Skip to content

Multiple vulnerabilities with the current version of tokio-tungstenite #3557

@pyroraptor07

Description

@pyroraptor07

According to cargo deny, the current 0.21.0 version of tokio-tungstenite has multiple vulnerabilities due to its transient dependency on rustls-webpki v0.102.8:

It looks like upgrading tokio-tungstenite to at least v0.22.0 should allow rustls-webpki v0.103.13 to be used, which resolves all of those advisories.

Relevant cargo deny output (with personal information redacted):
cargo-deny-output-serenity.txt

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions