crates.io/vodozemac CVE-2024-34063: low 2.5, EPSS 0.14%
vodozemac has degraded secret zeroization capabilities
Action: Upgrade vodozemac to 0.6.0 or later.
cargo update -p vodozemac --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-c3hm-hxwf-g5c6
- https://github.com/matrix-org/vodozemac/security/advisories/GHSA-c3hm-hxwf-g5c6
- https://nvd.nist.gov/vuln/detail/CVE-2024-34063
- https://github.com/matrix-org/vodozemac/commit/297548cad4016ce448c4b5007c54db7ee39489d9
- https://github.com/matrix-org/vodozemac
- https://rustsec.org/advisories/RUSTSEC-2024-0342.html
CVE-2024-34063 · published · modified · JSON