Deps.rs

timberio / vector

[![dependency status](https://deps.rs/repo/github/timberio/vector/status.svg)](https://deps.rs/repo/github/timberio/vector)

This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate vector

Dependencies

(114 total, 33 outdated)

CrateRequiredLatestStatus
 reqwest^0.130.13.5up to date
 tokio-openssl^0.6.50.6.5up to date
 tokio-util^0.70.7.20up to date
 console-subscriber^0.4.10.5.0out of date
 tracing-core^0.1.260.1.36up to date
 aws-runtime^1.9.21.10.2up to date
 aws-config^1.12.01.13.0up to date
 aws-credential-types^1.3.01.3.1up to date
 aws-sdk-cloudwatch^1.128.01.140.0up to date
 aws-sdk-cloudwatchlogs^1.150.01.162.0up to date
 aws-sdk-elasticsearch^1.117.01.127.0up to date
 aws-sdk-firehose^1.118.01.128.0up to date
 aws-sdk-kinesis^1.119.01.130.0up to date
 aws-sdk-kms^1.118.01.129.0up to date
 aws-sdk-s3^1.146.01.157.0up to date
 aws-sdk-secretsmanager^1.115.01.125.0up to date
 aws-sdk-sns^1.111.01.121.0up to date
 aws-sdk-sqs^1.109.01.119.0up to date
 aws-types^1.6.01.7.0up to date
 aws-sdk-sts^1.114.01.124.0up to date
 aws-sigv4^1.5.11.6.4up to date
 aws-smithy-async^1.3.01.3.1up to date
 aws-smithy-http^0.640.64.3up to date
 aws-smithy-runtime^1.14.01.16.2up to date
 aws-smithy-runtime-api^1.16.01.19.2up to date
 aws-smithy-types^1.6.31.9.1up to date
 azure_core^1.01.1.0up to date
 azure_identity^1.01.0.0up to date
 azure_storage_blob^1.01.1.0up to date
 opendal^0.58.20.59.5out of date
 opendal-http-transport-reqwest^0.58.20.59.5out of date
 tower^0.5.20.5.3up to date
 tower-http^0.6.80.7.1out of date
 serde_bytes^0.11.170.11.19up to date
 serde_with^3.14.03.24.0up to date
 rmp-serde^1.3.01.3.1up to date
 rmpv^1.3.01.3.1up to date
 databricks-zerobus-ingest-sdk^2.7.13.0.0out of date
 goauth^0.16.00.17.0out of date
 smpl_jwt^0.8.00.9.0out of date
 lapin^4.3.04.12.3up to date
 async-rs^0.80.8.13up to date
 deadpool^0.13.00.13.1up to date
 hex^0.4.30.4.3up to date
 greptimedb-ingester^0.17.00.19.0out of date
 arrow^59.2.060.1.0out of date
 parquet^59.2.060.1.0out of date
 axum^0.7.90.8.9out of date
 bloomy^1.2.01.2.0up to date
 bollard^0.200.21.1out of date
 bytesize^2.0.12.7.0up to date
 csv^1.31.4.0up to date
 databend-client^0.28.00.34.2out of date
 dirs-next^2.0.02.0.0up to date
 dyn-clone^1.0.201.0.20up to date
 encoding_rs^0.8.350.8.44up to date
 enum_dispatch^0.3.130.3.13up to date
 evmap^10.0.211.0.0out of date
 evmap-derive^0.2.00.2.0up to date
 governor^0.10.00.10.4up to date
 h2^0.4.110.4.20up to date
 hash_hasher^2.0.42.0.4up to date
 hashbrown^0.14.50.17.1out of date
 headers^0.4.10.4.2up to date
 hostname^0.4.00.4.2up to date
 http^1.01.5.0up to date
 http-serde^1.1.32.1.1out of date
 http-body^11.1.0up to date
 http-body-util^0.10.1.5up to date
 hyper^11.12.0up to date
 hyper-openssl^0.9.20.10.3out of date
 hyper-proxy^0.9.10.9.1up to date
 hyper-util^0.10.1.21up to date
 inventory^0.3.200.3.25up to date
 ipnet^22.12.2up to date
 k8s-openapi^0.28.00.29.0out of date
 kube^4.2.05.0.0out of date
 listenfd^1.0.21.0.2up to date
 lru^0.18.20.19.0out of date
 maxminddb^0.27.00.32.0out of date
 md-5^0.100.11.0out of date
 mongodb^3.7.03.9.1up to date
 async-nats^0.49.00.51.0out of date
 nkeys^0.4.50.4.5up to date
 notify^8.1.08.2.1up to date
 openssl^0.10.730.10.82up to date
 openssl-probe^0.1.60.2.2out of date
 percent-encoding^2.3.12.3.2up to date
 postgres-openssl^0.5.10.5.3up to date
 pulsar^6.7.06.9.1up to date
 quick-junit^0.6.00.8.0out of date
 redis^0.32.41.8.1out of date
 roaring^0.11.20.12.0out of date
 rumqttc-v4-next^0.34.00.34.0up to date
 seahash^4.1.04.1.0up to date
 smallvec^11.16.4up to date
 snap^1.1.11.1.2up to date
 sqlx^0.8.60.9.0out of date
 stream-cancel^0.8.20.8.2up to date
 strip-ansi-escapes^0.2.10.2.1up to date
 syslog^6.1.17.0.0out of date
 tokio-postgres^0.7.180.7.18up to date
 thread_local^1.1.91.1.10up to date
 typetag^0.2.200.2.23up to date
 warp^0.3.70.4.3out of date
 arr_macro^0.2.10.2.1up to date
 sysinfo^0.37.20.40.1out of date
 windows-sys^0.520.61.2out of date
 windows-service^0.8.00.8.1up to date
 windows^0.580.62.2out of date
 quick-xml^0.420.42.0up to date
 nix^0.310.31.3up to date
 tikv-jemallocator^0.7.00.7.0up to date
 procfs^0.18.00.18.0up to date

Dev dependencies

(9 total, 2 outdated)

CrateRequiredLatestStatus
 approx^0.5.10.5.1up to date
 assert_cmd^2.0.172.2.2up to date
 hyper^11.12.0up to date
 hyper-util^0.10.1.21up to date
 rstest^0.26.10.28.0out of date
 test-generator^0.3.10.3.1up to date
 tower-test^0.4.00.4.0up to date
 parking_lot^0.12.50.13.0out of date
 wiremock^0.6.40.6.5up to date

Build dependencies

(1 total, 1 outdated)

CrateRequiredLatestStatus
 openssl-src^300400.0.2+4.0.3out of date

Crate fakedata

No external dependencies! 🙌

Crate tracing-limit

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 tracing-core^0.10.1.36up to date
 dashmap^6.1.06.2.1up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tracing^0.1.440.1.44up to date

Crate vector-common

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 async-stream^0.3.60.3.6up to date
 bytes^1.11.11.12.1up to date
 smallvec^11.16.4up to date
 stream-cancel^0.8.20.8.2up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 futures^0.3.310.3.34up to date

Crate vector-http

Dependencies

(10 total, all up-to-date)

CrateRequiredLatestStatus
 http^1.01.5.0up to date
 http-body^11.1.0up to date
 http-body-util^0.10.1.5up to date
 hyper^11.12.0up to date
 hyper-openssl^0.100.10.3up to date
 hyper-util^0.10.1.21up to date
 openssl^0.10.810.10.82up to date
 percent-encoding^2.3.12.3.2up to date
 tower^0.5.20.5.3up to date
 url^2.5.42.5.8up to date

Crate vector-vrl-metrics

No external dependencies! 🙌

Crate datadog-proto

No external dependencies! 🙌

Crate loki-logproto

No external dependencies! 🙌

Crate dnsmsg-parser

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 data-encoding^2.102.11.1up to date

Crate dnstap-parser

No external dependencies! 🙌

Crate codecs

Dependencies

(11 total, 3 outdated)

CrateRequiredLatestStatus
 apache-avro^0.22.00.22.0up to date
 arrow^59.2.060.1.0out of date
 parquet^59.2.060.1.0out of date
 csv-core^0.1.130.1.13up to date
 dyn-clone^11.0.20up to date
 influxdb-line-protocol^22.0.0up to date
 memchr^22.8.3up to date
 smallvec^11.16.4up to date
 syslog_loose^0.230.23.0up to date
 tokio-util^0.70.7.20up to date
 toml^0.9.81.1.8+spec-1.1.0out of date

Dev dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 rstest^0.26.10.28.0out of date
 tracing-test^0.2.60.2.6up to date

Crate docs-renderer

No external dependencies! 🙌

Crate file-source

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 tokio-util^0.70.7.20up to date
 indexmap^2.11.02.14.2up to date
 futures^0.3.310.3.34up to date

Crate file-source-common

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 crc^3.3.03.4.0up to date
 serde^1.01.0.229up to date
 bstr^1.121.13.1up to date
 bytes^1.11.11.12.1up to date
 dashmap^6.16.2.1up to date
 winapi^0.30.3.9up to date

Crate k8s-e2e-tests

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 k8s-openapi^0.28.00.29.0out of date
 env_logger^0.110.11.11up to date

Crate k8s-test-framework

Dependencies

(2 total, 1 outdated)

CrateRequiredLatestStatus
 k8s-openapi^0.28.00.29.0out of date
 log^0.40.4.35up to date

Crate opentelemetry-proto

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 hex^0.4.30.4.3up to date

Crate prometheus-parser

No external dependencies! 🙌

Crate vector-api-client

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 http^11.5.0up to date
 hyper-util^0.10.1.21up to date

Crate vector-buffers

Dependencies

(10 total, 2 outdated, 1 insecure)

CrateRequiredLatestStatus
 async-recursion^1.1.11.2.0up to date
 async-stream^0.3.60.3.6up to date
 bytecheck^0.6.90.8.3out of date
 crc32fast^1.5.01.5.4up to date
 crossbeam-queue^0.3.120.3.14up to date
 fslock^0.2.10.2.1up to date
 memmap2^0.9.100.9.12up to date
 num-traits^0.2.190.2.19up to date
 rkyv ⚠️^0.7.460.8.18insecure
 tokio-util^0.7.00.7.20up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 crossbeam-queue^0.3.120.3.14up to date
 hdrhistogram^7.5.47.6.0up to date
 tracing-fluent-assertions^0.30.3.0up to date

Crate vector-common-macros

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 proc-macro2^1.01.0.107up to date
 quote^1.01.0.47up to date

Crate vector-config

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 encoding_rs^0.80.8.44up to date
 inventory^0.30.3.25up to date
 num-traits^0.2.190.2.19up to date
 url^2.5.42.5.8up to date
 http^1.01.5.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 assert-json-diff^22.0.2up to date

Crate vector-config-common

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 proc-macro2^1.01.0.107up to date
 quote^1.01.0.47up to date

Crate vector-config-macros

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 proc-macro2^1.01.0.107up to date
 quote^1.01.0.47up to date
 serde_derive_internals^0.300.30.0up to date

Crate vector-core

Dependencies

(22 total, 4 outdated)

CrateRequiredLatestStatus
 bitmask-enum^2.2.52.2.5up to date
 cidr^0.3.10.3.2up to date
 dyn-clone^1.0.201.0.20up to date
 enumflags2^0.7.120.7.12up to date
 float_eq^1.01.0.1up to date
 futures-util^0.3.290.3.34up to date
 headers^0.3.90.4.2out of date
 http^0.2.91.5.0out of date
 hyper-proxy^0.9.10.9.1up to date
 ipnet^22.12.2up to date
 openssl^0.10.810.10.82up to date
 parking_lot^0.12.50.13.0out of date
 quanta^0.12.60.13.0out of date
 regex^1.12.31.13.1up to date
 zmij^11.0.23up to date
 smallvec^11.16.4up to date
 tokio-openssl^0.6.50.6.5up to date
 tokio-util^0.7.00.7.20up to date
 url^22.5.8up to date
 urlencoding^2.1.32.1.3up to date
 security-framework^3.6.03.7.0up to date
 schannel^0.1.290.1.30up to date

Dev dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 base64^0.23.00.23.1up to date
 env-test-util^1.0.11.0.1up to date
 quickcheck_macros^11.2.0up to date
 ndarray^0.17.20.17.2up to date
 ndarray-stats^0.7.00.7.0up to date
 noisy_float^0.2.10.2.1up to date
 serde_yaml^0.9.340.9.34+deprecatedup to date

Crate vector-lib

No external dependencies! 🙌

Crate vector-lookup

No external dependencies! 🙌

Crate vector-stream

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 tokio-util^0.7.00.7.20up to date
 tower^0.5.30.5.3up to date
 twox-hash^2.1.22.1.5up to date

Crate vector-tap

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 tokio-util^0.70.7.20up to date
 url^2.5.42.5.8up to date

Crate vector-top

Dependencies

(5 total, all up-to-date)

CrateRequiredLatestStatus
 humantime^2.2.02.4.0up to date
 crossterm^0.29.00.29.0up to date
 unit-prefix^0.5.20.5.2up to date
 num-format^0.4.40.4.4up to date
 ratatui^0.30.00.30.2up to date

Crate vector-vrl-category

No external dependencies! 🙌

Crate vector-vrl-cli

No external dependencies! 🙌

Crate vector-vrl-doc-builder

No external dependencies! 🙌

Crate enrichment

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 dyn-clone^1.0.201.0.20up to date

Crate vector-vrl-functions

No external dependencies! 🙌

Crate vector-vrl-tests

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tikv-jemallocator^0.7.00.7.0up to date

Crate vector-vrl-web-playground

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 wasm-bindgen^0.20.2.130up to date
 web-sys^0.30.3.107up to date
 gloo-utils^0.30.3.0up to date
 getrandom^0.40.4.3up to date

Build dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 cargo-lock^11.0.111.1.0up to date

Crate antithesis-harness

No external dependencies! 🙌

Crate vdev

Dependencies

(20 total, 4 outdated)

CrateRequiredLatestStatus
 aws-config=1.12.01.13.0out of date
 aws-sdk-s3=1.146.01.157.0out of date
 aws-sdk-sts=1.114.01.124.0out of date
 aws-sdk-iam^1.01.133.0up to date
 aws-smithy-http-client^1.41.5.2up to date
 aws-smithy-runtime-api^1.161.19.2up to date
 aws-smithy-types^11.9.1up to date
 roxmltree^0.210.21.2up to date
 tar^0.40.4.46up to date
 uuid^11.29.0up to date
 clap-verbosity-flag^3.0.43.0.4up to date
 directories^6.0.06.0.0up to date
 handlebars^6.4.46.4.4up to date
 hex^0.4.30.4.3up to date
 indicatif^0.18.40.18.6up to date
 log^0.4.290.4.35up to date
 owo-colors^4.2.34.4.0up to date
 sha2^0.11.00.11.1up to date
 toml_edit^0.230.25.17+spec-1.1.0out of date
 git2^0.21.00.21.0up to date

Security Vulnerabilities

rkyv: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc

RUSTSEC-2026-0235

Shared pointer validation keyed already-validated pointees by their address and type, but did not include pointer metadata. For unsized pointees, an archive could therefore contain multiple Rc, Arc, or weak pointers that shared a data address but used different metadata, such as different slice lengths.

Once the first pointer had been validated, later pointers to the same address skipped pointee validation. The safe checked rkyv::access API could consequently return a slice with a forged length, allowing safe indexing to read out of bounds. The same validation bypass was reachable through checked deserialization with rkyv::from_bytes.

Version 0.8.17 includes pointer metadata in shared pointer validation and rejects conflicting metadata. The 0.7 series is also affected but is no longer supported by upstream. Users who process untrusted archives should upgrade to 0.8.17 or later.