This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate nuts-rs

Dependencies

(15 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 rand^0.10.00.10.0up to date
 rand_distr^0.6.00.6.0up to date
 itertools^0.14.00.14.0up to date
 thiserror^2.0.32.0.18up to date
 anyhow^1.0.721.0.102up to date
 faer^0.24.00.24.0up to date
 pulp^0.22.20.22.2up to date
 rayon^1.10.01.11.0up to date
 zarrs^0.23.00.23.3up to date
 ndarray^0.17.10.17.2up to date
 arrow^57.0.058.0.0out of date
 arrow-schema^57.0.058.0.0out of date
 serde^1.0.2191.0.228up to date
 serde_json^1.01.0.149up to date
 tokio ⚠️^1.01.49.0maybe insecure

Dev dependencies

(12 total, 1 possibly insecure)

CrateRequiredLatestStatus
 proptest^1.6.01.10.0up to date
 pretty_assertions^1.4.01.4.1up to date
 criterion^0.8.00.8.2up to date
 nix^0.31.00.31.1up to date
 approx^0.5.10.5.1up to date
 equator^0.6.00.6.0up to date
 serde_json^1.01.0.149up to date
 ndarray^0.17.10.17.2up to date
 tempfile^3.03.26.0up to date
 zarrs_object_store^0.6.00.6.2up to date
 object_store^0.13.00.13.1up to date
 tokio ⚠️^1.01.49.0maybe insecure

Crate nuts-derive

Dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 proc-macro2^1.01.0.106up to date
 quote^1.01.0.44up to date
 syn^1.02.0.117out of date

Crate nuts-storable

No external dependencies! 🙌

Security Vulnerabilities

tokio: reject_remote_clients Configuration corruption

RUSTSEC-2023-0001

On Windows, configuring a named pipe server with pipe_mode will force ServerOptions::reject_remote_clients as false.

This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.

The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.

Workarounds

Ensure that pipe_mode is set first after initializing a ServerOptions. For example:

let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);