crates.io/bumpalo: medium

bumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`

Action: Upgrade bumpalo to 3.11.1 or later.

cargo update -p bumpalo --precise 3.11.1

Affected

Fixed versions

Sources

• osv: GHSA-f85w-wvc7-crwc
• https://github.com/fitzgen/bumpalo
• https://github.com/fitzgen/bumpalo/blob/main/CHANGELOG.md#3111
• https://rustsec.org/advisories/RUSTSEC-2022-0078.html

published 2023-01-20T21:54:22Z · modified 2026-09-10T03:49:51.242906965Z · JSON