prismworks-ai / prism-mcp-rs

Crate prism-mcp-rs

Dependencies

(48 total, 5 outdated, 1 possibly insecure)

Crate	Required	Latest	Status
serde	`^1.0`	`1.0.228`	up to date
serde_json	`^1.0`	`1.0.145`	up to date
serde_yaml	`^0.9`	`0.9.34+deprecated`	up to date
tokio	`^1.34`	`1.48.0`	up to date
async-trait	`^0.1`	`0.1.89`	up to date
tracing	`^0.1`	`0.1.43`	up to date
tracing-subscriber ⚠️	`^0.3`	`0.3.22`	maybe insecure
thiserror	`^2.0`	`2.0.17`	up to date
anyhow	`^1.0`	`1.0.100`	up to date
chrono	`^0.4.20`	`0.4.42`	up to date
futures	`^0.3`	`0.3.31`	up to date
tokio-util	`^0.7`	`0.7.17`	up to date
bytes	`^1.5`	`1.11.0`	up to date
pin-project	`^1.1`	`1.1.10`	up to date
once_cell	`^1.19`	`1.21.3`	up to date
indexmap	`^2.0`	`2.12.1`	up to date
dashmap	`^6.1.0`	`6.1.0`	up to date
parking_lot	`^0.12`	`0.12.5`	up to date
reqwest	`^0.12`	`0.12.24`	up to date
hyper	`^1.6`	`1.8.1`	up to date
tower	`^0.5`	`0.5.2`	up to date
tower-http	`^0.6`	`0.6.7`	up to date
axum	`^0.8`	`0.8.7`	up to date
tokio-tungstenite	`^0.27`	`0.28.0`	out of date
tungstenite	`^0.27`	`0.28.0`	out of date
libloading	`^0.8`	`0.9.0`	out of date
jsonwebtoken	`^9.1`	`10.2.0`	out of date
argon2	`^0.5`	`0.5.3`	up to date
rustls	`^0.23.31`	`0.23.35`	up to date
tokio-rustls	`^0.26`	`0.26.4`	up to date
color-eyre	`^0.6`	`0.6.5`	up to date
url	`^2.5`	`2.5.7`	up to date
rand	`^0.9`	`0.9.2`	up to date
regex	`^1.10`	`1.12.2`	up to date
brotli	`^8.0`	`8.0.2`	up to date
zstd	`^0.13`	`0.13.3`	up to date
notify	`^8.2`	`8.2.0`	up to date
base64	`^0.22`	`0.22.1`	up to date
sha2	`^0.10`	`0.10.9`	up to date
futures-util	`^0.3`	`0.3.31`	up to date
tokio-stream	`^0.1`	`0.1.17`	up to date
h2	`^0.4.4`	`0.4.12`	up to date
flate2	`^1.0`	`1.1.5`	up to date
uuid	`^1.10`	`1.19.0`	up to date
http	`^1.3`	`1.4.0`	up to date
dirs	`^6.0`	`6.0.0`	up to date
fastrand	`^2.3`	`2.3.0`	up to date
criterion	`^0.7`	`0.8.0`	out of date

Crate

Required

Latest

Status

serde

^1.0

1.0.228

up to date

serde_json

^1.0

1.0.145

up to date

serde_yaml

^0.9

0.9.34+deprecated

up to date

tokio

^1.34

1.48.0

up to date

async-trait

^0.1

0.1.89

up to date

tracing

^0.1

0.1.43

up to date

tracing-subscriber ⚠️

^0.3

0.3.22

maybe insecure

thiserror

^2.0

2.0.17

up to date

anyhow

^1.0

1.0.100

up to date

chrono

^0.4.20

0.4.42

up to date

futures

^0.3

0.3.31

up to date

tokio-util

^0.7

0.7.17

up to date

bytes

^1.5

1.11.0

up to date

pin-project

^1.1

1.1.10

up to date

once_cell

^1.19

1.21.3

up to date

indexmap

^2.0

2.12.1

up to date

dashmap

^6.1.0

6.1.0

up to date

parking_lot

^0.12

0.12.5

up to date

reqwest

^0.12

0.12.24

up to date

hyper

^1.6

1.8.1

up to date

tower

^0.5

0.5.2

up to date

tower-http

^0.6

0.6.7

up to date

axum

^0.8

0.8.7

up to date

tokio-tungstenite

^0.27

0.28.0

out of date

tungstenite

^0.27

0.28.0

out of date

libloading

^0.8

0.9.0

out of date

jsonwebtoken

^9.1

10.2.0

out of date

argon2

^0.5

0.5.3

up to date

rustls

^0.23.31

0.23.35

up to date

tokio-rustls

^0.26

0.26.4

up to date

color-eyre

^0.6

0.6.5

up to date

url

^2.5

2.5.7

up to date

rand

^0.9

0.9.2

up to date

regex

^1.10

1.12.2

up to date

brotli

^8.0

8.0.2

up to date

zstd

^0.13

0.13.3

up to date

notify

^8.2

8.2.0

up to date

base64

^0.22

0.22.1

up to date

sha2

^0.10

0.10.9

up to date

futures-util

^0.3

0.3.31

up to date

tokio-stream

^0.1

0.1.17

up to date

^0.4.4

0.4.12

up to date

flate2

^1.0

1.1.5

up to date

uuid

^1.10

1.19.0

up to date

http

^1.3

1.4.0

up to date

dirs

^6.0

6.0.0

up to date

fastrand

^2.3

2.3.0

up to date

criterion

^0.7

0.8.0

out of date

Dev dependencies

(14 total, all up-to-date)

Crate	Required	Latest	Status
proptest	`^1.3`	`1.9.0`	up to date
test-log	`^0.2`	`0.2.19`	up to date
env_logger	`^0.11`	`0.11.8`	up to date
tokio-test	`^0.4`	`0.4.4`	up to date
mockito	`^1.2`	`1.7.1`	up to date
wiremock	`^0.6`	`0.6.5`	up to date
serial_test	`^3.0`	`3.2.0`	up to date
tempfile	`^3.8`	`3.23.0`	up to date
regex	`^1.10`	`1.12.2`	up to date
rstest	`^0.26`	`0.26.1`	up to date
fake	`^4.4`	`4.4.0`	up to date
quickcheck	`^1.0`	`1.0.3`	up to date
quickcheck_macros	`^1.0`	`1.1.0`	up to date
insta	`^1.34`	`1.44.3`	up to date

Crate

Required

Latest

Status

proptest

^1.3

1.9.0

up to date

test-log

^0.2

0.2.19

up to date

env_logger

^0.11

0.11.8

up to date

tokio-test

^0.4

0.4.4

up to date

mockito

^1.2

1.7.1

up to date

wiremock

^0.6

0.6.5

up to date

serial_test

^3.0

3.2.0

up to date

tempfile

^3.8

3.23.0

up to date

regex

^1.10

1.12.2

up to date

rstest

^0.26

0.26.1

up to date

fake

^4.4

4.4.0

up to date

quickcheck

^1.0

1.0.3

up to date

quickcheck_macros

^1.0

1.1.0

up to date

insta

^1.34

1.44.3

up to date

Security Vulnerabilities

`tracing-subscriber`: Logging user input may result in poisoning logs with ANSI escape sequences

RUSTSEC-2025-0055

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

Manipulate terminal title bars
Clear screens or modify terminal display
Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

This was patched in PR #3368 to escape ANSI control characters from user input.

Deps.rs

prismworks-ai / prism-mcp-rs

Crate `prism-mcp-rs`

Dependencies

Dev dependencies

Security Vulnerabilities

`tracing-subscriber`: Logging user input may result in poisoning logs with ANSI escape sequences

prismworks-ai / prism-mcp-rs

Crate prism-mcp-rs

Dependencies

Dev dependencies

Security Vulnerabilities

tracing-subscriber: Logging user input may result in poisoning logs with ANSI escape sequences

Crate `prism-mcp-rs`

`tracing-subscriber`: Logging user input may result in poisoning logs with ANSI escape sequences