crates.io/rustdecimal: high
`rustdecimal` is a malicious crate
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7pwq-f4pq-78gm
- https://github.com/paupino/rust-decimal/issues/514#issuecomment-1115408888
- https://groups.google.com/g/rustlang-security-announcements/c/5DVtC8pgJLw?pli=1
- https://raw.globalsecuritydatabase.org/GSD-2022-1002520
- https://rustsec.org/advisories/RUSTSEC-2022-0042.html
published · modified · JSON