We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
atty
tracing-log
tracing-log depends on a version of env_logger that is affected by GHSA-g98v-hv3f-hcfr by way of its dependency on atty (currently unmaintained).
env_logger
Upgrade the env_logger dependency and make a patch release.
The text was updated successfully, but these errors were encountered:
It looks like you closed the PR that fixes this?
Sorry, something went wrong.
@hawkw I'm not sure how to make a PR against a tag (tracing-log-0.1.3 in this case) so I accidentally opened a PR against main (which I closed).
tracing-log-0.1.3
main
The fix is so minimal (env_logger = { version = "0.10", optional = true }) that I didn't bother to figure out how it's done...
env_logger = { version = "0.10", optional = true }
We can close this PR as this has been fixed with commit 4161d81 (in pr #2772). Though it still needs to be ported to master :)
No branches or pull requests
Feature Request
Crates
tracing-log
Motivation
tracing-log
depends on a version ofenv_logger
that is affected by GHSA-g98v-hv3f-hcfr by way of its dependency onatty
(currently unmaintained).Proposal
Upgrade the
env_logger
dependency and make a patch release.The text was updated successfully, but these errors were encountered: