crates.io/mz-avro: unknown

Incorrect use of `set_len` allows for un-initialized memory

Action: Upgrade mz-avro to 0.7.0 or later.

cargo update -p mz-avro --precise 0.7.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0138
• https://crates.io/crates/mz-avro
• https://rustsec.org/advisories/RUSTSEC-2021-0138.html
• https://github.com/MaterializeInc/materialize/issues/8669

published 2021-10-14T12:00:00Z · modified 2023-11-08T04:20:47.718056Z · JSON