This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate ryaspeller

Dependencies

(7 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.01.0.93up to date
 clap^4.34.5.21up to date
 openssl ⚠️^0.10.600.10.68maybe insecure
 reqwest^0.11.180.12.9out of date
 serde^1.01.0.215up to date
 serde_json^1.01.0.133up to date
 walkdir^2.3.32.5.0up to date

Security Vulnerabilities

openssl: `MemBio::get_buf` has undefined behavior with empty buffers

RUSTSEC-2024-0357

Previously, MemBio::get_buf called slice::from_raw_parts with a null-pointer, which violates the functions invariants, leading to undefined behavior. In debug builds this would produce an assertion failure. This is now fixed.