crates.io/image CVE-2020-35916: medium 5.5, EPSS 0.39%

Mutable reference with immutable provenance in image

Action: Upgrade image to 0.23.12 or later.

cargo update -p image --precise 0.23.12

Affected

Fixed versions

Sources

• osv: GHSA-9wgh-vjj7-7433
• https://nvd.nist.gov/vuln/detail/CVE-2020-35916
• https://github.com/image-rs/image/issues/1357
• https://github.com/image-rs/image/pull/1358
• https://github.com/image-rs/image/commit/5cbe1e6767d11aff3f14c7ad69a06b04e8d583c7
• https://github.com/image-rs/image
• https://rustsec.org/advisories/RUSTSEC-2020-0073.html

CVE-2020-35916 · published 2021-08-25T20:49:54Z · modified 2023-11-08T04:03:39.222638Z · JSON