This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
bat(28 total, 1 outdated, 1 possibly insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| atty | ^0.2.14 | 0.2.14 | up to date |
| nu-ansi-term | ^0.47.0 | 0.47.0 | up to date |
| ansi_colours | ^1.2 | 1.2.1 | up to date |
| bincode | ^1.0 | 1.3.3 | up to date |
| console | ^0.15.5 | 0.15.5 | up to date |
| flate2 | ^1.0 | 1.0.25 | up to date |
| once_cell | ^1.17 | 1.17.1 | up to date |
| thiserror | ^1.0 | 1.0.40 | up to date |
| wild | ^2.1 | 2.1.0 | up to date |
| content_inspector | ^0.2.4 | 0.2.4 | up to date |
| encoding | ^0.2 | 0.2.33 | up to date |
| shell-words | ^1.1.0 | 1.1.0 | up to date |
| unicode-width | ^0.1.10 | 0.1.10 | up to date |
| globset | ^0.4 | 0.4.10 | up to date |
| serde | ^1.0 | 1.0.158 | up to date |
| serde_yaml ⚠️ | ^0.8 | 0.9.19 | out of date |
| semver | ^1.0 | 1.0.17 | up to date |
| path_abs | ^0.5 | 0.5.1 | up to date |
| clircle | ^0.3 | 0.3.0 | up to date |
| bugreport | ^0.5.0 | 0.5.0 | up to date |
| dirs | ^5.0.0 | 5.0.0 | up to date |
| grep-cli | ^0.1.7 | 0.1.7 | up to date |
| regex | ^1.7.0 | 1.7.3 | up to date |
| walkdir | ^2.0 | 2.3.3 | up to date |
| bytesize | ^1.1.0 | 1.2.0 | up to date |
| git2 | ^0.16 | 0.16.1 | up to date |
| syntect | ^5.0.0 | 5.0.0 | up to date |
| clap | ^4.1.8 | 4.1.13 | up to date |
(6 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| assert_cmd | ^2.0.8 | 2.0.10 | up to date |
| expect-test | ^1.4.0 | 1.4.1 | up to date |
| serial_test | ^0.6.0 | 1.0.0 | out of date |
| predicates | ^2.1.5 | 3.0.2 | out of date |
| wait-timeout | ^0.2.0 | 0.2.0 | up to date |
| tempfile | ^3.3.0 | 3.4.0 | up to date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| clap | ^4.1.8 | 4.1.13 | up to date |
serde_yaml: Uncontrolled recursion leads to abort in deserializationAffected versions of this crate did not properly check for recursion while deserializing aliases.
This allows an attacker to make a YAML file with an alias referring to itself causing an abort.
The flaw was corrected by checking the recursion depth.