This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate orinium_browser

Dependencies

(21 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.01.0.100up to date
 tokio^1.48.01.48.0up to date
 pollster^0.40.4.0up to date
 env_logger^0.11.80.11.8up to date
 log^0.4.280.4.29up to date
 once_cell^1.21.31.21.3up to date
 entities^1.0.11.0.1up to date
 winit^0.30.120.30.12up to date
 wgpu^27.0.127.0.1up to date
 wgpu_text^27.0.127.0.1up to date
 fontdue^0.9.30.9.3up to date
 ab_glyph^0.20.2.32up to date
 bytemuck^1.241.24.0up to date
 url^2.52.5.7up to date
 rustls ⚠️^0.220.23.35out of date
 rustls-native-certs^0.8.20.8.2up to date
 tokio-rustls^0.250.26.4out of date
 hyper^11.8.1up to date
 http-body-util^0.10.1.3up to date
 hyper-util^0.10.1.19up to date
 image^0.25.90.25.9up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 colored^3.0.03.0.0up to date
 strsim^0.11.10.11.1up to date

Security Vulnerabilities

rustls: `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input

RUSTSEC-2024-0336

If a close_notify alert is received during a handshake, complete_io does not terminate.

Callers which do not call complete_io are not affected.

rustls-tokio and rustls-ffi do not call complete_io and are not affected.

rustls::Stream and rustls::StreamOwned types use complete_io and are affected.