This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate raft

Dependencies

(10 total, 3 outdated)

CrateRequiredLatestStatus
 bytes^1.111.12.1up to date
 fxhash^0.2.10.2.1up to date
 fail^0.40.5.1out of date
 getset^0.1.10.1.7up to date
 thiserror^1.02.0.21out of date
 rand^0.9.30.10.3out of date
 slog^2.22.8.2up to date
 slog-envlogger^2.1.02.2.0up to date
 slog-stdlog^44.1.1up to date
 slog-term^2.4.02.9.2up to date

Dev dependencies

(8 total, 2 outdated)

CrateRequiredLatestStatus
 criterion^0.30.8.2out of date
 regex^11.13.1up to date
 slog-async^2.3.02.8.0up to date
 slog-envlogger^2.1.02.2.0up to date
 slog-stdlog^44.1.1up to date
 slog-term^2.4.02.9.2up to date
 anyhow^1.0.401.0.104up to date
 itertools^0.10.00.15.0out of date

Crate raft-proto

Dependencies

(4 total, 2 outdated, 1 insecure)

CrateRequiredLatestStatus
 bytes^11.12.1up to date
 lazy_static^11.5.0up to date
 prost^0.110.14.4out of date
 protobuf ⚠️^23.7.2insecure

Build dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 protobuf-build^0.15.10.15.1up to date

Crate datadriven

Dependencies

(7 total, 1 outdated)

CrateRequiredLatestStatus
 anyhow^1.0.401.0.104up to date
 regex^11.13.1up to date
 lazy_static^1.4.01.5.0up to date
 slog^2.5.22.8.2up to date
 slog-term^2.6.02.9.2up to date
 slog-async^2.5.02.8.0up to date
 similar-asserts^1.1.02.0.0out of date

Crate harness

Dependencies

(3 total, 2 outdated)

CrateRequiredLatestStatus
 fail^0.40.5.1out of date
 rand^0.9.30.10.3out of date
 slog^2.22.8.2up to date

Dev dependencies

(5 total, 2 outdated, 1 insecure)

CrateRequiredLatestStatus
 criterion^0.30.8.2out of date
 fxhash^0.2.10.2.1up to date
 lazy_static^11.5.0up to date
 protobuf ⚠️^23.7.2insecure
 regex^11.13.1up to date

Security Vulnerabilities

protobuf: Crash due to uncontrolled recursion in protobuf crate

RUSTSEC-2024-0437

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.