This project might be open to known security vulnerabilities , which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom .
Crate prono-app Dependencies (14 total, 4 outdated)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status rstest ^0.260.26.1up to date
Crate prono-backend Dependencies (7 total, 1 possibly insecure)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status rstest ^0.260.26.1up to date
Crate prono-cli Dependencies (3 total, 1 possibly insecure)
Crate Required Latest Status clap ^44.6.0up to date tokio ⚠️ ^11.51.1maybe insecure env_logger ^0.110.11.10up to date
Crate generic Dependencies (1 total, all up-to-date)
Crate Required Latest Status log ^0.4.290.4.29up to date
Crate prono Dependencies (11 total, 1 outdated)
Crate Required Latest Status chrono ^0.4.430.4.44up to date serde ^1.0.2281.0.228up to date serde_json ^1.0.1491.0.149up to date uuid ^1.20.01.23.0up to date async-trait ^0.1.890.1.89up to date log ^0.4.290.4.29up to date thiserror ^2.0.172.0.18up to date tokio ^1.49.01.51.1up to date dirs ^6.0.06.0.0up to date secure-string ^0.3.00.3.0up to date toml ^0.9.81.1.2+spec-1.1.0out of date
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status rstest ^0.260.26.1up to date
Crate prono_db Dependencies (5 total, all up-to-date)
Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status rstest ^0.260.26.1up to date
Crate prono_api Dependencies (2 total, all up-to-date)
Crate Required Latest Status mockall ^0.140.14.0up to date serde ^1.01.0.228up to date
Security Vulnerabilities tokio: reject_remote_clients Configuration corruptionRUSTSEC-2023-0001
On Windows, configuring a named pipe server with pipe_mode will force ServerOptions ::reject_remote_clients as false.
This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.
The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.
Workarounds
Ensure that pipe_mode is set first after initializing a ServerOptions . For example:
let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);
Patched
>=1.18.4, <1.19.0
>=1.20.3, <1.21.0
>=1.23.1