search

sfackler / rust-native-tls

Apache License 2.0
468 stars 197 forks source link

RUSTSEC-2023-0018 #252

Closed RockyGitHub closed 1 year ago

RockyGitHub commented 1 year ago

Cargo audit just recently came up with a new vulnerability, RUSTSEC-2023-0018.

Dependency tree:
remove_dir_all 0.5.3
└── tempfile 3.3.0
    └── native-tls 0.2.11

tempfile removes the dependency in 3.4.0, so it may be a simple update in dependency to fix this

sfackler commented 1 year ago

https://github.com/sfackler/rust-native-tls/issues/251 https://github.com/sfackler/rust-native-tls/pull/249 https://github.com/sfackler/rust-native-tls/pull/250