crates.io/portaudio CVE-2016-10933: medium 5.9, EPSS 1.08%
Source code is downloaded over cleartext HTTP in portaudio
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pq6v-x7gp-7776
- https://nvd.nist.gov/vuln/detail/CVE-2016-10933
- https://github.com/RustAudio/rust-portaudio/issues/144
- https://github.com/RustAudio/rust-portaudio
- https://rustsec.org/advisories/RUSTSEC-2016-0003.html
CVE-2016-10933 · published · modified · JSON