keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-XM9M-2VJ8-FMFR...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-WCVP-R8J8-47PC...

CVE-2021-28028

The CVE-2021-28028 issue affects the Rust crate toodee prior to 0.3.0. The vulnerability arises during row insertion where an iterator panic can lead to a double free . Multiple connected sources (Red Hat CVE, OSVGHSA entries, CNVD, NVD, and CNVD) corroborate the description: a panic during itera...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:RUSTSEC-2021-0028...