This project contains known security vulnerabilities. Find detailed information at the bottom.
protobuf-build(10 total, 6 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| proc-macro2 | ^1 | 1.0.107 | up to date |
| protobuf ⚠️ | ^2 | 3.7.2 | insecure |
| protobuf-codegen | ^2 | 3.7.2 | out of date |
| grpcio-compiler | >=0.8 | 0.13.0 | up to date |
| prost-build | ^0.11 | 0.14.4 | out of date |
| regex | ^1.3 | 1.13.1 | up to date |
| syn | ^1.0 | 3.0.6 | out of date |
| quote | ^1.0 | 1.0.47 | up to date |
| bitflags | ^1.2 | 2.13.2 | out of date |
| protobuf-src | ^1.1.0 | 2.1.1+27.1 | out of date |
tests(4 total, 3 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| protobuf ⚠️ | ^2 | 3.7.2 | insecure |
| prost | ^0.11 | 0.14.4 | out of date |
| prost-derive | ^0.11 | 0.14.4 | out of date |
| lazy_static | ^1.4 | 1.5.0 | up to date |
protobuf: Crash due to uncontrolled recursion in protobuf crateAffected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.