crates.io/simple-slab CVE-2020-35892, CVE-2020-35893: unknown, EPSS 1.53%
`index()` allows out-of-bound read and `remove()` has off-by-one error
Action: Upgrade simple-slab to 0.3.3 or later.
cargo update -p simple-slab --precise 0.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.3.3 | - |
Fixed versions
| 0.3.3 |
Sources
- osv: RUSTSEC-2020-0039
- https://crates.io/crates/simple-slab
- https://rustsec.org/advisories/RUSTSEC-2020-0039.html
- https://github.com/nathansizemore/simple-slab/issues/2
CVE-2020-35892, CVE-2020-35893 · published · modified · JSON