Skip to content

Conversation

sjlangley
Copy link
Contributor

idna versions less than version 1.0.3 are impacted by RUSTSEC-2024-0421. Uprevving url to a version
greater than 2.5.4 will use a version of idna that is not impacted by this vulnerability.

TEST=cargo test

Fixes: #460

idna versions less than version 1.0.3 are impacted
by RUSTSEC-2024-0421. Uprevving url to a version
greater than 2.5.4 will use a version of idna that
is not impacted by this vulnerability.

TEST=cargo test
@sjlangley sjlangley changed the title deps: bump url from 2.1 to 2.5 fix: bump url from 2.1 to 2.5 Dec 10, 2024
@brainstorm brainstorm self-requested a review February 19, 2025 08:53
@coveralls
Copy link

coveralls commented Feb 19, 2025

Pull Request Test Coverage Report for Build 13408739486

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 83.605%

Totals Coverage Status
Change from base Build 13408729066: 0.0%
Covered Lines: 2723
Relevant Lines: 3257

💛 - Coveralls

@brainstorm brainstorm merged commit aa93eaf into rust-bio:master Feb 19, 2025
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[deps] idna currently used is impacted by RUSTSEC-2024-0421
3 participants