[Apiiro] SCA OSS Vulnerabilities - Critical CVSS score · Critical Risk

[urikalma]

Discovered on: Mar 18, 2024 06:57
Dependency: crossbeam-deque
Version: 0.7.3
Type: Sub dependency

Vulnerabilities

• Alignment Issue in crossbeam-utils Prior to Version 0.8.7 with CVSS score 8.1. fixed version: 0.8.7
• crossbeam-deque Data Race before v0.7.4 and v0.8.1 with CVSS score 9.8. fixed version: 0.7.4

About this package:

External dependency: crossbeam-deque - https://github.com/crossbeam-rs/crossbeam/tree/master/crossbeam-deque
Package details: Concurrent work-stealing deque
Latest version: 0.8.5
License: MIT,Apache-2.0
Insights:

• Adequate count maintainers - This package is maintained by at least 3 developers
• No readme - This package is missing documentation: No README.md or INDEX.md files were found
• Frequent commits - New code commits are frequently being pushed
• No version 1 - The package releases hasn't reached v1
• Popularity - This package has many weekly downloads and high popularity scores
• Has vulnerabilities - One or more vulnerabilities have been reported for this package

Remediation

Recommended fix version: 0.7.4
Upgrading will fix all current vulnerabilities.

View in Apiiro