jedireza / warc

:gear: A Rust library for reading and writing WARC files
https://docs.rs/warc/
MIT License
44 stars 12 forks source link

Update nom dependency (security) #40

Open sjourdois opened 3 weeks ago

sjourdois commented 3 weeks ago

Hi,

Please update nom to v7.x nom v5.x depends on vulnerable lexical-core, which is vulnerable (RUSTSEC-2024-0377). nom 7.x doesn't depend on lexical-core anymore, which fixes this vulnerability.

Thanks for this crate, btw!

ahartel commented 2 weeks ago

I prepared #41. Would be happy if someone could take a look