This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate libp2p-core

Dependencies

(8 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.111.13.0up to date
 fnv^1.01.0.7up to date
 futures-timer^33.0.3up to date
 once_cell^1.19.01.20.2up to date
 parking_lot^0.12.30.12.3up to date
 pin-project^1.1.51.1.8up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.21.13.0up to date

Crate autonat-example

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.26up to date

Crate autonatv2

Dependencies

(8 total, 3 outdated)

CrateRequiredLatestStatus
 clap^4.4.184.5.26up to date
 tokio^1.35.11.43.0up to date
 tracing^0.1.400.1.41up to date
 rand^0.8.50.8.5up to date
 opentelemetry_sdk^0.21.10.27.1out of date
 tracing-opentelemetry^0.22.00.28.0out of date
 opentelemetry-jaeger^0.20.00.22.0out of date
 cfg-if^1.0.01.0.0up to date

Crate browser-webrtc-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^1.0.861.0.95up to date
 rand^0.80.8.5up to date

Crate chat-example

No external dependencies! 🙌

Crate dcutr-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.26up to date
 futures-timer^3.03.0.3up to date

Crate distributed-key-value-store-example

No external dependencies! 🙌

Crate file-sharing-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 serde^1.01.0.217up to date
 clap^4.5.64.5.26up to date

Crate identify-example

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.37.01.43.0up to date

Crate ipfs-kad-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.26up to date
 anyhow^1.0.861.0.95up to date

Crate ipfs-private-example

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.121.13.0up to date

Crate metrics-example

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 axum^0.70.8.1out of date
 opentelemetry^0.27.00.27.1up to date
 opentelemetry-otlp^0.27.00.27.0up to date
 opentelemetry_sdk^0.27.00.27.1up to date
 tracing-opentelemetry^0.28.00.28.0up to date

Crate ping-example

No external dependencies! 🙌

Crate relay-server-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.26up to date
 tokio^1.37.01.43.0up to date

Crate rendezvous-example

No external dependencies! 🙌

Crate stream-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^11.0.95up to date
 rand^0.80.8.5up to date

Crate upnp-example

No external dependencies! 🙌

Crate hole-punching-tests

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 anyhow^11.0.95up to date
 redis^0.24.00.28.1out of date
 serde^1.0.2031.0.217up to date
 serde_json^1.0.1171.0.135up to date
 either^1.12.01.13.0up to date

Crate libp2p-identity

Dependencies

(13 total, all up-to-date)

CrateRequiredLatestStatus
 asn1_der^0.7.60.7.6up to date
 bs58^0.5.10.5.1up to date
 ed25519-dalek^2.12.1.1up to date
 hkdf^0.12.40.12.4up to date
 libsecp256k1^0.7.00.7.1up to date
 multihash^0.19.10.19.3up to date
 p256^0.130.13.2up to date
 quick-protobuf^0.8.10.8.1up to date
 rand^0.80.8.5up to date
 sec1^0.70.7.3up to date
 serde^11.0.217up to date
 sha2^0.10.80.10.8up to date
 zeroize^1.81.8.1up to date

Dev dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 serde_json^1.01.0.135up to date
 rmp-serde^1.31.3.0up to date
 criterion^0.50.5.1up to date
 hex-literal^0.4.10.4.1up to date

Crate interop-tests

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^11.0.95up to date
 rand^0.8.50.8.5up to date
 serde^11.0.217up to date

Crate libp2p-allow-block-list

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.12.01.13.0up to date

Crate libp2p-connection-limits

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.12.01.13.0up to date
 rand^0.8.50.8.5up to date

Crate keygen

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.26up to date
 zeroize^11.8.1up to date
 serde^1.0.2031.0.217up to date
 serde_json^1.0.1171.0.135up to date
 base64^0.22.10.22.1up to date

Crate libp2p-memory-connection-limits

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 memory-stats^11.2.0up to date
 sysinfo^0.330.33.1up to date

Crate libp2p-metrics

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 pin-project^1.1.51.1.8up to date

Crate multistream-select

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 pin-project^1.1.51.1.8up to date
 smallvec^1.13.21.13.2up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.21.13.0up to date
 futures_ringbuf^0.4.00.4.0up to date

Crate quick-protobuf-codec

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 quick-protobuf^0.80.8.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.5.10.5.1up to date

Crate quickcheck-ext

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 quickcheck^11.0.3up to date
 num-traits^0.20.2.19up to date

Crate rw-stream-sink

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 pin-project^1.1.51.1.8up to date
 static_assertions^11.1.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.01.13.0up to date

Crate libp2p-server

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 base64^0.220.22.1up to date
 clap^4.5.64.5.26up to date
 axum^0.70.8.1out of date
 serde^11.0.217up to date
 serde_json^1.01.0.135up to date
 zeroize^11.8.1up to date

Crate libp2p-webrtc-utils

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 hex^0.40.4.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date
 serde^1.01.0.217up to date
 sha2^0.10.80.10.8up to date
 tinytemplate^1.21.2.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 hex-literal^0.40.4.1up to date

Crate libp2p-mplex

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 nohash-hasher^0.20.2.0up to date
 parking_lot^0.120.12.3up to date
 rand^0.80.8.5up to date
 smallvec^1.13.21.13.2up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.7.01.13.0up to date
 criterion^0.50.5.1up to date

Crate libp2p-muxer-test-harness

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 futures_ringbuf^0.4.00.4.0up to date

Crate libp2p-yamux

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 either^11.13.0up to date
 yamux^0.13.30.13.4up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.7.01.13.0up to date

Crate libp2p-autonat

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.10.1.85up to date
 either^1.9.01.13.0up to date
 futures-timer^3.03.0.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date
 rand_core^0.60.6.4up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tracing-subscriber^0.30.3.19up to date

Crate libp2p-dcutr

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.11.01.13.0up to date
 futures-timer^3.03.0.3up to date
 quick-protobuf^0.80.8.1up to date
 lru^0.12.30.12.5up to date

Crate libp2p-floodsub

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 cuckoofilter^0.5.00.5.0up to date
 fnv^1.01.0.7up to date
 bytes^1.61.9.0up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date
 smallvec^1.13.21.13.2up to date

Crate libp2p-gossipsub

Dependencies

(13 total, all up-to-date)

CrateRequiredLatestStatus
 async-channel^2.3.12.3.1up to date
 base64^0.22.10.22.1up to date
 byteorder^1.5.01.5.0up to date
 bytes^1.61.9.0up to date
 either^1.111.13.0up to date
 fnv^1.0.71.0.7up to date
 futures-timer^3.0.23.0.3up to date
 hex_fmt^0.3.00.3.0up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date
 regex^1.10.51.11.1up to date
 serde^11.0.217up to date
 sha2^0.10.80.10.8up to date

Crate libp2p-identify

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 quick-protobuf^0.80.8.1up to date
 smallvec^1.13.21.13.2up to date
 either^1.12.01.13.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.21.13.0up to date

Crate libp2p-kad

Dependencies

(10 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 either^1.111.13.0up to date
 fnv^1.01.0.7up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date
 sha2^0.10.80.10.8up to date
 smallvec^1.13.21.13.2up to date
 uint^0.100.10.0up to date
 futures-timer^3.0.33.0.3up to date
 serde^1.01.0.217up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.12.01.13.0up to date
 futures-timer^3.03.0.3up to date

Crate libp2p-mdns

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.12.01.13.0up to date
 async-io^2.3.32.4.0up to date
 rand^0.8.30.8.5up to date
 smallvec^1.13.21.13.2up to date
 socket2^0.5.70.5.8up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.9.01.13.0up to date

Crate libp2p-perf

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^11.0.95up to date
 clap^4.5.64.5.26up to date
 futures-timer^3.03.0.3up to date
 serde^1.01.0.217up to date
 serde_json^1.01.0.135up to date

Crate libp2p-ping

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 rand^0.80.8.5up to date

Crate libp2p-relay

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 either^1.12.01.13.0up to date
 futures-timer^33.0.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.8.40.8.5up to date
 static_assertions^11.1.0up to date

Crate libp2p-rendezvous

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.10.1.85up to date
 bimap^0.6.30.6.3up to date
 futures-timer^3.0.33.0.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.8.5up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 rand^0.80.8.5up to date

Crate libp2p-request-response

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.10.1.85up to date
 cbor4ii^0.3.20.3.3up to date
 rand^0.80.8.5up to date
 serde^1.01.0.217up to date
 serde_json^1.0.1171.0.135up to date
 smallvec^1.13.21.13.2up to date

Dev dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^1.0.861.0.95up to date
 async-std^1.6.21.13.0up to date
 rand^0.80.8.5up to date
 futures_ringbuf^0.4.00.4.0up to date
 serde^1.01.0.217up to date

Crate libp2p-stream

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 rand^0.80.8.5up to date

Crate libp2p-upnp

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 igd-next^0.15.10.16.0out of date

Crate libp2p-swarm-derive

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 heck^0.50.5.0up to date
 quote^1.01.0.38up to date
 syn^2.0.662.0.96up to date

Crate libp2p-swarm-test

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.85up to date
 futures-timer^3.0.33.0.3up to date

Crate libp2p-swarm

Dependencies

(8 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.11.01.13.0up to date
 fnv^1.01.0.7up to date
 futures-timer^3.0.33.0.3up to date
 lru^0.12.30.12.5up to date
 once_cell^1.19.01.20.2up to date
 rand^0.80.8.5up to date
 smallvec^1.13.21.13.2up to date
 wasm-bindgen-futures^0.4.420.4.50up to date

Dev dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.21.13.0up to date
 either^1.11.01.13.0up to date
 criterion^0.50.5.1up to date
 once_cell^1.19.01.20.2up to date
 trybuild^1.0.951.0.101up to date

Crate libp2p-dns

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.85up to date
 parking_lot^0.12.30.12.3up to date
 smallvec^1.13.21.13.2up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.61.13.0up to date

Crate libp2p-noise

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 once_cell^1.19.01.20.2up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.8.30.8.5up to date
 static_assertions^11.1.0up to date
 x25519-dalek^22.0.1up to date
 zeroize^11.8.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures_ringbuf^0.4.00.4.0up to date

Crate libp2p-plaintext

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 quick-protobuf^0.80.8.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures_ringbuf^0.4.00.4.0up to date

Crate libp2p-pnet

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 salsa20^0.100.10.2up to date
 sha3^0.100.10.8up to date
 rand^0.80.8.5up to date
 pin-project^1.1.51.1.8up to date

Crate libp2p-quic

Dependencies

(6 total, 1 possibly insecure)

CrateRequiredLatestStatus
 async-std^1.12.01.13.0up to date
 futures-timer^3.0.33.0.3up to date
 quinn^0.11.60.11.6up to date
 rand^0.8.50.8.5up to date
 rustls ⚠️^0.23.90.23.21maybe insecure
 socket2^0.5.70.5.8up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.12.01.13.0up to date
 quickcheck^11.0.3up to date

Crate libp2p-tcp

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 async-io^2.3.32.4.0up to date
 futures-timer^3.03.0.3up to date
 libc^0.2.1550.2.169up to date
 socket2^0.5.70.5.8up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.51.13.0up to date

Crate libp2p-tls

Dependencies

(4 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 rustls-webpki^0.101.40.102.8out of date
 x509-parser^0.16.00.16.0up to date
 yasna^0.5.20.5.2up to date
 rustls ⚠️^0.23.90.23.21maybe insecure

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 hex-literal^0.4.10.4.1up to date

Crate libp2p-uds

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.21.13.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tempfile^3.103.15.0up to date

Crate libp2p-webrtc-websys

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 hex^0.4.30.4.3up to date
 js-sys^0.30.3.77up to date
 send_wrapper^0.6.00.6.0up to date
 wasm-bindgen^0.2.900.2.100up to date
 wasm-bindgen-futures^0.4.420.4.50up to date
 web-sys^0.3.700.3.77up to date

Crate libp2p-webrtc

Dependencies

(8 total, 2 outdated)

CrateRequiredLatestStatus
 async-trait^0.10.1.85up to date
 futures-timer^33.0.3up to date
 hex^0.40.4.3up to date
 rand^0.80.8.5up to date
 stun^0.70.7.0up to date
 tokio-util^0.70.7.13up to date
 webrtc^0.9.00.12.0out of date
 webrtc-ice=0.10.00.12.0out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 quickcheck^1.0.31.0.3up to date

Crate libp2p-websocket-websys

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^1.6.01.9.0up to date
 js-sys^0.3.690.3.77up to date
 send_wrapper^0.6.00.6.0up to date
 wasm-bindgen^0.2.900.2.100up to date
 web-sys^0.3.690.3.77up to date

Crate libp2p-websocket

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 either^1.12.01.13.0up to date
 parking_lot^0.12.30.12.3up to date
 pin-project-lite^0.2.140.2.16up to date
 soketto^0.8.00.8.1up to date
 url^2.52.5.4up to date
 webpki-roots^0.250.26.7out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.51.13.0up to date

Crate libp2p-webtransport-websys

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 js-sys^0.3.700.3.77up to date
 once_cell^1.19.01.20.2up to date
 send_wrapper^0.6.00.6.0up to date
 wasm-bindgen^0.2.930.2.100up to date
 wasm-bindgen-futures^0.4.430.4.50up to date
 web-sys^0.3.700.3.77up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 multibase^0.9.10.9.1up to date

Crate webtransport-tests

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 wasm-bindgen^0.2.930.2.100up to date
 wasm-bindgen-futures^0.4.430.4.50up to date
 wasm-bindgen-test^0.3.430.3.50up to date
 web-sys^0.3.700.3.77up to date

Crate libp2p

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.9.0up to date
 either^1.9.01.13.0up to date
 futures-timer^3.0.23.0.3up to date
 pin-project^1.0.01.1.8up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 async-std^1.6.21.13.0up to date

Security Vulnerabilities

rustls: rustls network-reachable panic in `Acceptor::accept`

RUSTSEC-2024-0399

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use rustls::server::Acceptor::accept() are affected.

Servers that use tokio-rustls's LazyConfigAcceptor API are affected.

Servers that use tokio-rustls's TlsAcceptor API are not affected.

Servers that use rustls-ffi's rustls_acceptor_accept API are affected.