rustypaste
rustypaste copied to clipboard
orhun
RUSTSEC-2020-0016: `net2` crate has been deprecated; use `socket2` instead
net2crate has been deprecated; usesocket2instead
| Details | |
|---|---|
| Status | unmaintained |
| Package | net2 |
| Version | 0.2.37 |
| URL | https://github.com/deprecrated/net2-rs/commit/3350e3819adf151709047e93f25583a5df681091 |
| Date | 2020-05-01 |
The net2 crate has been deprecated
and users are encouraged to considered socket2 instead.
See advisory page for additional details.
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
this dependency is introduced by mio and that is introduced by actix-server that is introduced by actix-web
I think it's not going to be easy to fix it..
This issue is now coming from the hotwatch crate which hasn't been updated in years. Specifically, it's coming from hotwatch which uses notify 4.0 which uses mio 0.6.23 which uses net2.
Created an issue at hotwatch: https://github.com/francesca64/hotwatch/issues/12
hotwatch dependency is updated in #55, this security issue no longer exists 🔫 🔫 🔫