This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate blightmud

Dependencies

(34 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 libmudtelnet^2.0.12.0.1up to date
 termion^44.0.6up to date
 log^0.4.290.4.29up to date
 simple-logging^2.0.22.0.2up to date
 chrono^0.4.440.4.44up to date
 signal-hook^0.4.30.4.3up to date
 mlua^0.11.60.11.6up to date
 regex^1.12.31.12.3up to date
 strip-ansi-escapes^0.2.10.2.1up to date
 vte^0.15.00.15.0up to date
 timer^0.2.00.2.0up to date
 flate2^1.1.91.1.9up to date
 syntect^5.3.05.3.0up to date
 serde^1.0.2281.0.228up to date
 ron^0.12.10.12.1up to date
 anyhow^1.0.1021.0.102up to date
 lazy_static^1.5.01.5.0up to date
 rs-complete^1.3.11.3.1up to date
 getopts^0.2.240.2.24up to date
 human-panic^2.0.72.0.7up to date
 tts^0.26.30.26.3up to date
 serde_json^1.0.1491.0.149up to date
 git2^0.20.40.20.4up to date
 rodio^0.22.20.22.2up to date
 notify-debouncer-mini^0.6.00.7.0out of date
 hunspell-rs^0.4.00.4.0up to date
 hunspell-sys^0.3.00.3.1up to date
 rustls ⚠️^0.230.23.37maybe insecure
 webpki-roots^1.01.0.6up to date
 reqwest^0.12.280.13.2out of date
 socket2^0.6.30.6.3up to date
 mio^1.11.2.0up to date
 encoding_rs^0.80.8.35up to date
 unicode-width^0.20.2.2up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 mockall^0.14.00.14.0up to date
 mockall_double^0.3.10.3.1up to date
 rustls-pemfile^2.22.2.0up to date
 env_logger^0.11.100.11.10up to date

Crate pulldown-cmark-blightmud

Dependencies

(13 total, all up-to-date)

CrateRequiredLatestStatus
 base64^0.22.10.22.1up to date
 anstyle^1.0.141.0.14up to date
 mime^0.30.3.17up to date
 pulldown-cmark^0.130.13.3up to date
 syntect^55.3.0up to date
 textwrap^0.16.10.16.2up to date
 tracing^0.10.1.44up to date
 url^22.5.8up to date
 gethostname^1.1.01.1.0up to date
 resvg^0.47.00.47.0up to date
 image^0.25.100.25.10up to date
 rustix^1.1.41.1.4up to date
 terminal_size^0.4.40.4.4up to date

Dev dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 glob^0.3.30.3.3up to date
 similar-asserts^12.0.0out of date
 syntect^55.3.0up to date
 temp-env^0.3.60.3.6up to date
 insta^11.47.2up to date
 regex^1.10.61.12.3up to date

Build dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 syntect^55.3.0up to date

Security Vulnerabilities

rustls: rustls network-reachable panic in `Acceptor::accept`

RUSTSEC-2024-0399

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use rustls::server::Acceptor::accept() are affected.

Servers that use tokio-rustls's LazyConfigAcceptor API are affected.

Servers that use tokio-rustls's TlsAcceptor API are not affected.

Servers that use rustls-ffi's rustls_acceptor_accept API are affected.