Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cargo audit give errors and warnings #21

Open
niczy opened this issue Jan 21, 2022 · 0 comments
Open

cargo audit give errors and warnings #21

niczy opened this issue Jan 21, 2022 · 0 comments

Comments

@niczy
Copy link
Collaborator

niczy commented Jan 21, 2022

Run "cargo audit" gives following errors:

Crate: brotli-sys
Version: 0.3.2
Title: Integer overflow in the bundled Brotli C library
Date: 2021-12-20
ID: RUSTSEC-2021-0131
URL: https://rustsec.org/advisories/RUSTSEC-2021-0131
Solution: No safe upgrade is available!
Dependency tree:
brotli-sys 0.3.2
└── brotli2 0.3.2
└── actix-http 3.0.0-beta.10
└── actix-web 4.0.0-beta.9
└── keyhouse 0.1.0

Crate: chrono
Version: 0.4.19
Title: Potential segfault in localtime_r invocations
Date: 2020-11-10
ID: RUSTSEC-2020-0159
URL: https://rustsec.org/advisories/RUSTSEC-2020-0159
Solution: No safe upgrade is available!
Dependency tree:
chrono 0.4.19
├── x509-parser 0.9.2
│ └── spire-workload 1.1.4
│ └── keyhouse 0.1.0
├── simple_asn1 0.4.1
│ └── jsonwebtoken 7.2.0
│ └── spire-workload 1.1.4
├── sentry-types 0.23.0
│ └── sentry-core 0.23.0
│ ├── sentry-panic 0.23.0
│ │ └── sentry 0.23.0
│ │ └── keyhouse 0.1.0
│ ├── sentry-contexts 0.23.0
│ │ └── sentry 0.23.0
│ ├── sentry-backtrace 0.23.0
│ │ ├── sentry-panic 0.23.0
│ │ └── sentry 0.23.0
│ └── sentry 0.23.0
└── sentry-core 0.23.0

Crate: time
Version: 0.1.43
Title: Potential segfault in the time crate
Date: 2020-11-18
ID: RUSTSEC-2020-0071
URL: https://rustsec.org/advisories/RUSTSEC-2020-0071
Solution: Upgrade to >=0.2.23
Dependency tree:
time 0.1.43

Crate: net2
Version: 0.2.37
Warning: unmaintained
Title: net2 crate has been deprecated; use socket2 instead
Date: 2020-05-01
ID: RUSTSEC-2020-0016
URL: https://rustsec.org/advisories/RUSTSEC-2020-0016
Dependency tree:
net2 0.2.37
├── miow 0.2.2
└── mio 0.6.23

Crate: stdweb
Version: 0.4.20
Warning: unmaintained
Title: stdweb is unmaintained
Date: 2020-05-04
ID: RUSTSEC-2020-0056
URL: https://rustsec.org/advisories/RUSTSEC-2020-0056
Dependency tree:
stdweb 0.4.20
└── time 0.2.27

Crate: sha2
Version: 0.9.8
Warning: yanked
Dependency tree:
sha2 0.9.8
└── keyhouse 0.1.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant