The build script in the portaudio crate will attempt to download via HTTP the portaudio source and build it.
A Mallory in the middle can intercept the download with their own archive and get RCE.
This project contains known security vulnerabilities. Find detailed information at the bottom.
webrtc-audio-processing(2 total, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde | ^1 | 1.0.229 | up to date |
| portaudio ⚠️ | ^0.8 | 0.8.0 | insecure |
(11 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1 | 1.0.104 | up to date |
| crossbeam-channel | ^0.5 | 0.5.17 | up to date |
| ctrlc | ^3 | 3.5.2 | up to date |
| hound | ^3 | 3.5.1 | up to date |
| json5 | ^1 | 1.3.1 | up to date |
| regex | ^1 | 1.13.1 | up to date |
| serde | ^1 | 1.0.229 | up to date |
| serde_ignored | ^0.1 | 0.1.14 | up to date |
| serde_json | ^1 | 1.0.151 | up to date |
| structopt | ^0.3 | 0.3.26 | up to date |
| log | ^0.4 | 0.4.34 | up to date |
webrtc-audio-processing-config(3 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| schemars | ^1 | 1.2.2 | up to date |
| serde | ^1 | 1.0.229 | up to date |
| strum | ^0.27 | 0.28.0 | out of date |
webrtc-audio-processing-sys(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde | ^1 | 1.0.229 | up to date |
(7 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| anyhow | ^1 | 1.0.104 | up to date |
| autotools | ^0.2 | 0.2.7 | up to date |
| bindgen | ^0.72 | 0.73.2 | out of date |
| cc | ^1 | 1.5.1 | up to date |
| fs_extra | ^1 | 1.3.0 | up to date |
| regex | ^1 | 1.13.1 | up to date |
| pkg-config | ^0.3 | 0.3.34 | up to date |
portaudio: HTTP download and execution allows MitM RCEThe build script in the portaudio crate will attempt to download via HTTP the portaudio source and build it.
A Mallory in the middle can intercept the download with their own archive and get RCE.