Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
This project contains known security vulnerabilities. Find detailed information at the bottom.
raft(10 total, 3 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| bytes | ^1.11 | 1.12.1 | up to date |
| fxhash | ^0.2.1 | 0.2.1 | up to date |
| fail | ^0.4 | 0.5.1 | out of date |
| getset | ^0.1.1 | 0.1.7 | up to date |
| thiserror | ^1.0 | 2.0.21 | out of date |
| rand | ^0.9.3 | 0.10.3 | out of date |
| slog | ^2.2 | 2.8.2 | up to date |
| slog-envlogger | ^2.1.0 | 2.2.0 | up to date |
| slog-stdlog | ^4 | 4.1.1 | up to date |
| slog-term | ^2.4.0 | 2.9.2 | up to date |
(8 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| criterion | ^0.3 | 0.8.2 | out of date |
| regex | ^1 | 1.13.1 | up to date |
| slog-async | ^2.3.0 | 2.8.0 | up to date |
| slog-envlogger | ^2.1.0 | 2.2.0 | up to date |
| slog-stdlog | ^4 | 4.1.1 | up to date |
| slog-term | ^2.4.0 | 2.9.2 | up to date |
| anyhow | ^1.0.40 | 1.0.104 | up to date |
| itertools | ^0.10.0 | 0.15.0 | out of date |
raft-proto(4 total, 2 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| bytes | ^1 | 1.12.1 | up to date |
| lazy_static | ^1 | 1.5.0 | up to date |
| prost | ^0.11 | 0.14.4 | out of date |
| protobuf ⚠️ | ^2 | 3.7.2 | insecure |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| protobuf-build | ^0.15.1 | 0.15.1 | up to date |
datadriven(7 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1.0.40 | 1.0.104 | up to date |
| regex | ^1 | 1.13.1 | up to date |
| lazy_static | ^1.4.0 | 1.5.0 | up to date |
| slog | ^2.5.2 | 2.8.2 | up to date |
| slog-term | ^2.6.0 | 2.9.2 | up to date |
| slog-async | ^2.5.0 | 2.8.0 | up to date |
| similar-asserts | ^1.1.0 | 2.0.0 | out of date |
harness(3 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| fail | ^0.4 | 0.5.1 | out of date |
| rand | ^0.9.3 | 0.10.3 | out of date |
| slog | ^2.2 | 2.8.2 | up to date |
(5 total, 2 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| criterion | ^0.3 | 0.8.2 | out of date |
| fxhash | ^0.2.1 | 0.2.1 | up to date |
| lazy_static | ^1 | 1.5.0 | up to date |
| protobuf ⚠️ | ^2 | 3.7.2 | insecure |
| regex | ^1 | 1.13.1 | up to date |
protobuf: Crash due to uncontrolled recursion in protobuf crateAffected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.