[DepShield] (CVSS 9.8) Vulnerability due to usage of rand_chacha:0.3.1

[sonatype-depshield]

Vulnerabilities

DepShield reports that this application's usage of rand_chacha:0.3.1 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2021-27378] An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because re...

---

Occurrences

rand_chacha:0.3.1 is a transitive dependency introduced by the following direct dependency(s):

• mockito:0.30.0
        └─ rand:0.8.4
              └─ rand_chacha:0.3.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[amy-keibler]

Right now, we're using mockito for HTTP request mocking to OSSI. We could consider switching this out for httpmock, since that supports sync HTTP mock testing and doesn't have any known vulnerabilities on OSSI.