~ / search / GHSA-v2p5-q653-9j99

GHSA-v2p5-q653-9j99

obfstr Type Confusion vulnerability

Source: GitHub Advisory Database (reviewed) Low CVE-2024-58253

Packages

EcosystemPackageAffectedFixed in
crates.io obfstr < 0.4.4 0.4.4

Details

As written in the advisory (Markdown source, shown as plain text).

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.

References

External links from the advisory. They lead to third-party sites.