search

aurae-runtime / aurae

Distributed systems runtime daemon written in Rust.
https://aurae.io
Apache License 2.0
1.84k stars 89 forks source link

fix CVE RUSTSEC-2020-0071 #445

Closed voigt closed 1 year ago

voigt commented 1 year ago

The version of chrono used by auraed depends on a vulnerable version of time crate. Updating chrono should fix this CVE.

This blocks pipeline, see example.

dmah42 commented 1 year ago

i believe some of our dependencies might still have this dependency but hopefully this helps unblock us.