Skip to content

Commit 70a9a9e

Browse files
josecelanojosecelano
committed
fix: [#306] fix CVE-2020-26235 vulnerability
By removing the `chrono` package feature that was using the `time` pacakage version with the vulnerability.
1 parent 93782b0 commit 70a9a9e

File tree

2 files changed

+5
-25
lines changed

2 files changed

+5
-25
lines changed

‎Cargo.lock‎

Lines changed: 4 additions & 24 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Cargo.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ openssl = { version = "0.10", features = ["vendored"] }
2525
config = "0.13"
2626
log = { version = "0.4", features = ["release_max_level_info"] }
2727
fern = "0.6"
28-
chrono = "0.4"
28+
chrono = { version = "0.4.24", default-features = false, features = ["clock"] }
2929
r2d2 = "0.8"
3030
r2d2_mysql = "23.0"
3131
r2d2_sqlite = { version = "0.21", features = ["bundled"] }

0 commit comments

Comments
 (0)