006
In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a ThreadLocal's values.
Crates using Iter::next, or IterMut::next are affected by this issue.
