crates.io/nano_arena CVE-2021-28032: critical 9.8, EPSS 1.53%

Use after free in nano_arena

Action: Upgrade nano_arena to 0.5.2 or later.

cargo update -p nano_arena --precise 0.5.2

Affected

Fixed versions

Sources

• osv: GHSA-wp34-mqw5-jj85
• https://nvd.nist.gov/vuln/detail/CVE-2021-28032
• https://github.com/bennetthardwick/nano-arena/issues/1
• https://github.com/bennetthardwick/nano-arena/commit/6b83f9d0708337a9f8b709c1624a8587021ceba2
• https://github.com/bennetthardwick/nano-arena
• https://rustsec.org/advisories/RUSTSEC-2021-0031.html

CVE-2021-28032 · published 2021-08-25T20:52:00Z · modified 2023-11-08T04:05:27.788398Z · JSON