crates.io/rusty-paseto: low
rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency
Action: Upgrade rusty-paseto to 0.6.0 or later.
cargo update -p rusty-paseto --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-j57r-4qw6-58r3
- https://github.com/rrrodzilla/rusty_paseto/security/advisories/GHSA-j57r-4qw6-58r3
- https://github.com/rrrodzilla/rusty_paseto/commit/42718c1b757c1dfabb80621f2f48b8268f7fa24e
- https://github.com/rrrodzilla/rusty_paseto
- https://github.com/rrrodzilla/rusty_paseto/releases/tag/v0.6.0
- https://rustsec.org/advisories/RUSTSEC-2022-0093.html
published · modified · JSON