search

databricks / click

The "Command Line Interactive Controller for Kubernetes"
Apache License 2.0
1.49k stars 84 forks source link

Bump untrusted for security #66

Closed tirkarthi closed 5 years ago

tirkarthi commented 6 years ago

Hi,

This project seems to use untrusted ^0.5 (0.5.1) as I can see from the cargo.toml file on master branch. Recently a security issue was fixed as part of 0.6.2 release. Please refer to https://github.com/RustSec/advisory-db/commit/3c0458d26bd19e30dc19ae5ca9a4540cc9c0394b . You can also consider adding cargo audit as part of the build step to get notified in the future.

Kindly ignore if this is irrelevant or fixed on another branch.

Thanks.

nicklan commented 5 years ago

Thanks for the report!

Fixed in #85