The project could not be analyzed because of build errors. Please review the error messages here. Another build will be scheduled when a change to a manifest file^* occurs. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

_{* Supported manifest files are: pom.xml, package.json, package-lock.json, npm-shrinkwrap.json, Cargo.lock, Cargo.toml, main.rs, lib.rs, build.gradle, build.gradle.kts, settings.gradle, settings.gradle.kts, gradle.properties, gradle-wrapper.properties, go.mod, go.sum}

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

The project could not be analyzed because of build errors. Please review the error messages here. Another build will be scheduled when a change to a manifest file^* occurs. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

_{* Supported manifest files are: pom.xml, package.json, package-lock.json, npm-shrinkwrap.json, Cargo.lock, Cargo.toml, main.rs, lib.rs, build.gradle, build.gradle.kts, settings.gradle, settings.gradle.kts, gradle.properties, gradle-wrapper.properties, go.mod, go.sum}

Vulnerabilities

DepShield reports that this application's usage of generic-array:0.12.4 results in the following vulnerability(s):

• (CVSS 8.6) CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Occurrences

generic-array:0.12.4 is a transitive dependency introduced by the following direct dependency(s):

• handlebars:4.1.2
        └─ pest_derive:2.1.0
              └─ pest_generator:2.1.3
                    └─ pest_meta:2.1.3
                          └─ sha-1:0.8.2
                                └─ block-buffer:0.7.3
                                      └─ generic-array:0.12.4
                                └─ digest:0.8.1
                                      └─ generic-array:0.12.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of crossbeam-channel:0.5.2 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2021-32810] crossbeam-deque is a package of work-stealing deques for building task scheduler...

Occurrences

crossbeam-channel:0.5.2 is a transitive dependency introduced by the following direct dependency(s):

• image:0.24.0
        └─ jpeg-decoder:0.2.1
              └─ rayon:1.5.1
                    └─ rayon-core:1.9.1
                          └─ crossbeam-channel:0.5.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of rand_chacha:0.3.1 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2021-27378] An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because re...

Occurrences

rand_chacha:0.3.1 is a transitive dependency introduced by the following direct dependency(s):

• rand:0.8.4
        └─ rand_chacha:0.3.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of crossbeam-channel:0.5.1 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2021-32810] crossbeam-deque is a package of work-stealing deques for building task scheduler...

Occurrences

crossbeam-channel:0.5.1 is a transitive dependency introduced by the following direct dependency(s):

• image:0.23.14
        └─ jpeg-decoder:0.1.22
              └─ rayon:1.5.1
                    └─ rayon-core:1.9.1
                          └─ crossbeam-channel:0.5.1
        └─ tiff:0.6.1
              └─ jpeg-decoder:0.1.22
                    └─ rayon:1.5.1
                          └─ rayon-core:1.9.1
                                └─ crossbeam-channel:0.5.1

• resvg:0.15.0
        └─ jpeg-decoder:0.1.22
              └─ rayon:1.5.1
                    └─ rayon-core:1.9.1
                          └─ crossbeam-channel:0.5.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}