New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RUSTSEC-2024-0421 #3772

Open

academiaresf opened this issue Mar 6, 2025 · 1 comment

Labels

academiaresf commented Mar 6, 2025

I have found these related issues/pull requests

Security Check

Description

RUSTSEC-2024-0421

Prefered solution

Update depedency to 2.5.4 on:

Cargo.toml
sqlx-core/Cargo.toml
sqlx-macros-core/Cargo.toml
sqlx-sqlite/Cargo.toml

Is this a breaking change? Why or why not?

Unit tests are passing

academiaresf added the enhancement label

Collaborator

abonander commented Mar 7, 2025

idna indirectly depended on by SQLx via the url crate is already upgraded to 1.0.3 (the latest version):

sqlx/Cargo.lock

Line 1875 in a92626d

name = "idna"

idna 0.4.0 is only indirectly depended on by the sqlx-example-postgres-axum-social example crate, via the validator crate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment