Deps.rs

libp2p / rust-libp2p

[![dependency status](https://deps.rs/repo/github/libp2p/rust-libp2p/status.svg)](https://deps.rs/repo/github/libp2p/rust-libp2p)

This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate libp2p-core

Dependencies

(7 total, 1 outdated)

CrateRequiredLatestStatus
 either^1.111.15.0up to date
 fnv^1.01.0.7up to date
 futures-timer^33.0.3up to date
 parking_lot^0.12.30.12.5up to date
 pin-project^1.1.51.1.10up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date

Crate autonat-example

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.51up to date

Crate autonatv2

Dependencies

(8 total, 4 outdated)

CrateRequiredLatestStatus
 clap^4.4.184.5.51up to date
 tokio^1.35.11.48.0up to date
 tracing^0.1.400.1.41up to date
 rand^0.8.50.9.2out of date
 opentelemetry_sdk^0.21.10.31.0out of date
 tracing-opentelemetry^0.22.00.32.0out of date
 opentelemetry-jaeger^0.20.00.22.0out of date
 cfg-if^1.0.01.0.4up to date

Crate browser-webrtc-example

Dependencies

(13 total, 4 outdated)

CrateRequiredLatestStatus
 anyhow^1.0.861.0.100up to date
 rand^0.80.9.2out of date
 axum^0.7.50.8.6out of date
 rust-embed^8.4.08.9.0up to date
 tokio-util^0.70.7.17up to date
 tower^0.40.5.2out of date
 tower-http^0.5.20.6.6out of date
 mime_guess^2.0.42.0.5up to date
 js-sys^0.3.690.3.82up to date
 tracing-wasm^0.2.10.2.1up to date
 wasm-bindgen^0.2.900.2.105up to date
 wasm-bindgen-futures^0.4.420.4.55up to date
 web-sys^0.30.3.82up to date

Crate chat-example

No external dependencies! 🙌

Crate dcutr-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.51up to date
 futures-timer^3.03.0.3up to date

Crate distributed-key-value-store-example

No external dependencies! 🙌

Crate file-sharing-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 serde^1.01.0.228up to date
 clap^4.5.64.5.51up to date

Crate identify-example

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.37.01.48.0up to date

Crate ipfs-kad-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.51up to date
 anyhow^1.0.861.0.100up to date

Crate ipfs-private-example

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.121.15.0up to date

Crate metrics-example

Dependencies

(5 total, 5 outdated)

CrateRequiredLatestStatus
 axum^0.70.8.6out of date
 opentelemetry^0.27.00.31.0out of date
 opentelemetry-otlp^0.27.00.31.0out of date
 opentelemetry_sdk^0.27.00.31.0out of date
 tracing-opentelemetry^0.28.00.32.0out of date

Crate ping-example

No external dependencies! 🙌

Crate relay-server-example

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.51up to date
 tokio^1.37.01.48.0up to date

Crate rendezvous-example

No external dependencies! 🙌

Crate stream-example

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 anyhow^11.0.100up to date
 rand^0.80.9.2out of date

Crate upnp-example

No external dependencies! 🙌

Crate hole-punching-tests

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 anyhow^11.0.100up to date
 redis^0.24.00.32.7out of date
 serde^1.0.2031.0.228up to date
 serde_json^1.0.1171.0.145up to date
 either^1.12.01.15.0up to date

Crate libp2p-identity

Dependencies

(13 total, 1 outdated)

CrateRequiredLatestStatus
 asn1_der^0.7.60.7.6up to date
 bs58^0.5.10.5.1up to date
 ed25519-dalek^2.12.2.0up to date
 hkdf^0.12.40.12.4up to date
 k256^0.13.40.13.4up to date
 multihash^0.19.10.19.3up to date
 p256^0.130.13.2up to date
 quick-protobuf^0.8.10.8.1up to date
 rand^0.80.9.2out of date
 sec1^0.70.7.3up to date
 serde^11.0.228up to date
 sha2^0.10.80.10.9up to date
 zeroize^1.81.8.2up to date

Dev dependencies

(4 total, 2 outdated)

CrateRequiredLatestStatus
 serde_json^1.01.0.145up to date
 rmp-serde^1.31.3.0up to date
 criterion^0.50.7.0out of date
 hex-literal^0.4.11.1.0out of date

Crate interop-tests

Dependencies

(16 total, 5 outdated)

CrateRequiredLatestStatus
 anyhow^11.0.100up to date
 rand^0.8.50.9.2out of date
 serde^11.0.228up to date
 axum^0.70.8.6out of date
 mime_guess^2.02.0.5up to date
 redis^0.24.00.32.7out of date
 rust-embed^8.48.9.0up to date
 serde_json^11.0.145up to date
 thirtyfour=0.32.00.36.1out of date
 tower-http^0.50.6.6out of date
 wasm-bindgen^0.20.2.105up to date
 wasm-bindgen-futures^0.40.4.55up to date
 wasm-logger^0.2.00.2.0up to date
 reqwest^0.120.12.24up to date
 console_error_panic_hook^0.1.70.1.7up to date
 futures-timer^3.0.33.0.3up to date

Crate libp2p-allow-block-list

No external dependencies! 🙌

Crate libp2p-connection-limits

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 rand^0.8.50.9.2out of date

Crate keygen

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 clap^4.5.64.5.51up to date
 zeroize^11.8.2up to date
 serde^1.0.2031.0.228up to date
 serde_json^1.0.1171.0.145up to date
 base64^0.22.10.22.1up to date

Crate libp2p-memory-connection-limits

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 memory-stats^11.2.0up to date
 sysinfo^0.330.37.2out of date

Crate libp2p-metrics

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 pin-project^1.1.51.1.10up to date

Crate multistream-select

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 pin-project^1.1.51.1.10up to date
 smallvec^1.13.21.15.1up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures_ringbuf^0.4.00.4.0up to date
 tokio-util^0.70.7.17up to date

Crate libp2p-peer-store

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 serde_json^1.0.1341.0.145up to date

Crate quick-protobuf-codec

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 quick-protobuf^0.80.8.1up to date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 criterion^0.5.10.7.0out of date

Crate quickcheck-ext

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 quickcheck^11.0.3up to date
 num-traits^0.20.2.19up to date

Crate rw-stream-sink

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 pin-project^1.1.51.1.10up to date
 static_assertions^11.1.0up to date

Crate libp2p-server

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 base64^0.220.22.1up to date
 clap^4.5.64.5.51up to date
 axum^0.70.8.6out of date
 serde^11.0.228up to date
 serde_json^1.01.0.145up to date
 zeroize^11.8.2up to date

Crate libp2p-webrtc-utils

Dependencies

(7 total, 1 outdated)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 hex^0.40.4.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date
 serde^1.01.0.228up to date
 sha2^0.10.80.10.9up to date
 tinytemplate^1.21.2.1up to date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 hex-literal^0.41.1.0out of date

Crate libp2p-mplex

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 nohash-hasher^0.20.2.0up to date
 parking_lot^0.120.12.5up to date
 rand^0.80.9.2out of date
 smallvec^1.13.21.15.1up to date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 criterion^0.50.7.0out of date

Crate libp2p-muxer-test-harness

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 futures_ringbuf^0.4.00.4.0up to date

Crate libp2p-yamux

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 either^11.15.0up to date
 yamux^0.13.30.13.8up to date

Crate libp2p-autonat

Dependencies

(6 total, 2 outdated)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 either^1.9.01.15.0up to date
 futures-timer^3.03.0.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date
 rand_core^0.60.9.3out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tracing-subscriber^0.30.3.20up to date

Crate libp2p-dcutr

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 either^1.11.01.15.0up to date
 futures-timer^3.03.0.3up to date
 quick-protobuf^0.80.8.1up to date

Crate libp2p-floodsub

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 cuckoofilter^0.5.00.5.0up to date
 fnv^1.01.0.7up to date
 bytes^1.61.10.1up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date
 smallvec^1.13.21.15.1up to date

Crate libp2p-gossipsub

Dependencies

(13 total, 1 outdated)

CrateRequiredLatestStatus
 async-channel^2.3.12.5.0up to date
 base64^0.22.10.22.1up to date
 byteorder^1.5.01.5.0up to date
 bytes^1.61.10.1up to date
 either^1.111.15.0up to date
 fnv^1.0.71.0.7up to date
 futures-timer^3.0.23.0.3up to date
 hex_fmt^0.3.00.3.0up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date
 regex^1.10.51.12.2up to date
 serde^11.0.228up to date
 sha2^0.10.80.10.9up to date

Crate libp2p-identify

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 quick-protobuf^0.80.8.1up to date
 smallvec^1.13.21.15.1up to date
 either^1.12.01.15.0up to date

Crate libp2p-kad

Dependencies

(10 total, 1 outdated)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 either^1.111.15.0up to date
 fnv^1.01.0.7up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date
 sha2^0.10.80.10.9up to date
 smallvec^1.13.21.15.1up to date
 uint^0.100.10.0up to date
 futures-timer^3.0.33.0.3up to date
 serde^1.01.0.228up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.03.0.3up to date

Crate libp2p-mdns

Dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 rand^0.8.30.9.2out of date
 smallvec^1.13.21.15.1up to date
 socket2^0.6.00.6.1up to date

Crate libp2p-perf

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^11.0.100up to date
 clap^4.5.64.5.51up to date
 futures-timer^3.03.0.3up to date
 serde^1.01.0.228up to date
 serde_json^1.01.0.145up to date

Crate libp2p-ping

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 rand^0.80.9.2out of date

Crate libp2p-relay

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 either^1.12.01.15.0up to date
 futures-timer^33.0.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.8.40.9.2out of date
 static_assertions^11.1.0up to date

Crate libp2p-rendezvous

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 bimap^0.6.30.6.3up to date
 futures-timer^3.0.33.0.3up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.80.9.2out of date

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 rand^0.80.9.2out of date

Crate libp2p-request-response

Dependencies

(6 total, 2 outdated)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 cbor4ii^0.3.21.2.0out of date
 rand^0.80.9.2out of date
 serde^1.01.0.228up to date
 serde_json^1.0.1171.0.145up to date
 smallvec^1.13.21.15.1up to date

Dev dependencies

(4 total, 1 outdated)

CrateRequiredLatestStatus
 anyhow^1.0.861.0.100up to date
 rand^0.80.9.2out of date
 futures_ringbuf^0.4.00.4.0up to date
 serde^1.01.0.228up to date

Crate libp2p-stream

Dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 rand^0.80.9.2out of date

Crate libp2p-upnp

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 igd-next^0.16.10.16.2up to date

Crate libp2p-swarm-derive

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 heck^0.50.5.0up to date
 quote^1.01.0.41up to date
 syn^2.0.662.0.108up to date

Crate libp2p-swarm-test

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.89up to date
 futures-timer^3.0.33.0.3up to date

Crate libp2p-swarm

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 either^1.11.01.15.0up to date
 fnv^1.01.0.7up to date
 futures-timer^3.0.33.0.3up to date
 rand^0.80.9.2out of date
 smallvec^1.13.21.15.1up to date
 wasm-bindgen-futures^0.4.420.4.55up to date

Dev dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 either^1.11.01.15.0up to date
 criterion^0.50.7.0out of date
 trybuild^1.0.951.0.113up to date

Crate libp2p-dns

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 async-trait^0.1.800.1.89up to date
 parking_lot^0.12.30.12.5up to date
 smallvec^1.13.21.15.1up to date

Crate libp2p-noise

Dependencies

(7 total, 2 outdated)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 quick-protobuf^0.80.8.1up to date
 rand^0.8.30.9.2out of date
 static_assertions^11.1.0up to date
 x25519-dalek^22.0.1up to date
 zeroize^11.8.2up to date
 snow^0.9.50.10.0out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures_ringbuf^0.4.00.4.0up to date

Crate libp2p-plaintext

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 quick-protobuf^0.80.8.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures_ringbuf^0.4.00.4.0up to date

Crate libp2p-pnet

Dependencies

(4 total, 1 outdated)

CrateRequiredLatestStatus
 salsa20^0.100.10.2up to date
 sha3^0.100.10.8up to date
 rand^0.80.9.2out of date
 pin-project^1.1.51.1.10up to date

Crate libp2p-quic

Dependencies

(5 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 futures-timer^3.0.33.0.3up to date
 quinn^0.11.60.11.9up to date
 rand^0.8.50.9.2out of date
 rustls ⚠️^0.23.90.23.35maybe insecure
 socket2^0.6.00.6.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 quickcheck^11.0.3up to date

Crate libp2p-tcp

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 futures-timer^3.03.0.3up to date
 libc^0.2.1550.2.177up to date
 socket2^0.6.00.6.1up to date

Crate libp2p-tls

Dependencies

(4 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 rustls-webpki^0.1030.103.8up to date
 x509-parser^0.17.00.18.0out of date
 yasna^0.5.20.5.2up to date
 rustls ⚠️^0.23.90.23.35maybe insecure

Dev dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 hex-literal^0.4.11.1.0out of date

Crate libp2p-uds

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tempfile^3.103.23.0up to date

Crate libp2p-webrtc-websys

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 hex^0.4.30.4.3up to date
 js-sys^0.30.3.82up to date
 send_wrapper^0.6.00.6.0up to date
 wasm-bindgen^0.2.900.2.105up to date
 wasm-bindgen-futures^0.4.420.4.55up to date
 web-sys^0.3.700.3.82up to date

Crate libp2p-webrtc

Dependencies

(7 total, 3 outdated)

CrateRequiredLatestStatus
 async-trait^0.10.1.89up to date
 futures-timer^33.0.3up to date
 hex^0.40.4.3up to date
 rand^0.80.9.2out of date
 stun^0.70.9.0out of date
 tokio-util^0.70.7.17up to date
 webrtc^0.12.00.14.0out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 quickcheck^1.0.31.0.3up to date

Crate libp2p-websocket-websys

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^1.6.01.10.1up to date
 js-sys^0.3.690.3.82up to date
 send_wrapper^0.6.00.6.0up to date
 wasm-bindgen^0.2.900.2.105up to date
 web-sys^0.3.690.3.82up to date

Crate libp2p-websocket

Dependencies

(6 total, 1 outdated)

CrateRequiredLatestStatus
 either^1.12.01.15.0up to date
 parking_lot^0.12.30.12.5up to date
 pin-project-lite^0.2.140.2.16up to date
 soketto^0.8.00.8.1up to date
 url^2.52.5.7up to date
 webpki-roots^0.261.0.4out of date

Crate libp2p-webtransport-websys

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 js-sys^0.3.700.3.82up to date
 send_wrapper^0.6.00.6.0up to date
 wasm-bindgen^0.2.930.2.105up to date
 wasm-bindgen-futures^0.4.430.4.55up to date
 web-sys^0.3.700.3.82up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 multibase^0.9.10.9.2up to date

Crate webtransport-tests

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 wasm-bindgen^0.2.930.2.105up to date
 wasm-bindgen-futures^0.4.430.4.55up to date
 wasm-bindgen-test^0.3.430.3.55up to date
 web-sys^0.3.700.3.82up to date

Crate libp2p

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 bytes^11.10.1up to date
 either^1.9.01.15.0up to date
 futures-timer^3.0.23.0.3up to date
 pin-project^1.0.01.1.10up to date

Security Vulnerabilities

rustls: rustls network-reachable panic in `Acceptor::accept`

RUSTSEC-2024-0399

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use rustls::server::Acceptor::accept() are affected.

Servers that use tokio-rustls's LazyConfigAcceptor API are affected.

Servers that use tokio-rustls's TlsAcceptor API are not affected.

Servers that use rustls-ffi's rustls_acceptor_accept API are affected.