tag1consulting / goose

Load testing framework, inspired by Locust
https://tag1.com/goose
Apache License 2.0
737 stars 67 forks source link

Potential segfault in the time crate #558

Closed s-tar closed 10 months ago

s-tar commented 10 months ago

Hey!

We use goose in our project and during cargo deny check we found out that goose use chrono dependency, which has security vulnerability. Here is detailed description: https://rustsec.org/advisories/RUSTSEC-2020-0071

Solution is very simple: Update dependency for chrono to next chrono = { version = "0.4", default-features = false, features = ["clock"] }

Do you mind to do that? Thanks.

Regards, Sergii.