crates.io/pleaser CVE-2021-31154: high 7.8, EPSS 0.47%

Permissions bypass in pleaser

Action: Upgrade pleaser to 0.4.0 or later.

cargo update -p pleaser --precise 0.4.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0102
• https://crates.io/crates/pleaser
• https://rustsec.org/advisories/RUSTSEC-2021-0102.html
• https://nvd.nist.gov/vuln/detail/CVE-2021-31154

CVE-2021-31154 · published 2021-05-27T12:00:00Z · modified 2023-11-08T04:05:47.070490Z · JSON