crates.io/pyo3: high
PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
Action: Upgrade pyo3 to 0.29.0 or later.
cargo update -p pyo3 --precise 0.29.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.29.0 | - |
Fixed versions
| 0.29.0 |
Sources
- osv: GHSA-36hh-v3qg-5jq4
- https://github.com/PyO3/pyo3/pull/6086
- https://github.com/PyO3/pyo3
- https://rustsec.org/advisories/RUSTSEC-2026-0176.html
published · modified · JSON