This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate veloren-common

Dependencies

(5 total, 1 outdated)

CrateRequiredLatestStatus
 serde^1.0.1101.0.130up to date
 enum-iterator^0.70.7.0up to date
 vek=0.14.10.15.3out of date
 strum^0.230.23.0up to date
 strum_macros^0.230.23.1up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.30.3.5up to date
 tracing-subscriber^0.3.20.3.3up to date

Crate veloren-common-assets

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 lazy_static^1.4.01.4.0up to date
 assets_manager^0.6.00.6.1up to date
 ron^0.70.7.0up to date
 dot_vox^4.04.1.0up to date
 image^0.23.120.23.14up to date
 tracing^0.10.1.29up to date
 serde^1.01.0.130up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 walkdir^2.3.22.3.2up to date

Crate veloren-common-base

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 tracing^0.10.1.29up to date
 directories-next^2.02.0.0up to date
 tracy-client^0.12.00.12.6up to date

Crate veloren-common-ecs

Dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 tracing^0.10.1.29up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 float-cmp^0.9.00.9.0up to date

Crate veloren-common-net

Dependencies

(9 total, 1 outdated)

CrateRequiredLatestStatus
 bincode^1.3.31.3.3up to date
 flate2^1.0.201.0.22up to date
 image^0.23.120.23.14up to date
 num-traits^0.20.2.14up to date
 sum_type^0.2.00.2.0up to date
 vek=0.14.10.15.3out of date
 tracing^0.10.1.29up to date
 hashbrown^0.110.11.2up to date
 serde^1.0.1101.0.130up to date

Crate veloren-common-state

Dependencies

(11 total, 1 outdated)

CrateRequiredLatestStatus
 rayon^1.51.5.1up to date
 num_cpus^1.01.13.0up to date
 tracing^0.10.1.29up to date
 vek=0.14.10.15.3out of date
 hashbrown^0.110.11.2up to date
 scopeguard^1.1.01.1.0up to date
 serde^1.0.1101.0.130up to date
 toml^0.5.70.5.8up to date
 tar^0.4.370.4.37up to date
 wasmer^2.0.02.1.0up to date
 bincode^1.3.11.3.3up to date

Crate veloren-common-systems

Dependencies

(8 total, 1 outdated)

CrateRequiredLatestStatus
 rand^0.80.8.4up to date
 rayon^1.51.5.1up to date
 tracing^0.10.1.29up to date
 vek=0.14.10.15.3out of date
 ordered-float^2.0.12.8.0up to date
 hashbrown^0.110.11.2up to date
 indexmap^1.3.01.7.0up to date
 slab^0.4.20.4.5up to date

Crate veloren-common-frontend

Dependencies

(6 total, all up-to-date)

CrateRequiredLatestStatus
 termcolor^1.11.1.2up to date
 tracing^0.10.1.29up to date
 tracing-appender^0.2.00.2.0up to date
 tracing-log^0.1.10.1.2up to date
 tracing-subscriber^0.3.20.3.3up to date
 tracing-tracy^0.8.00.8.0up to date

Crate veloren-client

Dependencies

(15 total, 1 outdated)

CrateRequiredLatestStatus
 byteorder^1.3.21.4.3up to date
 tokio^1.141.14.0up to date
 quinn^0.80.8.0up to date
 image^0.23.120.23.14up to date
 num^0.40.4.0up to date
 tracing^0.10.1.29up to date
 rayon^1.51.5.1up to date
 vek=0.14.10.15.3out of date
 hashbrown^0.110.11.2up to date
 async-channel^1.61.6.1up to date
 serde^1.01.0.130up to date
 ron^0.70.7.0up to date
 clap^2.332.34.0up to date
 rustyline^9.0.09.1.0up to date
 termcolor^1.11.1.2up to date

Crate veloren-plugin-api

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 serde^1.0.1181.0.130up to date
 bincode^1.3.11.3.3up to date

Crate veloren-plugin-derive

Dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 proc-macro2^1.0.241.0.32up to date
 syn^1.0.541.0.82up to date
 quote^1.0.71.0.10up to date

Crate veloren-plugin-rt

Dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 serde^1.0.1181.0.130up to date
 bincode^1.3.11.3.3up to date

Crate veloren-server

Dependencies

(27 total, 3 outdated, 1 insecure)

CrateRequiredLatestStatus
 strum^0.230.23.0up to date
 bincode^1.3.21.3.3up to date
 num_cpus^1.01.13.0up to date
 tracing^0.10.1.29up to date
 vek^0.14.10.15.3out of date
 futures-util^0.3.70.3.18up to date
 tokio^1.141.14.0up to date
 prometheus-hyper^0.1.20.1.3up to date
 quinn^0.80.8.0up to date
 rustls^0.200.20.2up to date
 rustls-pemfile^0.2.10.2.1up to date
 atomicwrites^0.3.00.3.0up to date
 chrono ⚠️^0.4.190.4.19insecure
 humantime^2.1.02.1.0up to date
 itertools^0.100.10.1up to date
 lazy_static^1.4.01.4.0up to date
 ron^0.70.7.0up to date
 serde^1.0.1101.0.130up to date
 serde_json^1.0.501.0.72up to date
 rand^0.80.8.4up to date
 hashbrown^0.110.11.2up to date
 rayon^1.51.5.1up to date
 crossbeam-channel^0.50.5.1up to date
 prometheus^0.120.13.0out of date
 slab^0.40.4.5up to date
 rand_distr^0.4.00.4.2up to date
 rusqlite^0.24.20.26.1out of date

Crate veloren-server-cli

Dependencies

(12 total, all up-to-date)

CrateRequiredLatestStatus
 tokio^1.141.14.0up to date
 num_cpus^1.01.13.0up to date
 ansi-parser^0.80.8.0up to date
 clap^2.332.34.0up to date
 structopt^0.3.130.3.25up to date
 crossterm^0.220.22.1up to date
 lazy_static^11.4.0up to date
 signal-hook^0.3.60.3.10up to date
 shell-words^1.0.01.0.0up to date
 tracing^0.10.1.29up to date
 ron^0.70.7.0up to date
 serde^1.01.0.130up to date

Crate veloren-voxygen

Dependencies

(45 total, 9 outdated, 1 insecure)

CrateRequiredLatestStatus
 winit^0.25.00.26.0out of date
 wgpu=0.8.00.11.1out of date
 bytemuck^1.41.7.2up to date
 shaderc^0.6.20.7.3out of date
 cmake=0.1.450.1.46out of date
 euc^0.5.00.5.3up to date
 window_clipboard^0.20.2.1up to date
 glyph_brush^0.7.00.7.3up to date
 egui^0.120.15.0out of date
 egui_winit_platform^0.80.12.0out of date
 vek=0.14.10.15.3out of date
 gilrs^0.8.00.8.1up to date
 backtrace^0.3.400.3.63up to date
 bincode^1.3.11.3.3up to date
 chrono ⚠️^0.4.190.4.19insecure
 chumsky^0.3.20.6.0out of date
 cpal^0.130.13.4up to date
 copy_dir^0.1.20.1.2up to date
 crossbeam-utils^0.8.10.8.5up to date
 crossbeam-channel^0.50.5.1up to date
 directories-next^2.02.0.0up to date
 dot_vox^4.04.1.0up to date
 enum-iterator^0.70.7.0up to date
 guillotiere^0.60.6.2up to date
 hashbrown^0.110.11.2up to date
 image^0.23.120.23.14up to date
 lazy_static^1.4.01.4.0up to date
 native-dialog^0.5.20.6.1out of date
 num^0.40.4.0up to date
 ordered-float^2.0.12.8.0up to date
 rand^0.80.8.4up to date
 rand_chacha^0.30.3.1up to date
 rayon^1.51.5.1up to date
 rodio^0.140.14.0up to date
 ron^0.70.7.0up to date
 serde^1.01.0.130up to date
 slab^0.4.20.4.5up to date
 strum^0.230.23.0up to date
 strum_macros^0.230.23.1up to date
 treeculler^0.20.2.0up to date
 tokio^1.141.14.0up to date
 num_cpus^1.01.13.0up to date
 itertools^0.10.00.10.1up to date
 tracing^0.10.1.29up to date
 profiling^1.0.11.0.4up to date

Dev dependencies

(2 total, all up-to-date)

CrateRequiredLatestStatus
 criterion^0.30.3.5up to date
 rayon^1.5.01.5.1up to date

Crate veloren-voxygen-anim

Dependencies

(3 total, 1 outdated)

CrateRequiredLatestStatus
 bytemuck^1.41.7.2up to date
 vek=0.14.10.15.3out of date
 lazy_static^1.4.01.4.0up to date

Crate veloren-voxygen-anim-dyn

No external dependencies! 🙌

Crate veloren-voxygen-i18n

Dependencies

(7 total, all up-to-date)

CrateRequiredLatestStatus
 hashbrown^0.110.11.2up to date
 deunicode^1.01.3.1up to date
 serde^1.01.0.130up to date
 tracing^0.10.1.29up to date
 ron^0.70.7.0up to date
 git2^0.130.13.25up to date
 clap^2.332.34.0up to date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 git2^0.130.13.25up to date

Crate veloren-voxygen-dynlib

Dependencies

(4 total, all up-to-date)

CrateRequiredLatestStatus
 find_folder^0.3.00.3.0up to date
 libloading^0.70.7.2up to date
 notify^5.0.0-pre.134.0.17up to date
 tracing^0.10.1.29up to date

Crate veloren-voxygen-egui

Dependencies

(3 total, 2 outdated)

CrateRequiredLatestStatus
 egui^0.120.15.0out of date
 egui_winit_platform^0.80.12.0out of date
 lazy_static^1.4.01.4.0up to date

Crate veloren-voxygen-egui-dyn

No external dependencies! 🙌

Crate veloren-world

Dependencies

(28 total, 1 outdated)

CrateRequiredLatestStatus
 bincode^1.3.11.3.3up to date
 bitvec^0.220.22.3up to date
 enum-iterator^0.70.7.0up to date
 fxhash^0.2.10.2.1up to date
 image^0.23.120.23.14up to date
 itertools^0.100.10.1up to date
 vek^0.14.10.15.3out of date
 noise^0.70.7.0up to date
 num^0.40.4.0up to date
 ordered-float^2.0.12.8.0up to date
 hashbrown^0.110.11.2up to date
 lazy_static^1.4.01.4.0up to date
 tracing^0.10.1.29up to date
 rand^0.80.8.4up to date
 rand_chacha^0.30.3.1up to date
 arr_macro^0.1.20.1.3up to date
 packed_simd_2^0.3.50.3.6up to date
 rayon^1.51.5.1up to date
 serde^1.0.1101.0.130up to date
 ron^0.70.7.0up to date
 lz-fear^0.1.10.1.1up to date
 deflate^1.0.01.0.0up to date
 flate2^1.0.201.0.22up to date
 num-traits^0.20.2.14up to date
 fallible-iterator^0.2.00.2.0up to date
 kiddo^0.2.10.2.1up to date
 rstar^0.90.9.2up to date
 clap^2.33.32.34.0up to date

Dev dependencies

(8 total, 2 outdated)

CrateRequiredLatestStatus
 criterion^0.30.3.5up to date
 csv^1.1.31.1.6up to date
 tracing-subscriber^0.3.20.3.3up to date
 minifb^0.19.10.20.0out of date
 rusqlite^0.24.20.26.1out of date
 svg_fmt^0.40.4.1up to date
 structopt^0.30.3.25up to date
 strum^0.230.23.0up to date

Crate veloren-network

Dependencies

(19 total, 1 outdated)

CrateRequiredLatestStatus
 bincode^1.3.21.3.3up to date
 serde^1.01.0.130up to date
 crossbeam-channel^0.50.5.1up to date
 tokio^1.141.14.0up to date
 tokio-stream^0.1.20.1.8up to date
 tracing^0.10.1.29up to date
 prometheus^0.120.13.0out of date
 futures-core^0.30.3.18up to date
 futures-util^0.3.70.3.18up to date
 async-channel^1.5.11.6.1up to date
 lazy_static^1.41.4.0up to date
 rand^0.80.8.4up to date
 quinn^0.80.8.0up to date
 rustls^0.20.10.20.2up to date
 bitflags^1.2.11.3.2up to date
 lz-fear^0.1.10.1.1up to date
 async-trait^0.1.420.1.51up to date
 bytes^11.1.0up to date
 hashbrown>=0.9, <0.120.11.2up to date

Dev dependencies

(9 total, all up-to-date)

CrateRequiredLatestStatus
 tracing-subscriber^0.3.20.3.3up to date
 tokio^1.141.14.0up to date
 futures-util^0.3.70.3.18up to date
 clap^2.332.34.0up to date
 shellexpand^2.0.02.1.0up to date
 serde^1.01.0.130up to date
 prometheus-hyper^0.1.20.1.3up to date
 criterion^0.3.40.3.5up to date
 rcgen^0.8.100.8.14up to date

Crate veloren-network-protocol

Dependencies

(7 total, 1 outdated)

CrateRequiredLatestStatus
 tracing^0.10.1.29up to date
 prometheus^0.120.13.0out of date
 bitflags^1.2.11.3.2up to date
 rand^0.80.8.4up to date
 async-trait^0.1.420.1.51up to date
 bytes^11.1.0up to date
 hashbrown>=0.9, <0.120.11.2up to date

Dev dependencies

(3 total, all up-to-date)

CrateRequiredLatestStatus
 async-channel^1.5.11.6.1up to date
 tokio^1.141.14.0up to date
 criterion^0.3.40.3.5up to date

Security Vulnerabilities

chrono: Potential segfault in `localtime_r` invocations

RUSTSEC-2020-0159

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References