remexre / swipl-rs

This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate `swipl`

Dependencies

(3 total, all up-to-date)

Crate	Required	Latest	Status
failure	`^0.1.1`	`0.1.8`	up to date
failure_derive	`^0.1.1`	`0.1.8`	up to date
lazy_static	`^1.0.0`	`1.5.1`	up to date

Crate `swipl-sys`

Dependencies

(2 total, 1 outdated, 1 insecure)

Crate	Required	Latest	Status
gmp-mpfr-sys	`^1.1.0`	`1.7.1`	up to date
ncurses ⚠️	`^5.91.0`	`6.0.1`	insecure

Build dependencies

(6 total, 3 outdated)

Crate	Required	Latest	Status
bindgen	`^0.33.1`	`0.73.2`	out of date
flate2	`^1.0.1`	`1.1.10`	up to date
hashwriter	`^0.1.0`	`0.1.0`	up to date
reqwest	`^0.8.5`	`0.13.5`	out of date
sha2	`^0.7.0`	`0.11.1`	out of date
tar	`^0.4.14`	`0.4.46`	up to date

Security Vulnerabilities

`ncurses`: Buffer overflow and format vulnerabilities in functions exposed without unsafe

RUSTSEC-2019-0006

ncurses exposes functions from the ncurses library which:

Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. (instr, mvwinstr, etc)
Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format string attack, which trivially allows writing arbitrary data to stack memory (functions in the printw family).