Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
This project contains known security vulnerabilities. Find detailed information at the bottom.
haret(16 total, 9 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| libc | ^0.1 | 0.2.191 | out of date |
| time | * | 0.3.55 | up to date |
| uuid | ^0.5 | 1.29.0 | out of date |
| rand | ^0.3 | 0.10.3 | out of date |
| slog | ^1 | 2.8.2 | out of date |
| amy | ^0.7.2 | 0.10.0 | out of date |
| funfsm | ^0.2 | 0.2.1 | up to date |
| orset | ^0.2 | 0.2.0 | up to date |
| rabble | ^0.4 | 0.4.1 | up to date |
| protobuf ⚠️ | ^1.0.24 | 3.7.2 | insecure |
| vertree | ^0.2 | 0.2.2 | up to date |
| lazy_static | ^0.1 | 1.5.1 | out of date |
| serde | ^1.0 | 1.0.229 | up to date |
| serde_derive | ^1.0 | 1.0.229 | up to date |
| rmp-serde | ^0.13 | 1.3.1 | out of date |
| toml | ^0.4 | 1.2.0+spec-1.1.0 | out of date |
(5 total, 4 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| assert_matches | ^1.0 | 1.5.0 | up to date |
| quickcheck | ^0.4 | 1.1.0 | out of date |
| slog-envlogger | ^0.5 | 2.2.0 | out of date |
| slog-stdlog | ^1 | 4.1.1 | out of date |
| slog-term | ^1.1 | 2.9.2 | out of date |
haret-admin(4 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| rabble | ^0.4 | 0.4.1 | up to date |
| rmp-serde | ^0.13 | 1.3.1 | out of date |
| serde | ^1.0 | 1.0.229 | up to date |
| uuid | ^0.5 | 1.29.0 | out of date |
haret-cli-client(2 total, 2 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| uuid | ^0.5 | 1.29.0 | out of date |
| lazy_static | ^0.1 | 1.5.1 | out of date |
haret-client(1 total, 1 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| protobuf ⚠️ | ^1.0.24 | 3.7.2 | insecure |
haret-devconfigNo external dependencies! 🙌
haret-server(5 total, 4 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| rabble | ^0.4 | 0.4.1 | up to date |
| slog | ^1 | 2.8.2 | out of date |
| slog-envlogger | ^0.5 | 2.2.0 | out of date |
| slog-stdlog | ^1 | 4.1.1 | out of date |
| slog-term | ^1.1 | 2.9.2 | out of date |
protobuf: Crash due to uncontrolled recursion in protobuf crateAffected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.