We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
I have checked that this issue has not already been reported.
I have confirmed this bug exists on the latest version of Polars.
lexical is an active dependency
No response
GHSA-c2hm-mjxv-89r4 https://rustsec.org/advisories/RUSTSEC-2023-0055.html
with the lexical maintainer even specifically calling out polars using lexical as one of his accomplishments: https://github.com/Alexhuszagh
replace lexical with an alternative crate/approach as detailed in the advisories
master
The text was updated successfully, but these errors were encountered:
Yes, we're already aware of this and in the process of moving away from lexical.
Sorry, something went wrong.
Relevant PR: #10655.
I'll close this as we're working on it and have the dependabot alert to track this.
No branches or pull requests
Checks
I have checked that this issue has not already been reported.
I have confirmed this bug exists on the latest version of Polars.
Reproducible example
lexical is an active dependency
Log output
No response
Issue description
GHSA-c2hm-mjxv-89r4
https://rustsec.org/advisories/RUSTSEC-2023-0055.html
with the lexical maintainer even specifically calling out polars using lexical as one of his accomplishments:
https://github.com/Alexhuszagh
Expected behavior
replace lexical with an alternative crate/approach as detailed in the advisories
Installed versions
master
The text was updated successfully, but these errors were encountered: