crates.io/autorand CVE-2020-36210: high 7.8, EPSS 0.43%
`impl Random` on arrays can lead to dropping uninitialized memory
Action: Upgrade autorand to 0.2.3 or later.
cargo update -p autorand --precise 0.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.2.3 | - |
Fixed versions
| 0.2.3 |
Sources
- osv: RUSTSEC-2020-0103
- https://crates.io/crates/autorand
- https://rustsec.org/advisories/RUSTSEC-2020-0103.html
- https://github.com/mersinvald/autorand-rs/issues/5
CVE-2020-36210 · published · modified · JSON