This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
bat(28 total, 3 outdated, 1 possibly insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| is-terminal | ^0.4.4 | 0.4.7 | up to date |
| nu-ansi-term | ^0.47.0 | 0.48.0 | out of date |
| ansi_colours | ^1.2 | 1.2.1 | up to date |
| bincode | ^1.0 | 1.3.3 | up to date |
| console | ^0.15.5 | 0.15.7 | up to date |
| flate2 | ^1.0 | 1.0.26 | up to date |
| once_cell | ^1.17 | 1.18.0 | up to date |
| thiserror | ^1.0 | 1.0.40 | up to date |
| wild | ^2.1 | 2.1.0 | up to date |
| content_inspector | ^0.2.4 | 0.2.4 | up to date |
| encoding | ^0.2 | 0.2.33 | up to date |
| shell-words | ^1.1.0 | 1.1.0 | up to date |
| unicode-width | ^0.1.10 | 0.1.10 | up to date |
| globset | ^0.4 | 0.4.10 | up to date |
| serde | ^1.0 | 1.0.164 | up to date |
| serde_yaml ⚠️ | ^0.8 | 0.9.21 | out of date |
| semver | ^1.0 | 1.0.17 | up to date |
| path_abs | ^0.5 | 0.5.1 | up to date |
| clircle | ^0.3 | 0.3.0 | up to date |
| bugreport | ^0.5.0 | 0.5.0 | up to date |
| dirs | ^5.0.0 | 5.0.1 | up to date |
| grep-cli | ^0.1.7 | 0.1.7 | up to date |
| regex | ^1.8.3 | 1.8.4 | up to date |
| walkdir | ^2.3 | 2.3.3 | up to date |
| bytesize | ^1.2.0 | 1.2.0 | up to date |
| git2 | ^0.16 | 0.17.2 | out of date |
| syntect | ^5.0.0 | 5.0.0 | up to date |
| clap | ^4.3.0 | 4.3.3 | up to date |
(6 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| assert_cmd | ^2.0.10 | 2.0.11 | up to date |
| expect-test | ^1.4.0 | 1.4.1 | up to date |
| serial_test | ^2.0.0 | 2.0.0 | up to date |
| predicates | ^3.0.3 | 3.0.3 | up to date |
| wait-timeout | ^0.2.0 | 0.2.0 | up to date |
| tempfile | ^3.5.0 | 3.6.0 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| clap | ^4.1.8 | 4.3.3 | up to date |
serde_yaml: Uncontrolled recursion leads to abort in deserializationAffected versions of this crate did not properly check for recursion while deserializing aliases.
This allows an attacker to make a YAML file with an alias referring to itself causing an abort.
The flaw was corrected by checking the recursion depth.