crates.io/prost-types CVE-2021-38192: unknown, EPSS 1.10%

Conversion from `prost_types::Timestamp` to `SystemTime` can cause an overflow and panic

Action: Upgrade prost-types to 0.8.0 or later.

cargo update -p prost-types --precise 0.8.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0073
• https://crates.io/crates/prost-types
• https://rustsec.org/advisories/RUSTSEC-2021-0073.html
• https://github.com/tokio-rs/prost/issues/438

CVE-2021-38192 · published 2021-07-08T12:00:00Z · modified 2023-11-08T04:06:26.043741Z · JSON