mend-bolt-for-github[bot]

## CVE-2021-25900 - High Severity Vulnerability Vulnerable Library - smallvec-0.6.14.crate 'Small vector' optimization: store up to a small number of items on the stack Library home page: https://crates.io/api/v1/crates/smallvec/0.6.14/download Dependency Hierarchy:...

CVE-2020-25576 (High) detected in rand_core-0.3.1.crate

2

## CVE-2020-25576 - High Severity Vulnerability Vulnerable Library - rand_core-0.3.1.crate Core random number generator traits and tools for implementation. Library home page: https://crates.io/api/v1/crates/rand_core/0.3.1/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root Library) -...

## CVE-2016-4472 - High Severity Vulnerability Vulnerable Library - expat-sys-2.1.6.crate XML parser library written in C Library home page: https://crates.io/api/v1/crates/expat-sys/2.1.6/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root Library) - amethyst_ui-0.15.3.crate - font-kit-0.5.0.crate...

## CVE-2020-35914 - Medium Severity Vulnerability Vulnerable Library - lock_api-0.3.4.crate Wrappers to create fully-featured Mutex and RwLock types. Compatible with no_std. Library home page: https://crates.io/api/v1/crates/lock_api/0.3.4/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root...

## CVE-2020-35912 - Medium Severity Vulnerability Vulnerable Library - lock_api-0.3.4.crate Wrappers to create fully-featured Mutex and RwLock types. Compatible with no_std. Library home page: https://crates.io/api/v1/crates/lock_api/0.3.4/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root...

## CVE-2020-35911 - Medium Severity Vulnerability Vulnerable Library - lock_api-0.3.4.crate Wrappers to create fully-featured Mutex and RwLock types. Compatible with no_std. Library home page: https://crates.io/api/v1/crates/lock_api/0.3.4/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root...

## WS-2022-0013 - High Severity Vulnerability Vulnerable Library - dashmap-4.0.2.crate Blazing fast concurrent HashMap for Rust. Library home page: https://crates.io/api/v1/crates/dashmap/4.0.2/download Dependency Hierarchy: - distill-0.0.3.crate (Root Library) - distill-daemon-0.0.3.crate - distill-loader-0.0.3.crate...

## CVE-2009-3560 - Medium Severity Vulnerability Vulnerable Library - expat-sys-2.1.6.crate XML parser library written in C Library home page: https://crates.io/api/v1/crates/expat-sys/2.1.6/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root Library) - amethyst_ui-0.15.3.crate - font-kit-0.5.0.crate...

CVE-2020-15254 (High) detected in crossbeam-queue-0.1.2.crate, crossbeam-channel-0.3.9.crate

2

## CVE-2020-15254 - High Severity Vulnerability Vulnerable Libraries - crossbeam-queue-0.1.2.crate, crossbeam-channel-0.3.9.crate crossbeam-queue-0.1.2.crate Concurrent queues Library home page: https://crates.io/api/v1/crates/crossbeam-queue/0.1.2/download Dependency Hierarchy: - amethyst-0.15.3.crate (Root Library) - amethyst_ui-0.15.3.crate - amethyst_assets-0.15.3.crate - :x:...

## CVE-2020-35863 - High Severity Vulnerability Vulnerable Library - hyper-0.10.16.crate A fast and correct HTTP library. Library home page: https://crates.io/api/v1/crates/hyper/0.10.16/download Dependency Hierarchy: - multipart-0.18.0.crate (Root Library) - nickel-0.11.0.crate - :x:...