CVE-2024-36400
2 advisories.
crates.io/nano-id CVE-2024-36400: critical 9.4, EPSS 0.75%
Unable to generate the correct character set
Action: Upgrade nano-id to 0.4.0 or later.
cargo update -p nano-id --precise 0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-9hc7-6w9r-wj94
- https://github.com/viz-rs/nano-id/security/advisories/GHSA-9hc7-6w9r-wj94
- https://nvd.nist.gov/vuln/detail/CVE-2024-36400
- https://github.com/viz-rs/nano-id/commit/a9022772b2f1ce38929b5b81eccc670ac9d3ab23
- https://github.com/viz-rs/nano-id
- https://rustsec.org/advisories/RUSTSEC-2024-0343.html
CVE-2024-36400 · published · modified · JSON
crates.io/nano-id CVE-2024-36400: critical 9.4, EPSS 0.75%
Reduced entropy due to inadequate character set usage
Action: Upgrade nano-id to 0.4.0 or later.
cargo update -p nano-id --precise 0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: RUSTSEC-2024-0343
- https://crates.io/crates/nano-id
- https://rustsec.org/advisories/RUSTSEC-2024-0343.html
CVE-2024-36400 · published · modified · JSON