This project contains known security vulnerabilities #1254

New Issue

OVERLORD · 2026-02-05T00:23:45+03:00

OVERLORD commented

2026-02-05 00:23:45 +03:00

Originally created by @euDominic on GitHub (Apr 19, 2022).

This project contains known security vulnerabilities
https://deps.rs/repo/github/dani-garcia/vaultwarden
Dependencies
(50 total, 4 outdated, 1 insecure)

Originally created by @euDominic on GitHub (Apr 19, 2022). This project contains known security vulnerabilities https://deps.rs/repo/github/dani-garcia/vaultwarden Dependencies (50 total, 4 outdated, 1 insecure)

OVERLORD closed this issue

2026-02-05 00:23:47 +03:00

OVERLORD commented

2026-02-05 00:23:54 +03:00

@BlackDex commented on GitHub (Apr 19, 2022):

Yea, which we can't resolve.
Chrono is currently having some development done to try and resolve that issue.
Also, it could be unsound to use, it isn't something very trivial i think.

And regarding the others, we can't update some of them since we need to wait for some other packages to be updated first since they are dependent on each other.

Since we always try to use the latest versions of the crates available i do not think this issue should be kept open.

I already have a local testing version with some of the updated crates and all works fine.
As I'm also working on some other optimizations it is probably better to try and merge them all together.

But, thanks for the reminder.

@BlackDex commented on GitHub (Apr 19, 2022): Yea, which we can't resolve. Chrono is currently having some development done to try and resolve that issue. Also, it could be unsound to use, it isn't something very trivial i think. And regarding the others, we can't update some of them since we need to wait for some other packages to be updated first since they are dependent on each other. Since we always try to use the latest versions of the crates available i do not think this issue should be kept open. I already have a local testing version with some of the updated crates and all works fine. As I'm also working on some other optimizations it is probably better to try and merge them all together. But, thanks for the reminder.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1254