crates.io/compact_arena CVE-2019-16139: critical 9.8, EPSS 1.85%

Flaw in generativity allows out-of-bounds access

Action: Upgrade compact_arena to 0.4.0 or later.

cargo update -p compact_arena --precise 0.4.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2019-0015
• https://crates.io/crates/compact_arena
• https://rustsec.org/advisories/RUSTSEC-2019-0015.html
• https://github.com/llogiq/compact_arena/issues/22

CVE-2019-16139 · published 2019-05-21T12:00:00Z · modified 2023-11-08T04:01:16.163639Z · JSON