[Apiiro] SCA OSS Vulnerabilities - Critical CVSS score · Critical Risk

[haimlebo]

damn

Discovered on: Jun 29, 2023 12:52
Dependency: crossbeam-deque
Version: 0.7.3
Type: Sub dependency

Vulnerabilities

• CVE-2022-23639 with CVSS score 8.1. fixed version: 0.8.7
• crossbeam-deque Data Race before v0.7.4 and v0.8.1 with CVSS score 9.8. fixed version: 0.7.4

About this package:

External dependency: crossbeam-deque - https://github.com/crossbeam-rs/crossbeam/tree/master/crossbeam-deque
Package details: Concurrent work-stealing deque
Latest version: 0.8.3
License: Apache-2.0
Insights:

• Adequate count maintainers - This package is maintained by at least 3 developers
• No readme - This package is missing documentation: No README.md or INDEX.md files were found
• Frequent commits - New code commits are frequently being pushed
• No version 1 - The package releases hasn't reached v1
• Popularity - This widely used package is popular

Remediation

Recommended fix version: 0.7.4
Upgrading will fix 1 out of 2 current vulnerabilities.

View in Apiiro