crates.io/postscript CVE-2021-26953: high 7.5, EPSS 1.49%

Read on uninitialized buffer in postscript

Action: Upgrade postscript to 0.14.0 or later.

cargo update -p postscript --precise 0.14.0

Affected

Fixed versions

Sources

• osv: GHSA-fhvc-gp6c-h2wx
• https://nvd.nist.gov/vuln/detail/CVE-2021-26953
• https://github.com/bodoni/postscript/issues/1
• https://github.com/bodoni/postscript/commit/8026286
• https://github.com/bodoni/postscript
• https://rustsec.org/advisories/RUSTSEC-2021-0017.html

CVE-2021-26953 · published 2021-08-25T20:52:23Z · modified 2023-11-08T04:05:22.958536Z · JSON