crates.io/flatbuffers CVE-2020-35864: high 7.5, EPSS 0.59%

`read_scalar` and `read_scalar_at` allow transmuting values without `unsafe` blocks

Action: Upgrade flatbuffers to 2.0.0 or later.

cargo update -p flatbuffers --precise 2.0.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0009
• https://crates.io/crates/flatbuffers
• https://rustsec.org/advisories/RUSTSEC-2020-0009.html
• https://github.com/google/flatbuffers/issues/5825

CVE-2020-35864 · published 2020-04-11T12:00:00Z · modified 2023-11-08T04:03:36.276800Z · JSON