This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate kct

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.3.194.5.37up to date
 tracing-appender^0.2.20.2.3up to date
 tracing-subscriber^0.3.170.3.19up to date

Crate kct_cli

No external dependencies! 🙌

Crate kct_compiler

No external dependencies! 🙌

Crate kct_helper

No external dependencies! 🙌

Crate kct_jsonnet

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 jrsonnet-evaluator^0.5.0-pre60.4.2up to date
 jrsonnet-gcmodule^0.3.30.3.9up to date
 jrsonnet-interner^0.5.0-pre60.4.2up to date
 jrsonnet-parser^0.5.0-pre60.4.2up to date
 jrsonnet-stdlib^0.5.0-pre60.4.2up to date

Crate kct_kube

Dependencies

(5 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 once_cell^1.18.01.21.3up to date
 regex^1.9.11.11.1up to date
 k8s-openapi^0.17.00.24.0out of date
 kube^0.81.00.99.0out of date
 openssl ⚠️^0.10.550.10.72maybe insecure

Crate kct_package

Dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 globwalk^0.8.00.9.1out of date
 semver^1.0.181.0.26up to date
 url^2.4.02.5.4up to date

Crate kct_testing

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 fs_extra^1.3.01.3.0up to date
 tempfile^3.8.03.19.1up to date

Security Vulnerabilities

openssl: Use-After-Free in `Md::fetch` and `Cipher::fetch`

RUSTSEC-2025-0022

When a Some(...) value was passed to the properties argument of either of these functions, a use-after-free would result.

In practice this would nearly always result in OpenSSL treating the properties as an empty string (due to CString::drop's behavior).

The maintainers thank quitbug for reporting this vulnerability to us.