crates.io/kekbit CVE-2020-36449: high 8.1, EPSS 1.25%

Command injection in kekbit

Action: Upgrade kekbit to 0.3.4 or later.

cargo update -p kekbit --precise 0.3.4

Affected

Fixed versions

Sources

• osv: GHSA-g83m-67wh-whpw
• https://nvd.nist.gov/vuln/detail/CVE-2020-36449
• https://github.com/motoras/kekbit/issues/34
• https://github.com/motoras/kekbit
• https://rustsec.org/advisories/RUSTSEC-2020-0129.html

CVE-2020-36449 · published 2021-08-25T20:57:10Z · modified 2023-11-08T04:03:45.521117Z · JSON