You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@datafusion.apache.org by "Phoenix500526 (via GitHub)" <gi...@apache.org> on 2026/07/07 08:18:47 UTC
[I] Cargo audit is failing on main [datafusion]
Phoenix500526 opened a new issue, #23360:
URL: https://github.com/apache/datafusion/issues/23360
Example: https://github.com/apache/datafusion/actions/runs/28847231812/job/85553853631
```bash
Run cargo audit --ignore RUSTSEC-2026-0194 --ignore RUSTSEC-2026-0195
info: syncing channel updates for 1.96.0-x86_64-unknown-linux-gnu
info: latest update on 2026-05-28 for version 1.96.0 (ac68faa20 2026-05-25)
info: downloading 5 components
Fetching advisory database from `[https://github.com/RustSec/advisory-db.git`](https://github.com/RustSec/advisory-db.git%60)
Loaded 1158 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (664 crate dependencies)
error: 1 vulnerability found!
warning: 2 allowed warnings found
Crate: crossbeam-epoch
Version: 0.9.18
Title: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Date: 2026-07-06
ID: RUSTSEC-2026-0204
URL: https://rustsec.org/advisories/RUSTSEC-2026-0204
Solution: Upgrade to >=0.9.20
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate: anyhow
Version: 1.0.102
Warning: unsound
Title: Unsoundness in `Error::downcast_mut()`
Date: 2026-06-25
ID: RUSTSEC-2026-0190
URL: https://rustsec.org/advisories/RUSTSEC-2026-0190
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [I] Cargo audit is failing on main [datafusion]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb closed issue #23360: Cargo audit is failing on main
URL: https://github.com/apache/datafusion/issues/23360
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [I] Cargo audit is failing on main [datafusion]
Posted by "Phoenix500526 (via GitHub)" <gi...@apache.org>.
Phoenix500526 commented on issue #23360:
URL: https://github.com/apache/datafusion/issues/23360#issuecomment-4901635285
take
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org