Your dependencies cross-checked against the OSV vulnerability database.
-
Worth fixing GHSA-7f6x-jwh5-m9r4 Cranelift vulnerable to miscompilation of constant values in division on AArch64
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2022-23636). Fix: Update that package to its patched version.
-
Worth fixing GHSA-jqwc-c49r-4w2x Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2022-31104). Fix: Update that package to its patched version.
-
Worth fixing RUSTSEC-2024-0421 `idna` accepts Punycode labels that do not produce any non-ASCII when decoded
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2024-12224). Fix: Update that package to its patched version.
-
Worth fixing RUSTSEC-2022-0013 Regexes with large repetitions on empty sub-expressions take a very long time to parse
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2022-24713). Fix: Update that package to its patched version.
-
Worth fixing RUSTSEC-2020-0071 Potential segfault in the time crate
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2020-26235). Fix: Update that package to its patched version.
-
Minor RUSTSEC-2025-0055 Logging user input may result in poisoning logs with ANSI escape sequences
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2025-58160). Fix: Update that package to its patched version.
-
Minor GHSA-55f3-3qvg-8pv5 Symlink bypasses filesystem sandbox
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole (CVE-2024-38358). Fix: Update that package to its patched version.
-
FYI RUSTSEC-2025-0056 adler crate is unmaintained, use adler2 instead
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2021-0139 ansi_term is Unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2026-0190 Unsoundness in `Error::downcast_mut()`
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2021-0145 Potential unaligned read
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2024-0375 `atty` is unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2022-0078 Use-after-free due to a lifetime error in `Vec::into_iter()`
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2020-0159 Potential segfault in `localtime_r` invocations
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2026-0204 Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2020-0095 difference is unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2024-0014 `generational-arena` is unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2024-0384 `instant` is unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2023-0055 Multiple soundness issues
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2023-0086 Multiple soundness issues
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2020-0168 mach is unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2026-0186 Unchecked pointer offset in crate `memmap2`
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2022-0040 Multiple soundness issues in `owning_ref`
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2024-0370 proc-macro-error is unmaintained
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.
-
FYI RUSTSEC-2026-0097 Rand is unsound with a custom logger using `rand::rng()`
/workdirs/scan-b3238a33-ebd2-4401-aefd-b05e77c03c3a/Cargo.lock
A package you depend on has a known security hole. Fix: Update that package to its patched version.