crates.io/dbn: medium 5.5

Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function

Action: Upgrade dbn to 0.22.1 or later.

cargo update -p dbn --precise 0.22.1

Affected

Fixed versions

Sources

• osv: GHSA-pfr9-2p92-qrhq
• https://github.com/databento/dbn/issues/67
• https://github.com/databento/dbn/commit/339efb90fdb980920a5e8829008abc1114f4bfdd
• https://github.com/databento/dbn
• https://rustsec.org/advisories/RUSTSEC-2024-0377.html

published 2024-10-09T14:34:24Z · modified 2026-05-20T01:00:15.746612546Z · JSON