crates.io/cdr CVE-2021-26305: critical 9.8, EPSS 1.71%

Read of uninitialized memory in cdr

Action: Upgrade cdr to 0.2.4 or later.

cargo update -p cdr --precise 0.2.4

Affected

Fixed versions

Sources

• osv: GHSA-37jj-wp7g-7wj4
• https://nvd.nist.gov/vuln/detail/CVE-2021-26305
• https://github.com/hrektts/cdr-rs/issues/10
• https://github.com/hrektts/cdr-rs/pull/11
• https://github.com/hrektts/cdr-rs/commit/0e6006de464caa331643f86cd2d9ba3b32b09833
• https://github.com/hrektts/cdr-rs
• https://rustsec.org/advisories/RUSTSEC-2021-0012.html

CVE-2021-26305 · published 2021-08-25T20:53:12Z · modified 2023-11-08T04:05:20.783188Z · JSON