Rust basicsCargo dependency managementUnderstanding of security advisories
初心者向け度初回貢献者にどれだけ取り組みやすいかを 1-100 で推定したスコアです。
20
調査方針
The issue depends on a new libp2p release to fix RUSTSEC 2024-0421. Monitor the libp2p repository for the fixing release. Once available, update the libp2p dependency in fuel core's Cargo.toml and Cargo.lock, run cargo test to verify no regressions, and confirm the advisory is resolved. Check if hickory proto also needs to be updated. Ensure the dependency version satisfies the security fix without breaking changes.
Fix RUSTSEC-2024-0421 / Update libp2p · FuelLabs/fuel-core#2488 | Good First Issue