tocsin

crates.io/capnp CVE-2022-46149: medium 5.4, EPSS 0.93%

Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list

Action: Upgrade capnp to 0.13.7 or later.

cargo update -p capnp --precise 0.15.2
cargo update -p capnp --precise 0.14.11
cargo update -p capnp --precise 0.13.7

Affected

introducedfixedlast affected
0.15.00.15.2-
0.14.00.14.11-
00.13.7-

Fixed versions

0.15.20.14.110.13.7

Sources

CVE-2022-46149 · published · modified · JSON