Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potential segfault in the time crate #558

Closed
s-tar opened this issue Aug 25, 2023 · 0 comments · Fixed by #559
Closed

Potential segfault in the time crate #558

s-tar opened this issue Aug 25, 2023 · 0 comments · Fixed by #559

Comments

@s-tar
Copy link

s-tar commented Aug 25, 2023

Hey!

We use goose in our project and during cargo deny check we found out that goose use chrono dependency, which has security vulnerability. Here is detailed description: https://rustsec.org/advisories/RUSTSEC-2020-0071

Solution is very simple:
Update dependency for chrono to next
chrono = { version = "0.4", default-features = false, features = ["clock"] }

Do you mind to do that? Thanks.

Regards, Sergii.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant