This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate mxl-player-components

Dependencies

(18 total, 2 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 log^0.40.4.22up to date
 anyhow^11.0.94up to date
 const_format^0.20.2.34up to date
 once_cell^11.20.2up to date
 termtree^0.50.5.1up to date
 chrono ⚠️^0.40.4.39maybe insecure
 notify^77.0.0up to date
 notify-debouncer-mini^0.40.5.0out of date
 gstreamer^0.230.23.4up to date
 gstreamer-pbutils^0.230.23.4up to date
 gstreamer-play^0.230.23.4up to date
 gstreamer-video^0.230.23.4up to date
 gstreamer-tag^0.230.23.4up to date
 gst-plugin-gtk4=0.13.10.13.3out of date
 relm4-icons^0.90.9.0up to date
 i18n-embed-fl^0.90.9.2up to date
 rust-embed^88.5.0up to date
 i18n-embed^0.150.15.2up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 tempfile^33.14.0up to date
 env_logger^0.110.11.6up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References