crates.io/calamine CVE-2021-26951: critical 9.8, EPSS 1.75%

`Sectors::get` accesses unclaimed/uninitialized memory

Action: Upgrade calamine to 0.17.0 or later.

cargo update -p calamine --precise 0.17.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0015
• https://crates.io/crates/calamine
• https://rustsec.org/advisories/RUSTSEC-2021-0015.html
• https://github.com/tafia/calamine/issues/199

CVE-2021-26951 · published 2021-01-06T12:00:00Z · modified 2023-11-08T04:05:22.828925Z · JSON