~ / search / GHSA-vq23-5h4f-vwpv

GHSA-vq23-5h4f-vwpv

Update unsound DrainFilter and RString::retain

Source: GitHub Advisory Database (reviewed) High CVE-2020-36212

Packages

EcosystemPackageAffectedFixed in
crates.io abi_stable < 0.9.1 0.9.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop.

References

External links from the advisory. They lead to third-party sites.