This project might be open to known security vulnerabilities , which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom .
Crate fluxfox
Dependencies (21 total, all up-to-date)
Dev dependencies (2 total, all up-to-date)
Crate Required Latest Status sha1 ^0.10
0.10.6
up to date hex ^0.4
0.4.3
up to date
Crate async
Dependencies (6 total, 1 possibly insecure)
Crate Required Latest Status bpaf ^0.9
0.9.15
up to date tokio ⚠️ ^1
1.42.0
maybe insecure logger ^0.4
0.4.0
up to date env_logger ^0.11
0.11.6
up to date log ^0.4
0.4.22
up to date anyhow ^1.0
1.0.95
up to date
Crate serde_demo
Dependencies (6 total, all up-to-date)
Crate Required Latest Status bpaf ^0.9
0.9.15
up to date logger ^0.4
0.4.0
up to date env_logger ^0.11
0.11.6
up to date log ^0.4
0.4.22
up to date anyhow ^1.0
1.0.95
up to date bincode ^1.3
1.3.3
up to date
Crate imginfo
Dependencies (4 total, all up-to-date)
Crate Required Latest Status bpaf ^0.9
0.9.15
up to date logger ^0.4
0.4.0
up to date env_logger ^0.11
0.11.6
up to date log ^0.4.22
0.4.22
up to date
Crate imgdump
Dependencies (4 total, all up-to-date)
Crate Required Latest Status bpaf ^0.9
0.9.15
up to date logger ^0.4
0.4.0
up to date env_logger ^0.11
0.11.6
up to date log ^0.4.22
0.4.22
up to date
Crate imgviz
Dependencies (10 total, 1 outdated)
Crate png2disk
Dependencies (6 total, all up-to-date)
Crate Required Latest Status bpaf ^0.9
0.9.15
up to date logger ^0.4
0.4.0
up to date env_logger ^0.11
0.11.6
up to date log ^0.4.22
0.4.22
up to date anyhow ^1.0
1.0.95
up to date tiny-skia ^0.11
0.11.4
up to date
Crate ffedit
Dependencies (9 total, 2 outdated)
Crate fftool
Dependencies (7 total, all up-to-date)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status tempfile ^3.14
3.14.0
up to date
Crate ff_egui_app
Dependencies (12 total, 4 outdated)
Crate fluxfox_egui
Dependencies (7 total, 2 outdated)
Crate Required Latest Status log ^0.4
0.4.22
up to date egui ^0.28
0.30.0
out of date egui_extras ^0.28
0.30.0
out of date serde ^1.0
1.0.216
up to date strum ^0.26
0.26.3
up to date strum_macros ^0.26
0.26.4
up to date image ^0.25
0.25.5
up to date
Crate fat_example
Dependencies (4 total, all up-to-date)
Crate Required Latest Status bpaf ^0.9
0.9.15
up to date logger ^0.4
0.4.0
up to date env_logger ^0.11
0.11.6
up to date log ^0.4.22
0.4.22
up to date
Security Vulnerabilities tokio
: reject_remote_clients Configuration corruptionRUSTSEC-2023-0001
On Windows, configuring a named pipe server with pipe_mode will force ServerOptions ::reject_remote_clients as false
.
This drops any intended explicit configuration for the reject_remote_clients that may have been set as true
previously.
The default setting of reject_remote_clients is normally true
meaning the default is also overridden as false
.
Workarounds
Ensure that pipe_mode is set first after initializing a ServerOptions . For example:
let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);
Patched
>=1.18.4, <1.19.0
>=1.20.3, <1.21.0
>=1.23.1