Deps.rs

tauri-apps / tauri

[![dependency status](https://deps.rs/repo/github/tauri-apps/tauri/status.svg)](https://deps.rs/repo/github/tauri-apps/tauri)

This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate tauri

Dependencies

(41 total, 1 possibly insecure)

CrateRequiredLatestStatus
 serde_json^1.01.0.85up to date
 serde^1.01.0.145up to date
 tokio ⚠️^11.21.2maybe insecure
 futures-util^0.30.3.24up to date
 uuid^11.1.2up to date
 url^2.32.3.1up to date
 anyhow^1.01.0.65up to date
 thiserror^1.01.0.37up to date
 once_cell^11.15.0up to date
 rand^0.80.8.5up to date
 semver^1.01.0.14up to date
 serde_repr^0.10.1.9up to date
 state^0.50.5.3up to date
 tar^0.4.380.4.38up to date
 tempfile^33.3.0up to date
 zip^0.60.6.2up to date
 ignore^0.40.4.18up to date
 flate2^1.01.0.24up to date
 http^0.20.2.8up to date
 dirs-next^2.02.0.0up to date
 percent-encoding^2.22.2.0up to date
 base64^0.130.13.0up to date
 clap^33.2.22up to date
 reqwest^0.110.11.12up to date
 bytes^11.2.1up to date
 attohttpc^0.220.22.0up to date
 open^3.03.0.3up to date
 shared_child^1.01.0.0up to date
 os_pipe^1.01.0.1up to date
 raw-window-handle^0.50.5.0up to date
 minisign-verify^0.20.2.1up to date
 time^0.30.3.14up to date
 os_info^3.5.03.5.1up to date
 regex^1.6.01.6.0up to date
 glob^0.30.3.0up to date
 data-url^0.20.2.0up to date
 serialize-to-javascript=0.1.10.1.1up to date
 infer^0.90.9.0up to date
 png^0.170.17.6up to date
 ico^0.10.1.0up to date
 encoding_rs^0.8.310.8.31up to date

Dev dependencies

(9 total, 1 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 mockito^0.310.31.0up to date
 proptest^1.0.01.0.0up to date
 quickcheck^1.0.31.0.3up to date
 quickcheck_macros^1.0.01.0.0up to date
 serde^1.01.0.145up to date
 serde_json^1.01.0.85up to date
 tokio-test^0.4.20.4.2up to date
 tokio ⚠️^11.21.2maybe insecure
 cargo_toml^0.110.12.2out of date

Build dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 heck^0.40.4.0up to date
 once_cell^11.15.0up to date

Crate tauri-runtime

Dependencies

(8 total, all up-to-date)

CrateRequiredLatestStatus
 serde^1.01.0.145up to date
 serde_json^1.01.0.85up to date
 thiserror^1.01.0.37up to date
 uuid^11.1.2up to date
 http^0.2.40.2.8up to date
 http-range^0.1.40.1.5up to date
 raw-window-handle^0.50.5.0up to date
 rand^0.80.8.5up to date

Crate tauri-runtime-wry

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 wry^0.210.21.1up to date
 uuid^11.1.2up to date
 rand^0.80.8.5up to date
 raw-window-handle^0.50.5.0up to date

Crate tauri-macros

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 proc-macro2^11.0.44up to date
 quote^11.0.21up to date
 syn^11.0.101up to date
 heck^0.40.4.0up to date

Crate tauri-utils

Dependencies

(24 total, 5 outdated)

CrateRequiredLatestStatus
 serde^1.01.0.145up to date
 serde_json^1.01.0.85up to date
 thiserror^1.0.301.0.37up to date
 phf^0.100.11.1out of date
 brotli^33.3.4up to date
 url^2.22.3.1up to date
 kuchiki^0.80.8.1up to date
 html5ever^0.250.26.0out of date
 proc-macro2^1.01.0.44up to date
 quote^1.01.0.21up to date
 schemars^0.80.8.10up to date
 serde_with^1.122.0.1out of date
 aes-gcm^0.90.10.1out of date
 getrandom^0.20.2.7up to date
 serialize-to-javascript=0.1.10.1.1up to date
 ctor^0.10.1.23up to date
 json5^0.40.4.1up to date
 toml^0.50.5.9up to date
 json-patch^0.20.2.6up to date
 glob^0.3.00.3.0up to date
 walkdir^22.3.2up to date
 memchr^2.42.5.0up to date
 semver^11.0.14up to date
 infer^0.70.9.0out of date

Crate tauri-build

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 anyhow^11.0.65up to date
 quote^11.0.21up to date
 cargo_toml^0.120.12.2up to date
 serde_json^11.0.85up to date
 heck^0.40.4.0up to date
 json-patch^0.20.2.6up to date

Crate tauri-codegen

Dependencies

(15 total, all up-to-date)

CrateRequiredLatestStatus
 sha2^0.100.10.6up to date
 base64^0.130.13.0up to date
 proc-macro2^11.0.44up to date
 quote^11.0.21up to date
 serde^11.0.145up to date
 serde_json^11.0.85up to date
 thiserror^11.0.37up to date
 walkdir^22.3.2up to date
 brotli^33.3.4up to date
 regex^1.6.01.6.0up to date
 uuid^11.1.2up to date
 semver^11.0.14up to date
 ico^0.10.1.0up to date
 png^0.170.17.6up to date
 json-patch^0.20.2.6up to date

Crate restart

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tempfile^33.3.0up to date

Crate app-updater

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 serde^11.0.145up to date
 serde_json^11.0.85up to date
 tiny_http^0.110.11.0up to date
 time^0.30.3.14up to date

Security Vulnerabilities

tokio: Data race when sending and receiving after closing a `oneshot` channel

RUSTSEC-2021-0124

If a tokio::sync::oneshot channel is closed (via the oneshot::Receiver::close method), a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling try_recv.

When these methods are called concurrently on a closed channel, the two halves of the channel can concurrently access a shared memory location, resulting in a data race. This has been observed to cause memory corruption.

Note that the race only occurs when both halves of the channel are used after the Receiver half has called close. Code where close is not used, or where the Receiver is not awaited and try_recv is not called after calling close, is not affected.

See tokio#4225 for more details.