crates.io/ruzstd: medium
`ruzstd` uninit and out-of-bounds memory reads
Action: Upgrade ruzstd to 0.7.3 or later.
cargo update -p ruzstd --precise 0.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 0.7.3 | - |
Fixed versions
| 0.7.3 |
Sources
- osv: GHSA-x3f4-45xf-rjm7
- https://github.com/KillingSpark/zstd-rs/issues/75
- https://github.com/KillingSpark/zstd-rs/pull/76
- https://github.com/KillingSpark/zstd-rs
- https://rustsec.org/advisories/RUSTSEC-2024-0400.html
published · modified · JSON