thingvellir (>=0.0.0-alpha1 <=0.0.2-alpha2) potentially affected by CVE-2024-27284 via cassandra-cpp (=0.15.1)

cassandra-cpp CARGO version =0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on cassandra-cpp and may be impacted: - thingvellir =0.0.0-alpha1, =0.0.2-alpha2 Source cves: CVE-2024-27284 Source advisory: OSV:GHSA-X9XC-63HG-VCFQ...

thingvellir (>=0.0.0-alpha1 <=0.0.2-alpha2) potentially affected by CVE-2024-27284 via cassandra-cpp (=0.15.1)

cassandra-cpp CARGO version =0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on cassandra-cpp and may be impacted: - thingvellir =0.0.0-alpha1, =0.0.2-alpha2 Source cves: CVE-2024-27284 Source advisory: OSV:RUSTSEC-2024-0017...

RUSTSEC-2016-0006 `cassandra` crate is unmaintained; use `cassandra-cpp` instead

The cassandra crate has not seen a release since December 2016, and its author is unresponsive. The cassandra-cpp crate is a maintained fork: https://github.com/Metaswitch/cassandra-rs...

`cassandra` crate is unmaintained; use `cassandra-cpp` instead

The cassandra crate has not seen a release since December 2016, and its author is unresponsive. The cassandra-cpp crate is a maintained fork: https://github.com/Metaswitch/cassandra-rs...