Skip to content

Commit c0d30f8

Browse files
authored
feat(rumqttc): update tungstenite dependencies for security purpose (#728)
1 parent 63444a0 commit c0d30f8

File tree

2 files changed

+3
-2
lines changed

2 files changed

+3
-2
lines changed

rumqttc/CHANGELOG.md

+1
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
2424

2525
### Security
2626
- Remove dependency on webpki. [CVE](https://rustsec.org/advisories/RUSTSEC-2023-0052)
27+
- Removed dependency vulnerability, see [rustsec](https://rustsec.org/advisories/RUSTSEC-2023-0065). Update of `tungstenite` dependency.
2728

2829
---
2930

rumqttc/Cargo.toml

+2-2
Original file line numberDiff line numberDiff line change
@@ -37,8 +37,8 @@ rustls-webpki = { version = "0.101.4", optional = true }
3737
rustls-pemfile = { version = "1", optional = true }
3838
rustls-native-certs = { version = "0.6", optional = true }
3939
# websockets
40-
async-tungstenite = { version = "0.22", default-features = false, features = ["tokio-rustls-native-certs"], optional = true }
41-
ws_stream_tungstenite = { version= "0.10", default-features = false, features = ["tokio_io"], optional = true }
40+
async-tungstenite = { version = "0.23", default-features = false, features = ["tokio-rustls-native-certs"], optional = true }
41+
ws_stream_tungstenite = { version= "0.11", default-features = false, features = ["tokio_io"], optional = true }
4242
http = { version = "0.2", optional = true }
4343
# native-tls
4444
tokio-native-tls = { version = "0.3.1", optional = true }

0 commit comments

Comments
 (0)