This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate nuts-rs

Dependencies

(14 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 rand^0.9.00.9.2up to date
 rand_distr^0.5.00.5.1up to date
 itertools^0.14.00.14.0up to date
 thiserror^2.0.32.0.16up to date
 rand_chacha^0.9.00.9.0up to date
 anyhow^1.0.721.0.99up to date
 faer^0.22.60.22.6up to date
 pulp^0.21.40.21.5up to date
 rayon^1.10.01.11.0up to date
 zarrs^0.21.00.22.0out of date
 ndarray^0.16.10.16.1up to date
 serde^1.0.2191.0.225up to date
 serde_json^1.01.0.145up to date
 tokio ⚠️^1.01.47.1maybe insecure

Dev dependencies

(12 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 proptest^1.6.01.7.0up to date
 pretty_assertions^1.4.01.4.1up to date
 criterion^0.7.00.7.0up to date
 nix^0.30.00.30.1up to date
 approx^0.5.10.5.1up to date
 equator^0.4.20.4.2up to date
 serde_json^1.01.0.145up to date
 ndarray^0.16.10.16.1up to date
 tempfile^3.03.22.0up to date
 zarrs_object_store^0.4.30.5.0out of date
 object_store^0.12.00.12.3up to date
 tokio ⚠️^1.01.47.1maybe insecure

Crate nuts-derive

Dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 proc-macro2^1.01.0.101up to date
 quote^1.01.0.40up to date
 syn^1.02.0.106out of date

Crate nuts-storable

No external dependencies! 🙌

Security Vulnerabilities

tokio: reject_remote_clients Configuration corruption

RUSTSEC-2023-0001

On Windows, configuring a named pipe server with pipe_mode will force ServerOptions::reject_remote_clients as false.

This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.

The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.

Workarounds

Ensure that pipe_mode is set first after initializing a ServerOptions. For example:

let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);