CVE-2020-35880

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (4.4.3)

bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and...

CVE-2020-35880

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

CVE-2020-35880

The CVE-2020-35880 entry relates to the Rust bigint crate (pre-2020-05-07). The connected advisories describe an unsoundness in bigint, i.e., a soundness violation in the implementation. Practical impact and exploit details are not provided in the supplied documents; they only state there is a so...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...