tag1consulting / goose

Load testing framework, inspired by Locust
https://tag1.com/goose
Apache License 2.0
813 stars 71 forks source link

Potential segfault in the time crate #558

Closed s-tar closed 1 year ago

s-tar commented 1 year ago

Hey!

We use goose in our project and during cargo deny check we found out that goose use chrono dependency, which has security vulnerability. Here is detailed description: https://rustsec.org/advisories/RUSTSEC-2020-0071

Solution is very simple: Update dependency for chrono to next chrono = { version = "0.4", default-features = false, features = ["clock"] }

Do you mind to do that? Thanks.

Regards, Sergii.