Deps.rs

kitsune-soc / kitsune

[![dependency status](https://deps.rs/repo/github/kitsune-soc/kitsune/status.svg)](https://deps.rs/repo/github/kitsune-soc/kitsune)

This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate kitsune-activitypub

Dependencies

(17 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.80up to date
 autometrics^1.0.11.0.1up to date
 base64-simd^0.8.00.8.0up to date
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 futures-util^0.3.300.3.30up to date
 headers^0.4.00.4.0up to date
 http^1.1.01.1.0up to date
 iso8601-timestamp^0.2.170.2.17up to date
 mime^0.3.170.3.17up to date
 mime_guess^2.0.42.0.4up to date
 serde^1.0.2001.0.200up to date
 sha2^0.10.80.10.8up to date
 simd-json^0.13.100.13.10up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date
 url^2.5.02.5.0up to date

Dev dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 http-body-util^0.1.10.1.1up to date
 hyper^1.3.11.3.1up to date
 pretty_assertions^1.4.01.4.0up to date
 tokio^1.37.01.37.0up to date
 tower^0.4.130.4.13up to date

Crate kitsune-cache

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 enum_dispatch^0.3.130.3.13up to date
 moka^0.12.70.12.7up to date
 redis^0.25.30.25.3up to date
 serde^1.0.2001.0.200up to date
 simd-json^0.13.100.13.10up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.37.01.37.0up to date

Crate kitsune-captcha

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 enum_dispatch^0.3.130.3.13up to date
 http^1.1.01.1.0up to date
 serde^1.0.2001.0.200up to date
 serde_urlencoded^0.7.10.7.1up to date
 simd-json^0.13.100.13.10up to date
 strum^0.26.20.26.2up to date
 typed-builder^0.18.20.18.2up to date

Crate kitsune-config

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 eyre^0.6.120.6.12up to date
 human-size^0.4.30.4.3up to date
 isolang^2.4.02.4.0up to date
 serde^1.0.2001.0.200up to date
 smol_str^0.2.10.2.1up to date
 tokio^1.37.01.37.0up to date
 toml^0.8.120.8.12up to date

Crate kitsune-core

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.80up to date
 const_format^0.2.320.2.32up to date
 serde^1.0.2001.0.200up to date
 typed-builder^0.18.20.18.2up to date

Build dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 vergen^8.3.18.3.1up to date

Crate kitsune-db

Dependencies

(18 total, all up-to-date)

CrateRequiredLatestStatus
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 diesel_full_text_search^2.1.12.1.1up to date
 diesel_migrations^2.1.02.1.0up to date
 futures-util^0.3.300.3.30up to date
 iso8601-timestamp^0.2.170.2.17up to date
 num-derive^0.4.20.4.2up to date
 num-traits^0.2.180.2.19up to date
 rustls^0.23.50.23.5up to date
 rustls-native-certs^0.7.00.7.0up to date
 serde^1.0.2001.0.200up to date
 simd-json^0.13.100.13.10up to date
 tokio^1.37.01.37.0up to date
 tokio-postgres^0.7.100.7.10up to date
 tokio-postgres-rustls^0.12.00.12.0up to date
 tracing^0.1.400.1.40up to date
 tracing-log^0.2.00.2.0up to date
 typed-builder^0.18.20.18.2up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.37.01.37.0up to date

Crate kitsune-email

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 askama^0.12.10.12.1up to date
 askama_axum^0.4.00.4.0up to date
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 lettre^0.11.70.11.7up to date
 mrml^3.1.53.1.5up to date
 typed-builder^0.18.20.18.2up to date

Crate kitsune-embed

Dependencies

(8 total, all up-to-date)

CrateRequiredLatestStatus
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 http^1.1.01.1.0up to date
 iso8601-timestamp^0.2.170.2.17up to date
 once_cell^1.19.01.19.0up to date
 scraper^0.19.00.19.0up to date
 smol_str^0.2.10.2.1up to date
 typed-builder^0.18.20.18.2up to date

Crate kitsune-error

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 axum-core^0.4.30.4.3up to date
 eyre^0.6.120.6.12up to date
 garde^0.18.00.18.0up to date
 http^1.1.01.1.0up to date
 simd-json^0.13.100.13.10up to date
 sync_wrapper^1.0.11.0.1up to date
 tracing^0.1.400.1.40up to date

Crate kitsune-federation

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 typed-builder^0.18.20.18.2up to date

Crate kitsune-federation-filter

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 globset^0.4.140.4.14up to date
 url^2.5.02.5.0up to date

Crate kitsune-http-client

Dependencies

(14 total, all up-to-date)

CrateRequiredLatestStatus
 async-stream^0.3.50.3.5up to date
 bytes^1.6.01.6.0up to date
 futures-util^0.3.300.3.30up to date
 http-body^1.0.01.0.0up to date
 http-body-util^0.1.10.1.1up to date
 hyper^1.3.11.3.1up to date
 hyper-util^0.1.30.1.3up to date
 hyper-rustls^0.27.10.27.1up to date
 pin-project^1.1.51.1.5up to date
 serde^1.0.2001.0.200up to date
 simdutf8^0.1.40.1.4up to date
 simd-json^0.13.100.13.10up to date
 tower^0.4.130.4.13up to date
 tower-http^0.5.20.5.2up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.37.01.37.0up to date

Crate kitsune-jobs

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 derive_more^1.0.0-beta.60.99.17up to date
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 futures-util^0.3.300.3.30up to date
 serde^1.0.2001.0.200up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date

Crate kitsune-language

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 isolang^2.4.02.4.0up to date
 rustc-hash^1.1.01.1.0up to date
 whatlang^0.16.40.16.4up to date
 whichlang^0.1.00.1.0up to date

Crate kitsune-mastodon

Dependencies

(10 total, all up-to-date)

CrateRequiredLatestStatus
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 futures-util^0.3.300.3.30up to date
 iso8601-timestamp^0.2.170.2.17up to date
 mime^0.3.170.3.17up to date
 serde^1.0.2001.0.200up to date
 simd-json^0.13.100.13.10up to date
 smol_str^0.2.10.2.1up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date

Crate kitsune-observability

Dependencies

(15 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.80up to date
 eyre^0.6.120.6.12up to date
 http-body-util^0.1.10.1.1up to date
 hyper^1.3.11.3.1up to date
 metrics^0.22.30.22.3up to date
 metrics-tracing-context^0.15.00.15.0up to date
 metrics-util^0.16.30.16.3up to date
 opentelemetry^0.22.00.22.0up to date
 opentelemetry-http^0.11.10.11.1up to date
 opentelemetry-otlp^0.15.00.15.0up to date
 opentelemetry_sdk^0.22.10.22.1up to date
 tracing^0.1.400.1.40up to date
 tracing-error^0.2.00.2.0up to date
 tracing-opentelemetry^0.23.00.23.0up to date
 tracing-subscriber^0.3.180.3.18up to date

Crate kitsune-oidc

Dependencies

(11 total, all up-to-date)

CrateRequiredLatestStatus
 enum_dispatch^0.3.130.3.13up to date
 http^1.1.01.1.0up to date
 http-body-util^0.1.10.1.1up to date
 moka^0.12.70.12.7up to date
 oauth2^5.0.0-alpha.44.4.2up to date
 once_cell^1.19.01.19.0up to date
 openidconnect^4.0.0-alpha.13.5.0up to date
 redis^0.25.30.25.3up to date
 serde^1.0.2001.0.200up to date
 simd-json^0.13.100.13.10up to date
 url^2.5.02.5.0up to date

Crate kitsune-s3

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^1.6.01.6.0up to date
 futures-util^0.3.300.3.30up to date
 http^1.1.01.1.0up to date
 quick-xml^0.31.00.31.0up to date
 rusty-s3^0.5.00.5.0up to date
 serde^1.0.2001.0.200up to date
 typed-builder^0.18.20.18.2up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.37.01.37.0up to date

Crate kitsune-scss-compiler

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^1.0.821.0.82up to date
 glob^0.3.10.3.1up to date
 rsass^0.28.80.28.8up to date
 tracing^0.1.400.1.40up to date

Crate kitsune-search

Dependencies

(11 total, all up-to-date)

CrateRequiredLatestStatus
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 diesel_full_text_search^2.1.12.1.1up to date
 enum_dispatch^0.3.130.3.13up to date
 futures-util^0.3.300.3.30up to date
 serde^1.0.2001.0.200up to date
 strum^0.26.20.26.2up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date
 isahc^1.7.21.7.2up to date
 meilisearch-sdk^0.25.00.25.0up to date

Crate kitsune-service

Dependencies

(27 total, 1 insecure)

CrateRequiredLatestStatus
 ahash^0.8.110.8.11up to date
 argon2^0.5.30.5.3up to date
 async-stream^0.3.50.3.5up to date
 bytes^1.6.01.6.0up to date
 derive_builder^0.20.00.20.0up to date
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 eyre^0.6.120.6.12up to date
 futures-util^0.3.300.3.30up to date
 garde^0.18.00.18.0up to date
 http^1.1.01.1.0up to date
 img-parts^0.3.00.3.0up to date
 iso8601-timestamp^0.2.170.2.17up to date
 mime^0.3.170.3.17up to date
 password-hash^0.5.00.5.0up to date
 pkcs8^0.10.20.10.2up to date
 rand^0.8.50.8.5up to date
 redis^0.25.30.25.3up to date
 rsa ⚠️^0.9.60.9.6insecure
 rusty-s3^0.5.00.5.0up to date
 serde^1.0.2001.0.200up to date
 smol_str^0.2.10.2.1up to date
 tokio^1.37.01.37.0up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date
 url^2.5.02.5.0up to date
 zxcvbn^2.2.22.2.2up to date

Dev dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 hex-simd^0.8.00.8.0up to date
 http-body-util^0.1.10.1.1up to date
 hyper^1.3.11.3.1up to date
 pretty_assertions^1.4.01.4.0up to date
 tempfile^3.10.13.10.1up to date
 tower^0.4.130.4.13up to date

Crate kitsune-storage

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^1.6.01.6.0up to date
 derive_more^1.0.0-beta.60.99.17up to date
 futures-util^0.3.300.3.30up to date
 rusty-s3^0.5.00.5.0up to date
 tokio^1.37.01.37.0up to date
 tokio-util^0.7.100.7.11up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 tempfile^3.10.13.10.1up to date
 tokio^1.37.01.37.0up to date

Crate kitsune-test

Dependencies

(15 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^1.6.01.6.0up to date
 diesel-async^0.4.10.4.1up to date
 futures-util^0.3.300.3.30up to date
 http^1.1.01.1.0up to date
 http-body-util^0.1.10.1.1up to date
 isolang^2.4.02.4.0up to date
 pin-project-lite^0.2.140.2.14up to date
 rand^0.8.50.8.5up to date
 redis^0.25.30.25.3up to date
 rusty-s3^0.5.00.5.0up to date
 testcontainers^0.16.70.16.7up to date
 testcontainers-modules^0.4.10.4.2up to date
 tokio^1.37.01.37.0up to date
 url^2.5.02.5.0up to date
 uuid^1.8.01.8.0up to date

Crate kitsune-type

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 iso8601-timestamp^0.2.170.2.17up to date
 serde^1.0.2001.0.200up to date
 simd-json^0.13.100.13.10up to date
 smol_str^0.2.10.2.1up to date
 strum^0.26.20.26.2up to date
 utoipa^4.2.04.2.0up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 pretty_assertions^1.4.01.4.0up to date
 serde_test^11.0.176up to date

Crate kitsune-url

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 smol_str^0.2.10.2.1up to date
 typed-builder^0.18.20.18.2up to date

Crate kitsune-util

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 bubble-bath^0.1.30.1.3up to date
 iso8601-timestamp^0.2.170.2.17up to date
 once_cell^1.19.01.19.0up to date
 pulldown-cmark^0.10.30.10.3up to date
 rand^0.8.50.8.5up to date
 tokio^1.37.01.37.0up to date

Crate kitsune-wasm-mrf

Dependencies

(16 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.80up to date
 color-eyre^0.6.30.6.3up to date
 derive_more^1.0.0-beta.60.99.17up to date
 enum_dispatch^0.3.130.3.13up to date
 futures-util^0.3.300.3.30up to date
 redis^0.25.30.25.3up to date
 simd-json^0.13.100.13.10up to date
 slab^0.4.90.4.9up to date
 sled^0.34.70.34.7up to date
 smol_str^0.2.10.2.1up to date
 tokio^1.37.01.37.0up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date
 walkdir^2.5.02.5.0up to date
 wasmtime^20.0.020.0.1up to date
 wasmtime-wasi^20.0.020.0.1up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 tempfile^3.10.13.10.1up to date
 tokio^1.37.01.37.0up to date
 tracing-subscriber^0.3.180.3.18up to date

Crate example-mrf

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 rand^0.8.50.8.5up to date
 wit-bindgen^0.24.00.24.0up to date

Crate kitsune-webfinger

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.80up to date
 autometrics^1.0.11.0.1up to date
 futures-util^0.3.300.3.30up to date
 http^1.1.01.1.0up to date
 redis^0.25.30.25.3up to date
 tracing^0.1.400.1.40up to date
 urlencoding^2.1.32.1.3up to date

Dev dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 http-body-util^0.1.10.1.1up to date
 hyper^1.3.11.3.1up to date
 pretty_assertions^1.4.01.4.0up to date
 simd-json^0.13.100.13.10up to date
 tokio^1.37.01.37.0up to date
 tower^0.4.130.4.13up to date

Crate kitsune

Dependencies

(47 total, all up-to-date)

CrateRequiredLatestStatus
 argon2^0.5.30.5.3up to date
 askama^0.12.10.12.1up to date
 askama_axum^0.4.00.4.0up to date
 async-trait^0.1.800.1.80up to date
 axum^0.7.50.7.5up to date
 axum-extra^0.9.30.9.3up to date
 axum-flash^0.8.00.8.0up to date
 bytes^1.6.01.6.0up to date
 chrono^0.4.380.4.38up to date
 clap^4.5.44.5.4up to date
 color-eyre^0.6.30.6.3up to date
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 futures-util^0.3.300.3.30up to date
 headers^0.4.00.4.0up to date
 http^1.1.01.1.0up to date
 http-body-util^0.1.10.1.1up to date
 iso8601-timestamp^0.2.170.2.17up to date
 itertools^0.12.10.12.1up to date
 metrics^0.22.30.22.3up to date
 mimalloc^0.1.410.1.41up to date
 mime^0.3.170.3.17up to date
 mime_guess^2.0.42.0.4up to date
 oxide-auth^0.5.40.5.4up to date
 oxide-auth-async^0.1.10.1.1up to date
 oxide-auth-axum^0.4.00.4.0up to date
 redis^0.25.30.25.3up to date
 rust-embed^8.3.08.3.0up to date
 scoped-futures^0.1.30.1.3up to date
 serde^1.0.2001.0.200up to date
 serde_urlencoded^0.7.10.7.1up to date
 simd-json^0.13.100.13.10up to date
 simdutf8^0.1.40.1.4up to date
 strum^0.26.20.26.2up to date
 tempfile^3.10.13.10.1up to date
 time^0.3.360.3.36up to date
 tokio^1.37.01.37.0up to date
 tokio-util^0.7.100.7.11up to date
 tower^0.4.130.4.13up to date
 tower-http^0.5.20.5.2up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date
 url^2.5.02.5.0up to date
 utoipa^4.2.04.2.0up to date
 utoipa-swagger-ui^6.0.06.0.0up to date
 async-graphql^7.0.37.0.3up to date
 async-graphql-axum^7.0.37.0.3up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 pretty_assertions^1.4.01.4.0up to date
 redis^0.25.30.25.3up to date

Build dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 camino^1.1.61.1.6up to date
 fs_extra^1.3.01.3.0up to date

Crate kitsune-cli

Dependencies

(9 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.44.5.4up to date
 color-eyre^0.6.30.6.3up to date
 diesel^2.1.62.1.6up to date
 diesel-async^0.4.10.4.1up to date
 dotenvy^0.15.70.15.7up to date
 envy^0.4.20.4.2up to date
 serde^1.0.2001.0.200up to date
 tokio^1.37.01.37.0up to date
 tracing-subscriber^0.3.180.3.18up to date

Build dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 vergen^8.3.18.3.1up to date

Crate kitsune-job-runner

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.44.5.4up to date
 color-eyre^0.6.30.6.3up to date
 mimalloc^0.1.410.1.41up to date
 redis^0.25.30.25.3up to date
 tokio^1.37.01.37.0up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date

Crate athena

Dependencies

(17 total, all up-to-date)

CrateRequiredLatestStatus
 ahash^0.8.110.8.11up to date
 async-trait^0.1.800.1.80up to date
 either^1.11.01.11.0up to date
 futures-util^0.3.300.3.30up to date
 iso8601-timestamp^0.2.170.2.17up to date
 once_cell^1.19.01.19.0up to date
 rand^0.8.50.8.5up to date
 redis^0.25.30.25.3up to date
 serde^1.0.2001.0.200up to date
 simd-json^0.13.100.13.10up to date
 smol_str^0.2.10.2.1up to date
 thiserror^1.0.591.0.59up to date
 tokio^1.37.01.37.0up to date
 tokio-util^0.7.100.7.11up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date
 typetag^0.2.160.2.16up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 redis^0.25.30.25.3up to date
 tracing-subscriber^0.3.180.3.18up to date

Crate blowocking

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 once_cell^1.19.01.19.0up to date
 rayon^1.10.01.10.0up to date
 thiserror^1.0.591.0.59up to date
 tokio^1.37.01.37.0up to date
 tracing^0.1.400.1.40up to date

Crate cursiv

Dependencies

(11 total, all up-to-date)

CrateRequiredLatestStatus
 aliri_braid^0.4.00.4.0up to date
 blake3^1.5.11.5.1up to date
 cookie^0.18.10.18.1up to date
 hex-simd^0.8.00.8.0up to date
 http^1.1.01.1.0up to date
 pin-project-lite^0.2.140.2.14up to date
 rand^0.8.50.8.5up to date
 tower^0.4.130.4.13up to date
 zeroize^1.7.01.7.0up to date
 async-trait^0.1.800.1.80up to date
 axum-core^0.4.30.4.3up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures-test^0.3.300.3.30up to date
 tower^0.4.130.4.13up to date

Crate geomjeungja

Dependencies

(8 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.80up to date
 hickory-resolver^0.24.10.24.1up to date
 rand^0.8.50.8.5up to date
 serde^1.0.2001.0.200up to date
 simdutf8^0.1.40.1.4up to date
 thiserror^1.0.591.0.59up to date
 tracing^0.1.400.1.40up to date
 typed-builder^0.18.20.18.2up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 insta^1.38.01.38.0up to date
 rand_xorshift^0.3.00.3.0up to date
 serde_json^1.0.1161.0.116up to date
 tokio^1.37.01.37.0up to date

Crate http-compat

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 http^1.1.01.1.0up to date

Crate http-signatures

Dependencies

(14 total, all up-to-date)

CrateRequiredLatestStatus
 atoi_radix10^0.0.10.0.1up to date
 base64-simd^0.8.00.8.0up to date
 const-oid^0.9.60.9.6up to date
 derive_builder^0.20.00.20.0up to date
 http^1.1.01.1.0up to date
 httpdate^1.0.31.0.3up to date
 itertools^0.12.10.12.1up to date
 logos^0.14.00.14.0up to date
 miette^7.2.07.2.0up to date
 pkcs8^0.10.20.10.2up to date
 ring^0.17.80.17.8up to date
 scoped-futures^0.1.30.1.3up to date
 thiserror^1.0.591.0.59up to date
 tracing^0.1.400.1.40up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date
 tokio^1.37.01.37.0up to date

Crate just-retry

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 chrono^0.4.380.4.38up to date
 retry-policies^0.3.00.3.0up to date
 tokio^1.37.01.37.0up to date
 tracing^0.1.400.1.40up to date

Crate masto-id-convert

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 atoi_radix10^0.0.10.0.1up to date
 nanorand^0.7.00.7.0up to date
 uuid^1.8.01.8.0up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date
 time^0.3.360.3.36up to date
 uuid^1.8.01.8.0up to date

Crate mrf-manifest

Dependencies

(9 total, all up-to-date)

CrateRequiredLatestStatus
 leb128^0.2.50.2.5up to date
 olpc-cjson^0.1.30.1.3up to date
 schemars^0.8.170.8.17up to date
 semver^1.0.221.0.22up to date
 serde^1.0.2001.0.200up to date
 serde_json^1.0.1161.0.116up to date
 thiserror^1.0.591.0.59up to date
 wasm-encoder^0.206.00.206.0up to date
 wasmparser^0.206.00.206.0up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 serde_json^1.0.1161.0.116up to date
 insta^1.38.01.38.0up to date
 wat^1.206.01.206.0up to date

Crate mrf-tool

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.44.5.4up to date
 color-eyre^0.6.30.6.3up to date
 serde_json^1.0.1161.0.116up to date
 wasmparser^0.206.00.206.0up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 serde_json^1.0.1161.0.116up to date
 wat^1.206.01.206.0up to date

Crate multiplex-pool

No external dependencies! 🙌

Crate post-process

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 logos^0.14.00.14.0up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date
 futures^0.3.300.3.30up to date
 insta^1.38.01.38.0up to date
 pretty_assertions^1.4.01.4.0up to date

Crate speedy-uuid

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 async-graphql^7.0.37.0.3up to date
 diesel^2.1.62.1.6up to date
 redis^0.25.30.25.3up to date
 serde^1.0.2001.0.200up to date
 thiserror^1.0.591.0.59up to date
 uuid^1.8.01.8.0up to date
 uuid-simd^0.8.00.8.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 serde_test^1.0.1761.0.176up to date

Crate tick-tock-mock

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date

Crate tower-http-digest

Dependencies

(12 total, all up-to-date)

CrateRequiredLatestStatus
 base64-simd^0.8.00.8.0up to date
 bytes^1.6.01.6.0up to date
 either^1.11.01.11.0up to date
 http^1.1.01.1.0up to date
 http-body^1.0.01.0.0up to date
 memchr^2.7.22.7.2up to date
 pin-project-lite^0.2.140.2.14up to date
 sha2^0.10.80.10.8up to date
 subtle^2.5.02.5.0up to date
 tower-layer^0.3.20.3.2up to date
 tower-service^0.3.20.3.2up to date
 tracing^0.1.400.1.40up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^1.6.01.6.0up to date
 futures-test^0.3.300.3.30up to date
 http-body-util^0.1.10.1.1up to date
 tower^0.4.130.4.13up to date

Crate tower-stop-using-brave

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.11.01.11.0up to date
 http^1.1.01.1.0up to date
 once_cell^1.19.01.19.0up to date
 regex^1.10.41.10.4up to date
 tower-layer^0.3.20.3.2up to date
 tower-service^0.3.20.3.2up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures^0.3.300.3.30up to date
 tower^0.4.130.4.13up to date

Crate tower-x-clacks-overhead

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 http^1.1.01.1.0up to date
 itertools^0.12.10.12.1up to date
 pin-project-lite^0.2.140.2.14up to date
 tower-layer^0.3.20.3.2up to date
 tower-service^0.3.20.3.2up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures-test^0.3.300.3.30up to date
 tower^0.4.130.4.13up to date

Crate trials

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures-test^0.3.300.3.30up to date

Crate trials-macros

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 proc-macro2^1.0.811.0.81up to date
 quote^1.0.361.0.36up to date
 syn^2.0.602.0.60up to date

Crate xtask

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^1.0.821.0.82up to date
 argh^0.1.120.1.12up to date
 glob^0.3.10.3.1up to date
 taplo^0.13.00.13.0up to date
 tracing^0.1.400.1.40up to date
 tracing-subscriber^0.3.180.3.18up to date

Security Vulnerabilities

rsa: Marvin Attack: potential key recovery through timing sidechannels

RUSTSEC-2023-0071

Impact

Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key.

Patches

No patch is yet available, however work is underway to migrate to a fully constant-time implementation.

Workarounds

The only currently available workaround is to avoid using the rsa crate in settings where attackers are able to observe timing information, e.g. local use on a non-compromised computer is fine.

References

This vulnerability was discovered as part of the "Marvin Attack", which revealed several implementations of RSA including OpenSSL had not properly mitigated timing sidechannel attacks.