keeshond_editor (>=0.1.0 <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (=0.2.4)

toodee CARGO version =0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-XM9M-2VJ8-FMFR...

keeshond_editor (>=0.1.0 <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (=0.2.4)

toodee CARGO version =0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-WCVP-R8J8-47PC...

CVE-2021-28029

creationtimestamp| type| source ---|---|--- 2021-03-05 12:47:30+00:00| seen| https://t.me/cibsecurity/24506...

CVE-2021-28029

The CVE-2021-28029 issue affects the Rust crate toodee prior to version 0.3.0. The vulnerability arises from the row-insertion feature, which could allow an attacker to read contents of uninitialized memory locations. Public reports from multiple sources (Red Hat, GHSA, OSV) confirm the uninitial...

keeshond_editor (>=0.1.0 <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (=0.2.4)

toodee CARGO version =0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:RUSTSEC-2021-0028...