This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate sfu

Dependencies

(23 total, 13 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 retty^0.27.00.29.0out of date
 bytes^1.51.6.0up to date
 log^0.40.4.21up to date
 base64^0.220.22.1up to date
 serde^11.0.203up to date
 serde_json^11.0.117up to date
 rand^0.80.8.5up to date
 rcgen^0.120.13.1out of date
 ring^0.170.17.8up to date
 sha2^0.100.10.8up to date
 rustls ⚠️^0.210.23.9out of date
 url^22.5.1up to date
 hex^0.40.4.3up to date
 opentelemetry^0.22.00.23.0out of date
 rtc-shared^0.1.10.2.1out of date
 rtc-sdp^0.1.10.2.0out of date
 rtc-stun^0.1.10.2.0out of date
 rtc-rtp^0.10.2.0out of date
 rtc-rtcp^0.10.2.0out of date
 rtc-srtp^0.1.10.2.0out of date
 rtc-dtls^0.1.10.2.0out of date
 rtc-sctp^0.1.10.2.0out of date
 rtc-datachannel^0.10.2.0out of date

Dev dependencies

(21 total, 5 outdated)

CrateRequiredLatestStatus
 chrono^0.4.340.4.38up to date
 env_logger^0.110.11.3up to date
 clap^4.54.5.7up to date
 anyhow^11.0.86up to date
 rouille^3.63.6.2up to date
 systemstat^0.20.2.3up to date
 opentelemetry_sdk^0.22.10.23.0out of date
 opentelemetry-stdout^0.3.00.4.0out of date
 wg^0.70.9.1out of date
 crossbeam-channel^0.50.5.13up to date
 ctrlc^3.43.4.4up to date
 futures^0.30.3.30up to date
 smol^22.0.0up to date
 async-broadcast^0.70.7.1up to date
 waitgroup^0.10.1.2up to date
 core_affinity^0.80.8.1up to date
 num_cpus^1.161.16.0up to date
 tokio^1.361.38.0up to date
 tokio-util^0.70.7.11up to date
 webrtc^0.10.10.11.0out of date
 hyper^0.14.281.3.1out of date

Security Vulnerabilities

rustls: `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input

RUSTSEC-2024-0336

If a close_notify alert is received during a handshake, complete_io does not terminate.

Callers which do not call complete_io are not affected.

rustls-tokio and rustls-ffi do not call complete_io and are not affected.

rustls::Stream and rustls::StreamOwned types use complete_io and are affected.