We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The package name http is matching several CVEs belonging to other ecosystems. Aliasing must be tuned down for cargo packages.
Dependency Scan Results (RUST) ╔════════════════════════════════════════════════════════════════╤════════════════════════════════════╤════════════════════╤═══════════════╤═════════╗ ║ Dependency Tree │ Insights │ Fix Version │ Severity │ Score ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 4.3.6 │ MEDIUM │ 5.0 ║ ║ └── [email protected] │ 🧾 Vendor Confirmed │ │ │ ║ ║ └── [email protected] ⬅ CVE-2015-5262 │ │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 0.3.19 │ MEDIUM │ 5.8 ║ ║ └── [email protected] │ │ │ │ ║ ║ └── [email protected] ⬅ GHSA-j2wh-wrv3-4x4g │ │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 1.21.9 │ MEDIUM │ 5.0 ║ ║ └── [email protected] │ │ │ │ ║ ║ └── [email protected] ⬅ CVE-2023-45288 │ │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 0.18.26 │ HIGH │ 7.6 ║ ║ └── [email protected] │ │ │ │ ║ ║ └── [email protected] ⬅ CVE-2020-5280 │ │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 4.3.5 │ MEDIUM │ 5.0 ║ ║ └── [email protected] │ 🧾 Vendor Confirmed │ │ │ ║ ║ └── [email protected] ⬅ CVE-2014-3577 │ ❗ Known Exploits │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 4.2.3 │ HIGH │ 7.5 ║ ║ └── [email protected] │ 🧾 Vendor Confirmed │ │ │ ║ ║ └── [email protected] ⬅ CVE-2012-6153 │ │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 4.5.13 │ MEDIUM │ 5.3 ║ ║ └── [email protected] │ 🧾 Vendor Confirmed │ │ │ ║ ║ └── [email protected] ⬅ CVE-2020-13956 │ │ │ │ ║ ╟────────────────────────────────────────────────────────────────┼────────────────────────────────────┼────────────────────┼───────────────┼─────────╢ ║ [email protected] │ 📓 Indirect dependency │ 0.21.17 │ HIGH │ 7.5 ║ ║ └── [email protected] │ │ │ │ ║ ║ └── [email protected] ⬅ CVE-2021-21294 │ │ │ │ ║ ╚════════════════════════════════════════════════════════════════╧════════════════════════════════════╧════════════════════╧═══════════════╧═════════╝
The text was updated successfully, but these errors were encountered:
No branches or pull requests
The package name http is matching several CVEs belonging to other ecosystems. Aliasing must be tuned down for cargo packages.
The text was updated successfully, but these errors were encountered: