crates.io/os_str_bytes CVE-2020-35865: high 7.5, EPSS 1.35%
os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`
Action: Upgrade os_str_bytes to 2.0.0 or later.
cargo update -p os_str_bytes --precise 2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-q948-x8rf-888m
- https://nvd.nist.gov/vuln/detail/CVE-2020-35865
- https://github.com/dylni/os_str_bytes/pull/1
- https://github.com/dylni/os_str_bytes
- https://rustsec.org/advisories/RUSTSEC-2020-0012.html
CVE-2020-35865 · published · modified · JSON