crates.io/rkyv CVE-2021-31919: high 7.5, EPSS 1.08%

Archives may contain uninitialized memory

Action: Upgrade rkyv to 0.6.0 or later.

cargo update -p rkyv --precise 0.6.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0054
• https://crates.io/crates/rkyv
• https://rustsec.org/advisories/RUSTSEC-2021-0054.html
• https://github.com/djkoloski/rkyv/issues/113

CVE-2021-31919 · published 2021-04-28T12:00:00Z · modified 2023-11-08T04:05:51.699520Z · JSON