~ / search / GHSA-r57r-j98g-587f

GHSA-r57r-j98g-587f

Pointer dereference in nanorand

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-45705

Packages

EcosystemPackageAffectedFixed in
crates.io nanorand >= 0.5.0, < 0.6.1 0.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer.

References

External links from the advisory. They lead to third-party sites.