Package
cargo-c
Component
gix-fs
Latest update
Fixed version
0.10.24-r0
7.8
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
0.10.24-r0Status
Impact
cargo-c is tightly coupled to a specific version of cargo, which transitively pulls in this gix ecosystem package. cargo/cargo-c upstreams will need to move their respective dependencies forward for remediation.
Status
Impact
Bumping gix-fs to the fixed 0.21.1 release is blocked by the package's transitive dependency on the cargo crate v0.97.1 (the latest published release), which pins gix ^0.81.0 and resolves gix-fs ^0.19.2. gix-fs 0.21.1 requires the semver-incompatible gix 0.83+ line and cannot be retargeted via a lockfile pin. Upstream cargo has adopted gix 0.84.0 on its master branch; waiting on a cargo crate release that consumes the fixed gix line and a corresponding upstream release of this package.
Status