crates.io/sodiumoxide CVE-2019-25002: critical 9.8, EPSS 1.50%

Incorrect Comparison in sodiumoxide

Action: Upgrade sodiumoxide to 0.2.5 or later.

cargo update -p sodiumoxide --precise 0.2.5

Affected

Fixed versions

Sources

• osv: GHSA-wrvc-72w7-xpmj
• https://nvd.nist.gov/vuln/detail/CVE-2019-25002
• https://github.com/sodiumoxide/sodiumoxide/pull/381
• https://github.com/sodiumoxide/sodiumoxide/pull/381/commits/fae052b834b097ced9a89a8fff8466e18f383070
• https://github.com/sodiumoxide/sodiumoxide/commit/38490723927f230498adf795153e6cd3cb08b6a8
• https://github.com/sodiumoxide/sodiumoxide
• https://rustsec.org/advisories/RUSTSEC-2019-0026.html

CVE-2019-25002 · published 2021-08-25T20:45:54Z · modified 2023-11-08T04:01:31.981797Z · JSON