This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
meilisearch(62 total, 2 outdated, 1 possibly insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| actix-cors | ^0.7.0 | 0.7.0 | up to date |
| actix-http | ^3.8.0 | 3.9.0 | up to date |
| actix-utils | ^3.0.1 | 3.0.1 | up to date |
| actix-web | ^4.8.0 | 4.9.0 | up to date |
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| async-trait | ^0.1.81 | 0.1.83 | up to date |
| bstr | ^1.9.1 | 1.11.1 | up to date |
| byte-unit | ^5.1.4 | 5.1.6 | up to date |
| bytes | ^1.6.0 | 1.9.0 | up to date |
| clap | ^4.5.9 | 4.5.23 | up to date |
| crossbeam-channel | ^0.5.13 | 0.5.14 | up to date |
| deserr | ^0.6.2 | 0.6.3 | up to date |
| either | ^1.13.0 | 1.13.0 | up to date |
| flate2 | ^1.0.30 | 1.0.35 | up to date |
| fst | ^0.4.7 | 0.4.7 | up to date |
| futures | ^0.3.30 | 0.3.31 | up to date |
| futures-util | ^0.3.30 | 0.3.31 | up to date |
| indexmap | ^2.2.6 | 2.7.0 | up to date |
| is-terminal | ^0.4.12 | 0.4.13 | up to date |
| itertools | ^0.13.0 | 0.13.0 | up to date |
| jsonwebtoken | ^9.3.0 | 9.3.0 | up to date |
| lazy_static | ^1.5.0 | 1.5.0 | up to date |
| mimalloc | ^0.1.43 | 0.1.43 | up to date |
| mime | ^0.3.17 | 0.3.17 | up to date |
| num_cpus | ^1.16.0 | 1.16.0 | up to date |
| obkv | ^0.3.0 | 0.3.0 | up to date |
| once_cell | ^1.19.0 | 1.20.2 | up to date |
| ordered-float | ^4.2.1 | 4.6.0 | up to date |
| parking_lot | ^0.12.3 | 0.12.3 | up to date |
| pin-project-lite | ^0.2.14 | 0.2.15 | up to date |
| platform-dirs | ^0.3.0 | 0.3.0 | up to date |
| prometheus | ^0.13.4 | 0.13.4 | up to date |
| rand | ^0.8.5 | 0.8.5 | up to date |
| rayon | ^1.10.0 | 1.10.0 | up to date |
| regex | ^1.10.5 | 1.11.1 | up to date |
| reqwest | ^0.12.5 | 0.12.9 | up to date |
| rustls ⚠️ | ^0.23.11 | 0.23.20 | maybe insecure |
| rustls-pki-types | ^1.7.0 | 1.10.1 | up to date |
| rustls-pemfile | ^2.1.2 | 2.2.0 | up to date |
| segment | ^0.2.4 | 0.2.4 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| sha2 | ^0.10.8 | 0.10.8 | up to date |
| siphasher | ^1.0.1 | 1.0.1 | up to date |
| slice-group-by | ^0.3.1 | 0.3.1 | up to date |
| static-files | ^0.2.4 | 0.2.4 | up to date |
| sysinfo | ^0.30.13 | 0.33.0 | out of date |
| tar | ^0.4.41 | 0.4.43 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| tokio | ^1.38.0 | 1.42.0 | up to date |
| toml | ^0.8.14 | 0.8.19 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
| serde_urlencoded | ^0.7.1 | 0.7.1 | up to date |
| termcolor | ^1.4.1 | 1.4.1 | up to date |
| url | ^2.5.2 | 2.5.4 | up to date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| tracing-subscriber | ^0.3.18 | 0.3.19 | up to date |
| tracing-actix-web | ^0.7.11 | 0.7.15 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
| mopa-maintained | ^0.2.3 | 0.2.3 | up to date |
(9 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| actix-rt | ^2.10.0 | 2.10.0 | up to date |
| brotli | ^6.0.0 | 7.0.0 | out of date |
| insta | ^1.39.0 | 1.41.1 | up to date |
| manifest-dir-macros | ^0.1.18 | 0.1.18 | up to date |
| maplit | ^1.0.2 | 1.0.2 | up to date |
| temp-env | ^0.3.6 | 0.3.6 | up to date |
| urlencoding | ^2.1.3 | 2.1.3 | up to date |
| wiremock | ^0.6.0 | 0.6.2 | up to date |
| yaup | ^0.3.1 | 0.3.1 | up to date |
(8 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| cargo_toml | ^0.20.3 | 0.21.0 | out of date |
| hex | ^0.4.3 | 0.4.3 | up to date |
| reqwest | ^0.12.5 | 0.12.9 | up to date |
| sha-1 | ^0.10.1 | 0.10.1 | up to date |
| static-files | ^0.2.4 | 0.2.4 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| zip | ^2.1.3 | 2.2.2 | up to date |
meilitool(8 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| clap | ^4.5.9 | 4.5.23 | up to date |
| indexmap | ^2.7.0 | 2.7.0 | up to date |
| serde | ^1.0.209 | 1.0.216 | up to date |
| serde_json | ^1.0.133 | 1.0.134 | up to date |
| tempfile | ^3.14.0 | 3.14.0 | up to date |
| time | ^0.3.36 | 0.3.37 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
meilisearch-types(23 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| actix-web | ^4.8.0 | 4.9.0 | up to date |
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| bumpalo | ^3.16.0 | 3.16.0 | up to date |
| convert_case | ^0.6.0 | 0.6.0 | up to date |
| csv | ^1.3.0 | 1.3.1 | up to date |
| deserr | ^0.6.2 | 0.6.3 | up to date |
| either | ^1.13.0 | 1.13.0 | up to date |
| enum-iterator | ^2.1.0 | 2.1.0 | up to date |
| flate2 | ^1.0.30 | 1.0.35 | up to date |
| fst | ^0.4.7 | 0.4.7 | up to date |
| memmap2 | ^0.9.4 | 0.9.5 | up to date |
| bumparaw-collections | ^0.1.2 | 0.1.4 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
| rustc-hash | ^2.1.0 | 2.1.0 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde-cs | ^0.2.4 | 0.2.4 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| tar | ^0.4.41 | 0.4.43 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| tokio | ^1.38 | 1.42.0 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| insta | ^1.39.0 | 1.41.1 | up to date |
meilisearch-auth(12 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| base64 | ^0.22.1 | 0.22.1 | up to date |
| enum-iterator | ^2.1.0 | 2.1.0 | up to date |
| hmac | ^0.12.1 | 0.12.1 | up to date |
| maplit | ^1.0.2 | 1.0.2 | up to date |
| rand | ^0.8.5 | 0.8.5 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| sha2 | ^0.10.8 | 0.10.8 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
meili-snap(3 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| insta | =1.39.0 | 1.41.1 | out of date |
| md5 | ^0.7.0 | 0.7.0 | up to date |
| once_cell | ^1.19 | 1.20.2 | up to date |
index-scheduler(22 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| bincode | ^1.3.3 | 1.3.3 | up to date |
| bumpalo | ^3.16.0 | 3.16.0 | up to date |
| bumparaw-collections | ^0.1.2 | 0.1.4 | up to date |
| convert_case | ^0.6.0 | 0.6.0 | up to date |
| csv | ^1.3.0 | 1.3.1 | up to date |
| derive_builder | ^0.20.0 | 0.20.2 | up to date |
| enum-iterator | ^2.1.0 | 2.1.0 | up to date |
| flate2 | ^1.0.30 | 1.0.35 | up to date |
| memmap2 | ^0.9.4 | 0.9.5 | up to date |
| page_size | ^0.6.0 | 0.6.0 | up to date |
| rayon | ^1.10.0 | 1.10.0 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| synchronoise | ^1.0.1 | 1.0.1 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| ureq | ^2.10.0 | 2.12.1 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
(5 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| arroy | ^0.5.0 | 0.5.0 | up to date |
| big_s | ^1.0.2 | 1.0.2 | up to date |
| crossbeam-channel | ^0.5.13 | 0.5.14 | up to date |
| insta | ^1.39.0 | 1.41.1 | up to date |
| maplit | ^1.0.2 | 1.0.2 | up to date |
dump(14 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| flate2 | ^1.0.30 | 1.0.35 | up to date |
| http | ^1.1.0 | 1.2.0 | up to date |
| once_cell | ^1.19.0 | 1.20.2 | up to date |
| regex | ^1.10.5 | 1.11.1 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| tar | ^0.4.41 | 0.4.43 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
(2 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| big_s | ^1.0.2 | 1.0.2 | up to date |
| maplit | ^1.0.2 | 1.0.2 | up to date |
file-store(4 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
permissive-json-pointer(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde_json | ^1.0 | 1.0.134 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| big_s | ^1.0 | 1.0.2 | up to date |
milli(58 total, 6 outdated, 1 possibly insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| big_s | ^1.0.2 | 1.0.2 | up to date |
| bimap | ^0.6.3 | 0.6.3 | up to date |
| bincode | ^1.3.3 | 1.3.3 | up to date |
| bstr | ^1.9.1 | 1.11.1 | up to date |
| bytemuck | ^1.18.0 | 1.21.0 | up to date |
| byteorder | ^1.5.0 | 1.5.0 | up to date |
| charabia | ^0.9.2 | 0.9.2 | up to date |
| concat-arrays | ^0.1.2 | 0.1.2 | up to date |
| crossbeam-channel | ^0.5.13 | 0.5.14 | up to date |
| deserr | ^0.6.2 | 0.6.3 | up to date |
| either | ^1.13.0 | 1.13.0 | up to date |
| fst | ^0.4.7 | 0.4.7 | up to date |
| fxhash | ^0.2.1 | 0.2.1 | up to date |
| geoutils | ^0.5.1 | 0.5.1 | up to date |
| grenad | ^0.5.0 | 0.5.0 | up to date |
| heed | ^0.20.3 | 0.21.0 | out of date |
| indexmap | ^2.2.6 | 2.7.0 | up to date |
| levenshtein_automata | ^0.2.1 | 0.2.1 | up to date |
| memchr | ^2.5.0 | 2.7.4 | up to date |
| memmap2 | ^0.9.4 | 0.9.5 | up to date |
| obkv | ^0.3.0 | 0.3.0 | up to date |
| once_cell | ^1.19.0 | 1.20.2 | up to date |
| ordered-float | ^4.2.1 | 4.6.0 | up to date |
| rayon | ^1.10.0 | 1.10.0 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
| rstar | ^0.12.0 | 0.12.2 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| slice-group-by | ^0.3.1 | 0.3.1 | up to date |
| smallstr | ^0.3.0 | 0.3.0 | up to date |
| smallvec | ^1.13.2 | 1.13.2 | up to date |
| smartstring | ^1.0.1 | 1.0.1 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
| thiserror | ^1.0.61 | 2.0.9 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
| itertools | ^0.13.0 | 0.13.0 | up to date |
| csv | ^1.3.0 | 1.3.1 | up to date |
| candle-core | ^0.6.0 | 0.8.1 | out of date |
| candle-transformers | ^0.6.0 | 0.8.1 | out of date |
| candle-nn | ^0.6.0 | 0.8.1 | out of date |
| tiktoken-rs | ^0.5.9 | 0.6.0 | out of date |
| liquid | ^0.26.6 | 0.26.9 | up to date |
| arroy | ^0.5.0 | 0.5.0 | up to date |
| rand | ^0.8.5 | 0.8.5 | up to date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| ureq | ^2.10.0 | 2.12.1 | up to date |
| url | ^2.5.2 | 2.5.4 | up to date |
| rayon-par-bridge | ^0.1.0 | 0.1.0 | up to date |
| hashbrown ⚠️ | ^0.15.0 | 0.15.2 | maybe insecure |
| bumpalo | ^3.16.0 | 3.16.0 | up to date |
| bumparaw-collections | ^0.1.2 | 0.1.4 | up to date |
| thread_local | ^1.1.8 | 1.1.8 | up to date |
| allocator-api2 | ^0.2.18 | 0.2.21 | up to date |
| rustc-hash | ^2.0.0 | 2.1.0 | up to date |
| uell | ^0.1.0 | 0.1.0 | up to date |
| enum-iterator | ^2.1.0 | 2.1.0 | up to date |
| flume | ^0.11.1 | 0.11.1 | up to date |
(5 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| mimalloc | ^0.1.43 | 0.1.43 | up to date |
| insta | ^1.39.0 | 1.41.1 | up to date |
| maplit | ^1.0.2 | 1.0.2 | up to date |
| md5 | ^0.7.0 | 0.7.0 | up to date |
| rand | ^0.8.5 | 0.8.5 | up to date |
filter-parser(3 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| nom | ^7.1.3 | 7.1.3 | up to date |
| nom_locate | ^4.2.0 | 4.2.0 | up to date |
| unescaper | ^0.1.5 | 0.1.5 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| insta | ^1.39.0 | 1.41.1 | up to date |
flatten-serde-json(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde_json | ^1.0 | 1.0.134 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| criterion | ^0.5.1 | 0.5.1 | up to date |
json-depth-checker(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde_json | ^1.0 | 1.0.134 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| criterion | ^0.5.1 | 0.5.1 | up to date |
benchmarks(7 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| bumpalo | ^3.16.0 | 3.16.0 | up to date |
| csv | ^1.3.0 | 1.3.1 | up to date |
| memmap2 | ^0.9.5 | 0.9.5 | up to date |
| mimalloc | ^0.1.43 | 0.1.43 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| tempfile | ^3.14.0 | 3.14.0 | up to date |
(4 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| criterion | ^0.5.1 | 0.5.1 | up to date |
| rand | ^0.8.5 | 0.8.5 | up to date |
| rand_chacha | ^0.3.1 | 0.3.1 | up to date |
| roaring | ^0.10.7 | 0.10.9 | up to date |
(5 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| bytes | ^1.6.0 | 1.9.0 | up to date |
| convert_case | ^0.6.0 | 0.6.0 | up to date |
| flate2 | ^1.0.30 | 1.0.35 | up to date |
| reqwest | ^0.12.5 | 0.12.9 | up to date |
fuzzers(8 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| arbitrary | ^1.3.2 | 1.4.1 | up to date |
| bumpalo | ^3.16.0 | 3.16.0 | up to date |
| clap | ^4.5.9 | 4.5.23 | up to date |
| either | ^1.13.0 | 1.13.0 | up to date |
| fastrand | ^2.1.0 | 2.3.0 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| tempfile | ^3.10.1 | 3.14.0 | up to date |
tracing-trace(9 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| color-spantrace | ^0.2.1 | 0.2.1 | up to date |
| fxprof-processed-profile | ^0.7.0 | 0.7.0 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| tracing-error | ^0.2.0 | 0.2.1 | up to date |
| tracing-subscriber | ^0.3.18 | 0.3.19 | up to date |
| byte-unit | ^5.1.4 | 5.1.6 | up to date |
| tokio | ^1.38.0 | 1.42.0 | up to date |
xtask(15 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| cargo_metadata | ^0.18.1 | 0.19.1 | out of date |
| clap | ^4.5.9 | 4.5.23 | up to date |
| futures-core | ^0.3.30 | 0.3.31 | up to date |
| futures-util | ^0.3.30 | 0.3.31 | up to date |
| reqwest | ^0.12.5 | 0.12.9 | up to date |
| serde | ^1.0.204 | 1.0.216 | up to date |
| serde_json | ^1.0.120 | 1.0.134 | up to date |
| sha2 | ^0.10.8 | 0.10.8 | up to date |
| sysinfo | ^0.30.13 | 0.33.0 | out of date |
| time | ^0.3.36 | 0.3.37 | up to date |
| tokio | ^1.38.0 | 1.42.0 | up to date |
| tracing | ^0.1.40 | 0.1.41 | up to date |
| tracing-subscriber | ^0.3.18 | 0.3.19 | up to date |
| uuid | ^1.10.0 | 1.11.0 | up to date |
build-info(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| time | ^0.3.36 | 0.3.37 | up to date |
(2 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.86 | 1.0.95 | up to date |
| vergen-git2 | ^1.0.0 | 1.0.2 | up to date |
rustls: rustls network-reachable panic in `Acceptor::accept`A bug introduced in rustls 0.23.13 leads to a panic if the received
TLS ClientHello is fragmented. Only servers that use
rustls::server::Acceptor::accept() are affected.
Servers that use tokio-rustls's LazyConfigAcceptor API are affected.
Servers that use tokio-rustls's TlsAcceptor API are not affected.
Servers that use rustls-ffi's rustls_acceptor_accept API are affected.
hashbrown: Borsh serialization of HashMap is non-canonicalThe borsh serialization of the HashMap did not follow the borsh specification. It potentially produced non-canonical encodings dependent on insertion order. It also did not perform canonicty checks on decoding.
This can result in consensus splits and cause equivalent objects to be considered distinct.
This was patched in 0.15.1.