We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
polars
As of dd2d8817b4c6eed2d4fb763a543934c1632dcd92, there are multiple security advisories affecting the the codebase. Specifically,
dd2d8817b4c6eed2d4fb763a543934c1632dcd92
Output of cargo-audit follows:
cargo-audit
$ git rev-parse HEAD dd2d8817b4c6eed2d4fb763a543934c1632dcd92 $ cargo audit Crate: mio Version: 0.8.8 Title: Tokens for named pipes may be delivered after deregistration Date: 2024-03-04 ID: RUSTSEC-2024-0019 URL: https://rustsec.org/advisories/RUSTSEC-2024-0019 Solution: Upgrade to >=0.8.11 Dependency tree: mio 0.8.8 ├── tokio 1.32.0 │ └── polars-io 0.32.1 │ ├── polars-plan 0.32.1 │ │ ├── polars-sql 0.32.1 │ │ │ └── polars 0.32.1 │ │ │ └── mempool-dumpster 0.1.1 │ │ ├── polars-pipe 0.32.1 │ │ │ └── polars-lazy 0.32.1 │ │ │ ├── polars-sql 0.32.1 │ │ │ └── polars 0.32.1 │ │ └── polars-lazy 0.32.1 │ ├── polars-pipe 0.32.1 │ ├── polars-lazy 0.32.1 │ └── polars 0.32.1 ├── signal-hook-mio 0.2.3 │ └── crossterm 0.26.1 │ └── comfy-table 7.0.1 │ └── polars-core 0.32.1 │ ├── polars-time 0.32.1 │ │ ├── polars-plan 0.32.1 │ │ ├── polars-lazy 0.32.1 │ │ ├── polars-io 0.32.1 │ │ └── polars 0.32.1 │ ├── polars-sql 0.32.1 │ ├── polars-plan 0.32.1 │ ├── polars-pipe 0.32.1 │ ├── polars-ops 0.32.1 │ │ ├── polars-time 0.32.1 │ │ ├── polars-plan 0.32.1 │ │ ├── polars-pipe 0.32.1 │ │ ├── polars-lazy 0.32.1 │ │ └── polars 0.32.1 │ ├── polars-lazy 0.32.1 │ ├── polars-io 0.32.1 │ └── polars 0.32.1 └── crossterm 0.26.1 Crate: rustls Version: 0.21.7 Title: `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input Date: 2024-04-19 ID: RUSTSEC-2024-0336 URL: https://rustsec.org/advisories/RUSTSEC-2024-0336 Severity: 7.5 (high) Solution: Upgrade to >=0.23.5 OR >=0.22.4, <0.23.0 OR >=0.21.11, <0.22.0 Dependency tree: rustls 0.21.7 └── ureq 2.7.1 └── mempool-dumpster 0.1.1 Crate: lexical Version: 6.1.1 Warning: unsound Title: Multiple soundness issues Date: 2023-09-03 ID: RUSTSEC-2023-0055 URL: https://rustsec.org/advisories/RUSTSEC-2023-0055 Dependency tree: lexical 6.1.1 └── polars-io 0.32.1 ├── polars-plan 0.32.1 │ ├── polars-sql 0.32.1 │ │ └── polars 0.32.1 │ │ └── mempool-dumpster 0.1.1 │ ├── polars-pipe 0.32.1 │ │ └── polars-lazy 0.32.1 │ │ ├── polars-sql 0.32.1 │ │ └── polars 0.32.1 │ └── polars-lazy 0.32.1 ├── polars-pipe 0.32.1 ├── polars-lazy 0.32.1 └── polars 0.32.1 Crate: ahash Version: 0.8.3 Warning: yanked Dependency tree: ahash 0.8.3 ├── scraper 0.17.1 │ └── mempool-dumpster 0.1.1 ├── polars-utils 0.32.1 │ ├── polars-time 0.32.1 │ │ ├── polars-plan 0.32.1 │ │ │ ├── polars-sql 0.32.1 │ │ │ │ └── polars 0.32.1 │ │ │ │ └── mempool-dumpster 0.1.1 │ │ │ ├── polars-pipe 0.32.1 │ │ │ │ └── polars-lazy 0.32.1 │ │ │ │ ├── polars-sql 0.32.1 │ │ │ │ └── polars 0.32.1 │ │ │ └── polars-lazy 0.32.1 │ │ ├── polars-lazy 0.32.1 │ │ ├── polars-io 0.32.1 │ │ │ ├── polars-plan 0.32.1 │ │ │ ├── polars-pipe 0.32.1 │ │ │ ├── polars-lazy 0.32.1 │ │ │ └── polars 0.32.1 │ │ └── polars 0.32.1 │ ├── polars-row 0.32.1 │ │ ├── polars-pipe 0.32.1 │ │ └── polars-core 0.32.1 │ │ ├── polars-time 0.32.1 │ │ ├── polars-sql 0.32.1 │ │ ├── polars-plan 0.32.1 │ │ ├── polars-pipe 0.32.1 │ │ ├── polars-ops 0.32.1 │ │ │ ├── polars-time 0.32.1 │ │ │ ├── polars-plan 0.32.1 │ │ │ ├── polars-pipe 0.32.1 │ │ │ ├── polars-lazy 0.32.1 │ │ │ └── polars 0.32.1 │ │ ├── polars-lazy 0.32.1 │ │ ├── polars-io 0.32.1 │ │ └── polars 0.32.1 │ ├── polars-plan 0.32.1 │ ├── polars-pipe 0.32.1 │ ├── polars-ops 0.32.1 │ ├── polars-lazy 0.32.1 │ ├── polars-io 0.32.1 │ └── polars-core 0.32.1 ├── polars-plan 0.32.1 ├── polars-lazy 0.32.1 ├── polars-io 0.32.1 ├── polars-core 0.32.1 ├── hashbrown 0.14.0 │ ├── polars-utils 0.32.1 │ ├── polars-pipe 0.32.1 │ ├── polars-core 0.32.1 │ ├── polars-arrow 0.32.1 │ │ ├── polars-time 0.32.1 │ │ ├── polars-sql 0.32.1 │ │ ├── polars-plan 0.32.1 │ │ ├── polars-pipe 0.32.1 │ │ ├── polars-ops 0.32.1 │ │ ├── polars-lazy 0.32.1 │ │ ├── polars-io 0.32.1 │ │ └── polars-core 0.32.1 │ └── indexmap 2.0.0 │ ├── polars-ops 0.32.1 │ └── polars-core 0.32.1 └── arrow2 0.17.4 ├── polars-time 0.32.1 ├── polars-row 0.32.1 ├── polars-plan 0.32.1 ├── polars-ops 0.32.1 ├── polars-io 0.32.1 ├── polars-error 0.32.1 │ ├── polars-utils 0.32.1 │ ├── polars-row 0.32.1 │ ├── polars-io 0.32.1 │ ├── polars-core 0.32.1 │ └── polars-arrow 0.32.1 ├── polars-core 0.32.1 └── polars-arrow 0.32.1 error: 2 vulnerabilities found! warning: 2 allowed warnings found
The text was updated successfully, but these errors were encountered:
Successfully merging a pull request may close this issue.
As of
dd2d8817b4c6eed2d4fb763a543934c1632dcd92
, there are multiple security advisories affecting the the codebase. Specifically,Output of
cargo-audit
follows:The text was updated successfully, but these errors were encountered: