Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0077
HistoryJul 22, 2021 - 12:00 p.m.

`better-macro` has deliberate RCE to prove a point

2021-07-2212:00:00
Google
osv.dev
8

0.008 Low

EPSS

Percentile

81.7%

better-macro is a fake crate which is
“Proving A Point” that proc-macros can run arbitrary code. This is not a particularly
novel or interesting observation.

It currently opens https://github.com/raycar5/better-macro/blob/master/doc/hi.md
which doesn’t appear to have any malicious content, but there’s no guarantee that
will remain the case.

This crate has no useful functionality, and should not be used.

0.008 Low

EPSS

Percentile

81.7%

Related for OSV:RUSTSEC-2021-0077