crates.io/base64 CVE-2017-1000430: critical 9.8, EPSS 1.53%

Integer overflow in base64

Action: Upgrade base64 to 0.5.2 or later.

cargo update -p base64 --precise 0.5.2

Affected

Fixed versions

Sources

• osv: GHSA-x67x-vg9m-65c3
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000430
• https://github.com/alicemaz/rust-base64/commit/24ead980daf11ba563e4fb2516187a56a71ad319
• https://github.com/alicemaz/rust-base64
• https://rustsec.org/advisories/RUSTSEC-2017-0004.html

CVE-2017-1000430 · published 2021-08-25T20:55:27Z · modified 2023-11-08T03:58:46.425555Z · JSON