This project might be open to known security vulnerabilities , which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom .
Crate rudof_generate Dependencies (1 total, 1 possibly insecure)
Crate Required Latest Status tokio ⚠️ ^1.01.48.0maybe insecure
Crate dctap No external dependencies! 🙌
Crate iri_s Dependencies (1 total, all up-to-date)
Crate Required Latest Status reqwest ^0.120.12.24up to date
Crate mie No external dependencies! 🙌
Crate pgschema Dependencies (11 total, all up-to-date)
Dev dependencies (2 total, all up-to-date)
Build dependencies (1 total, all up-to-date)
Crate prefixmap No external dependencies! 🙌
Crate pyrudof Dependencies (3 total, 2 outdated, 1 possibly insecure)
Crate Required Latest Status pyo3 ^0.260.27.1out of date pythonize ^0.26.00.27.0out of date tokio ⚠️ ^1.01.48.0maybe insecure
Crate rbe No external dependencies! 🙌
Crate rbe_testsuite Dev dependencies (2 total, all up-to-date)
Crate rdf_config No external dependencies! 🙌
Crate rudof_cli No external dependencies! 🙌
Crate rudof_lib Dependencies (2 total, 1 outdated)
Crate Required Latest Status thiserror ^2.02.0.17up to date toml ^0.80.9.8out of date
Crate rudof_mcp Dependencies (12 total, 2 outdated)
Crate shacl_ast Dependencies (3 total, all up-to-date)
Crate shacl_ir No external dependencies! 🙌
Crate shacl_rdf No external dependencies! 🙌
Crate shacl_validation Dev dependencies (1 total, all up-to-date)
Crate shapes_comparator No external dependencies! 🙌
Crate shapes_converter Dependencies (4 total, 1 outdated)
Crate Required Latest Status chrono ^0.4.420.4.42up to date minijinja ^2.12.02.12.0up to date thiserror ^2.02.0.17up to date toml ^0.80.9.8out of date
Crate shex_ast No external dependencies! 🙌
Crate shex_testsuite Dependencies (3 total, 1 outdated)
Crate Required Latest Status anyhow ^1.01.0.100up to date thiserror ^2.02.0.17up to date toml ^0.80.9.8out of date
Crate shex_validation No external dependencies! 🙌
Crate sparql_service Dependencies (2 total, all up-to-date)
Crate srdf Dev dependencies (1 total, all up-to-date)
Crate Required Latest Status tokio ^1.471.48.0up to date
Security Vulnerabilities tokio: reject_remote_clients Configuration corruptionRUSTSEC-2023-0001
On Windows, configuring a named pipe server with pipe_mode will force ServerOptions ::reject_remote_clients as false.
This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.
The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.
Workarounds
Ensure that pipe_mode is set first after initializing a ServerOptions . For example:
let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);
Patched
>=1.18.4, <1.19.0
>=1.20.3, <1.21.0
>=1.23.1
