This project might be open to known security vulnerabilities , which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom .
Crate bevy Dependencies (1 total, all up-to-date)
Crate Required Latest Status tracing ^0.10.1.41up to date
Dev dependencies (20 total, all up-to-date)
Crate bevy_internal No external dependencies! 🙌
Crate bevy_dylib No external dependencies! 🙌
Crate bevy_animation Dependencies (12 total, 2 possibly insecure)
Crate bevy_asset Dependencies (26 total, 1 outdated)
Dev dependencies (1 total, all up-to-date)
Crate bevy_ecs Dependencies (16 total, 1 possibly insecure)
Dev dependencies (3 total, all up-to-date)
Crate bevy_gizmos Dependencies (2 total, all up-to-date)
Crate Required Latest Status bytemuck ^1.01.24.0up to date tracing ^0.10.1.41up to date
Crate bevy_image Dependencies (17 total, 1 outdated)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status serde_json ^1.0.1401.0.145up to date
Crate bevy_reflect Dependencies (17 total, 2 outdated, 1 possibly insecure)
Dev dependencies (6 total, all up-to-date)
Crate bevy_render Dependencies (24 total, 2 outdated, 1 possibly insecure)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status proptest ^11.8.0up to date
Crate bevy_state Dependencies (2 total, all up-to-date)
Crate bevy_derive_compile_fail No external dependencies! 🙌
Crate bevy_ecs_compile_fail No external dependencies! 🙌
Crate bevy_reflect_compile_fail No external dependencies! 🙌
Crate bevy_mobile_example No external dependencies! 🙌
Crate auto_register_static No external dependencies! 🙌
Crate benches Dependencies (1 total, 1 outdated)
Crate Required Latest Status criterion ^0.6.00.7.0out of date
Dev dependencies (4 total, all up-to-date)
Crate Required Latest Status glam ^0.30.70.30.8up to date rand ^0.90.9.2up to date rand_chacha ^0.90.9.0up to date nonmax ^0.50.5.5up to date
Crate errors No external dependencies! 🙌
Crate bevy_app Dependencies (12 total, all up-to-date)
Dev dependencies (1 total, all up-to-date)
Crate bevy_derive Dependencies (2 total, all up-to-date)
Crate Required Latest Status quote ^1.01.0.41up to date syn ^2.02.0.106up to date
Crate bevy_diagnostic Dependencies (5 total, all up-to-date)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status serde_test ^1.01.0.177up to date
Crate bevy_input Dependencies (5 total, 1 outdated)
Crate bevy_math Dependencies (11 total, 1 possibly insecure)
Dev dependencies (5 total, all up-to-date)
Crate bevy_platform Dependencies (14 total, all up-to-date)
Crate bevy_ptr No external dependencies! 🙌
Crate bevy_time Dependencies (3 total, all up-to-date)
Crate bevy_transform Dependencies (3 total, all up-to-date)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status approx ^0.5.10.5.1up to date
Crate bevy_utils Dependencies (2 total, 1 possibly insecure)
Dev dependencies (1 total, all up-to-date)
Crate bevy_tasks Dependencies (11 total, 1 outdated)
Dev dependencies (2 total, all up-to-date)
Crate bevy_log Dependencies (10 total, all up-to-date)
Crate bevy_a11y Dependencies (2 total, all up-to-date)
Crate Required Latest Status accesskit ^0.210.21.1up to date serde ^11.0.228up to date
Crate bevy_camera_controller No external dependencies! 🙌
Crate bevy_audio Dependencies (4 total, 2 outdated)
Crate Required Latest Status rodio ^0.200.21.1out of date tracing ^0.10.1.41up to date cpal ^0.150.16.0out of date coreaudio-sys ^0.2.170.2.17up to date
Crate bevy_color Dependencies (6 total, 1 outdated)
Crate bevy_core_pipeline Dependencies (6 total, 1 possibly insecure)
Crate bevy_post_process Dependencies (6 total, 1 possibly insecure)
Crate bevy_ui_widgets Dependencies (1 total, all up-to-date)
Crate Required Latest Status accesskit ^0.210.21.1up to date
Crate bevy_anti_alias Dependencies (3 total, all up-to-date)
Crate Required Latest Status tracing ^0.10.1.41up to date dlss_wgpu ^11.0.1up to date uuid ^11.18.1up to date
Crate bevy_dev_tools Dependencies (3 total, all up-to-date)
Crate Required Latest Status serde ^1.01.0.228up to date ron ^0.110.11.0up to date tracing ^0.10.1.41up to date
Crate bevy_gilrs Dependencies (3 total, all up-to-date)
Crate Required Latest Status gilrs ^0.11.00.11.0up to date thiserror ^22.0.17up to date tracing ^0.10.1.41up to date
Crate bevy_gltf Dependencies (10 total, 1 possibly insecure)
Crate bevy_feathers Dependencies (2 total, 1 outdated)
Crate Required Latest Status smol_str ^0.20.3.2out of date accesskit ^0.210.21.1up to date
Crate bevy_shader Dependencies (7 total, 3 outdated)
Crate bevy_mesh Dependencies (9 total, 1 outdated)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status serde_json ^1.0.1401.0.145up to date
Crate bevy_camera Dependencies (6 total, 1 outdated, 1 possibly insecure)
Crate bevy_light Dependencies (1 total, all up-to-date)
Crate Required Latest Status tracing ^0.10.1.41up to date
Crate bevy_input_focus Dependencies (2 total, all up-to-date)
Crate Required Latest Status thiserror ^22.0.17up to date log ^0.40.4.28up to date
Crate bevy_pbr Dependencies (16 total, 1 outdated, 1 possibly insecure)
Crate bevy_picking Dependencies (3 total, all up-to-date)
Crate bevy_remote Dependencies (8 total, all up-to-date)
Crate bevy_scene Dependencies (4 total, all up-to-date)
Dev dependencies (3 total, all up-to-date)
Crate bevy_solari Dependencies (3 total, all up-to-date)
Crate bevy_sprite Dependencies (3 total, 1 outdated)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status approx ^0.5.10.5.1up to date
Crate bevy_sprite_render Dependencies (6 total, all up-to-date)
Crate bevy_text Dependencies (7 total, 1 outdated, 1 possibly insecure)
Crate bevy_ui Dependencies (8 total, 1 outdated, 1 possibly insecure)
Crate bevy_ui_render Dependencies (3 total, all up-to-date)
Crate bevy_window Dependencies (3 total, all up-to-date)
Crate bevy_winit Dependencies (10 total, 1 outdated)
Crate bevy_android Dependencies (1 total, all up-to-date)
Crate bevy_animation_macros Dependencies (2 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.106up to date quote ^1.01.0.41up to date
Crate bevy_asset_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.106up to date proc-macro2 ^1.01.0.101up to date quote ^1.01.0.41up to date
Crate bevy_ecs_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.0.992.0.106up to date quote ^1.01.0.41up to date proc-macro2 ^1.01.0.101up to date
Crate bevy_gizmos_macros Dependencies (2 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.106up to date quote ^1.01.0.41up to date
Crate bevy_reflect_derive Dependencies (5 total, all up-to-date)
Crate Required Latest Status indexmap ^2.02.11.4up to date proc-macro2 ^1.01.0.101up to date quote ^1.01.0.41up to date syn ^2.02.0.106up to date uuid ^1.13.11.18.1up to date
Crate bevy_encase_derive Dependencies (1 total, all up-to-date)
Crate bevy_render_macros Dependencies (3 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.106up to date proc-macro2 ^1.01.0.101up to date quote ^1.01.0.41up to date
Crate bevy_state_macros Dependencies (2 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.106up to date quote ^1.01.0.41up to date
Crate compile_fail_utils Dependencies (1 total, all up-to-date)
Crate Required Latest Status ui_test ^0.30.10.30.2up to date
Crate bevy_macro_utils Dependencies (4 total, all up-to-date)
Crate Required Latest Status syn ^2.02.0.106up to date quote ^1.01.0.41up to date proc-macro2 ^1.01.0.101up to date toml_edit ^0.23.20.23.7up to date
Security Vulnerabilities smallvec: Buffer overflow in SmallVec::insert_manyRUSTSEC-2021-0003
A bug in the SmallVec::insert_many method caused it to allocate a buffer that was smaller than needed. It then wrote past the end of the buffer, causing a buffer overflow and memory corruption on the heap.
This bug was only triggered if the iterator passed to insert_many yielded more items than the lower bound returned from its size_hint method.
The flaw was corrected in smallvec 0.6.14 and 1.6.1, by ensuring that additional space is always reserved for each item inserted. The fix also simplified the implementation of insert_many to use less unsafe code, so it is easier to verify its correctness.
Thank you to Yechan Bae (@Qwaz) and the Rust group at Georgia Tech’s SSLab for finding and reporting this bug.
Patched
>=0.6.14, <1.0.0
>=1.6.1
thread_local: Data race in `Iter` and `IterMut`RUSTSEC-2022-0006
In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a ThreadLocal's values.
Crates using Iter::next, or IterMut::next are affected by this issue.
