crates.io/lazy-init CVE-2021-25901: medium 5.3, EPSS 1.33%

Out of bounds read in lazy-init

Action: Upgrade lazy-init to 0.4.0 or later.

cargo update -p lazy-init --precise 0.4.0

Affected

Fixed versions

Sources

• osv: GHSA-w47j-hqpf-qw9w
• https://nvd.nist.gov/vuln/detail/CVE-2021-25901
• https://github.com/khuey/lazy-init/issues/9
• https://github.com/khuey/lazy-init
• https://rustsec.org/advisories/RUSTSEC-2021-0004.html

CVE-2021-25901 · published 2021-08-25T20:52:59Z · modified 2023-11-08T04:05:16.553479Z · JSON