This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate common

Dependencies

(4 total, 1 outdated)

CrateRequiredLatestStatus
 speedy^0.80.8.7up to date
 byteorder^11.5.0up to date
 libc^0.20.2.190up to date
 bitflags^12.13.2out of date

Crate lz4-compress

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 byteorder^11.5.0up to date
 quick-error^12.0.1out of date

Crate tikv-jemalloc-sys

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 libc^0.2.80.2.190up to date

Build dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 cc^1.0.131.6.0up to date
 fs_extra^1.11.3.0up to date

Crate bytehound-preload

Dependencies

(11 total, 4 outdated, 1 insecure)

CrateRequiredLatestStatus
 parking_lot^0.120.12.5up to date
 libc^0.20.2.190up to date
 sc^0.20.2.7up to date
 lazy_static^11.5.1up to date
 log^0.40.4.34up to date
 glob^0.20.3.4out of date
 lru ⚠️^0.60.18.5insecure
 goblin^0.0.240.10.7out of date
 smallvec^11.16.2up to date
 ahash^0.80.8.12up to date
 hashbrown^0.130.17.1out of date

Crate cli-core

Dependencies

(23 total, 9 outdated, 1 insecure)

CrateRequiredLatestStatus
 smallvec^11.16.2up to date
 byteorder^11.5.0up to date
 ctrlc^33.5.2up to date
 goblin^0.0.240.10.7out of date
 string-interner^0.70.20.0out of date
 cpp_demangle^0.20.5.1out of date
 chrono^0.40.4.45up to date
 libc^0.20.2.190up to date
 log^0.40.4.34up to date
 lru ⚠️^0.60.18.5insecure
 bitflags^12.13.2out of date
 inferno^0.90.12.8out of date
 lazy_static^11.5.1up to date
 ahash^0.70.8.12out of date
 parking_lot^0.120.12.5up to date
 crossbeam-channel^0.50.5.17up to date
 rayon^11.12.0up to date
 regex^11.13.1up to date
 rhai^11.26.1up to date
 plotters^0.30.3.7up to date
 colorgrad^0.40.9.0out of date
 serde_json^11.0.151up to date
 derive_more^0.992.1.1out of date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 quickcheck^0.91.1.0out of date

Crate bytehound-cli

Dependencies

(4 total, 3 outdated)

CrateRequiredLatestStatus
 log^0.40.4.34up to date
 env_logger^0.60.11.11out of date
 structopt^0.20.3.26out of date
 tikv-jemallocator^0.40.7.0out of date

Crate server-core

Dependencies

(16 total, 9 outdated, 1 insecure)

CrateRequiredLatestStatus
 log^0.40.4.34up to date
 actix^0.80.13.5out of date
 actix-web^1.04.15.0out of date
 actix-cors^0.10.7.2out of date
 serde^11.0.229up to date
 serde_json^11.0.151up to date
 serde_derive^11.0.229up to date
 futures^0.10.3.34out of date
 serde_urlencoded^0.50.7.1out of date
 regex^11.13.1up to date
 bytes^0.41.12.1out of date
 lru ⚠️^0.60.18.5insecure
 parking_lot^0.120.12.5up to date
 ahash^0.70.8.12out of date
 rayon^11.12.0up to date
 md5^0.70.8.1out of date

Build dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 semalock^0.20.3.1out of date

Crate bytehound-gather

Dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 clap^24.6.7out of date
 log^0.40.4.34up to date
 chrono^0.40.4.45up to date

Crate integration-tests

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 libc^0.20.2.190up to date
 attohttpc^0.40.31.0out of date
 serde^11.0.229up to date
 serde_json^11.0.151up to date
 serde_derive^11.0.229up to date

Crate mimalloc

No external dependencies! 🙌

Crate fast_range_map

Dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 hashbrown^0.130.17.1out of date

Dev dependencies

(4 total, 2 outdated)

CrateRequiredLatestStatus
 criterion^0.30.8.2out of date
 btree-range-map^0.3.00.8.2out of date
 oorandom^11.1.311.1.5up to date
 rangemap^1.0.31.8.0up to date

Crate libmimalloc-sys

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 cty^0.20.2.2up to date

Build dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 cc^1.01.6.0up to date

Security Vulnerabilities

lru: Use after free in lru crate

RUSTSEC-2021-0130

Lru crate has use after free vulnerability.

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop(), will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free.