crates.io/raw-cpuid CVE-2021-45687: medium, EPSS 1.16%

Optional `Deserialize` implementations lacking validation

Action: Upgrade raw-cpuid to 9.1.1 or later.

cargo update -p raw-cpuid --precise 9.1.1

Affected

Fixed versions

Sources

• osv: GHSA-jf5h-cf95-w759
• https://github.com/gz/rust-cpuid/issues/43
• https://github.com/gz/rust-cpuid
• https://rustsec.org/advisories/RUSTSEC-2021-0089.html

CVE-2021-45687 · published 2022-06-17T00:16:24Z · modified 2023-11-08T04:07:21.872047Z · JSON