Handle insecure chat messages (#17) #161
Security advisories found
1 advisory(ies), 1 unmaintained, 1 other
Details
Vulnerabilities
RUSTSEC-2023-0065
Tungstenite allows remote attackers to cause a denial of service
| Details | |
|---|---|
| Package | tungstenite |
| Version | 0.18.0 |
| URL | snapview/tungstenite-rs#376 |
| Date | 2023-09-25 |
| Patched versions | >=0.20.1 |
The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause
a denial of service (minutes of CPU consumption) via an excessive length of an
HTTP header in a client handshake. The length affects both how many times a parse
is attempted (e.g., thousands of times) and the average amount of data for each
parse attempt (e.g., millions of bytes).
Warnings
RUSTSEC-2021-0139
ansi_term is Unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | ansi_term |
| Version | 0.12.1 |
| URL | ogham/rust-ansi-term#72 |
| Date | 2021-08-18 |
The maintainer has advised that this crate is deprecated and will not receive any maintenance.
The crate does not seem to have much dependencies and may or may not be ok to use as-is.
Last release seems to have been three years ago.
Possible Alternative(s)
The below list has not been vetted in any way and may or may not contain alternatives;