kyren / hashlink

An updated version of linked-hash-map and friends
Apache License 2.0
98 stars 18 forks source link

Bump hashbrown dependency to fix downstream vulnerability in zerocopy #26

Closed singe closed 5 months ago

singe commented 6 months ago

hashlink depends on hashbrown depends on ahash depends on zerocopy

There's a vulnerability in zerocopy below 0.7.31 https://github.com/advisories/GHSA-rjhf-4mh8-9xjq

ahash has bumped their version, as has hashbrown. This will fix the vulnerability.