-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Closed
Description
With the following setup in Cargo.toml, there is an indirect dependency on net2, which is deprecated as per: https://rustsec.org/advisories/RUSTSEC-2020-0016
[dependencies]
hyper = "0.13.9"
More information:
$ cargo audit
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 146 security advisories (from [...]/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (58 crate dependencies)
Crate: net2
Version: 0.2.35
Warning: unmaintained
Title: `net2` crate has been deprecated; use `socket2` instead
Date: 2020-05-01
ID: RUSTSEC-2020-0016
URL: https://rustsec.org/advisories/RUSTSEC-2020-0016
Dependency tree:
net2 0.2.35
├── miow 0.2.1
│ └── mio 0.6.22
│ └── tokio 0.2.22
│ ├── tokio-util 0.3.1
│ │ └── h2 0.2.7
│ │ └── hyper 0.13.9
│ ├── hyper 0.13.9
│ └── h2 0.2.7
└── mio 0.6.22
warning: 1 allowed warning found
Metadata
Metadata
Assignees
Labels
No labels