iotaledger / iotaledger/identity

RUSTSEC-2021-0065: anymap is unmaintained.

Open
#1,214 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
346
Forks
100
Avg merge
13h 41m
Merged PRs (30d)
2

Description

> anymap is unmaintained.

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `anymap` |
| Version | `0.12.1` |
| URL | [https://github.com/chris-morgan/anymap/issues/37](https://github.com/chris-morgan/anymap/issues/37) |
| Date | 2021-05-07 |

The `anymap` crate does not appear to be maintained, and the most recent
published version 0.12.1 includes a soundness bug. This has been
[fixed](https://github.com/chris-morgan/anymap/pull/32) a few years ago, but
was never released.

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2021-0065.html) for additional details.

Contributor guide

Open the contributing guide

Research direction

The issue identifies the Rust dependency anymap 0.12.1 and advisory RUSTSEC-2021-0065. Start by locating anymap in the repository's dependency manifests and checking which code depends on it. Confirm the advisory details and repository impact; done means the affected version is no longer resolved and relevant dependency checks pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.