71 matches found
CVE-2023-40267
GitPython before 3.1.32 does not block insecure non-multi options in clone and clonefrom. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439...
Remote Code Execution (RCE)
GitPython is vulnerable to Remote Code Execution RCE. The vulnerability exists because the clonefrom function in base.py makes external calls to git without sufficient sanitization of input arguments, allowing an attacker to inject and execute a maliciously crafted remote URL into the clone comma...
Double-free in id-map
The clonefrom implementation for IdMap drops the values present in the map and then begins cloning values from the other map. If a .clone call pancics, then the afformentioned dropped elements can be freed again. getorinsert getorinsert reserves space for a value, before calling the user provided...
GHSA-8GMX-CPCG-F8H5 Double-free in id-map
The clonefrom implementation for IdMap drops the values present in the map and then begins cloning values from the other map. If a .clone call pancics, then the afformentioned dropped elements can be freed again. getorinsert getorinsert reserves space for a value, before calling the user provided...
CVE-2021-30455
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clonefrom upon a .clone panic...
CVE-2021-30455
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clonefrom upon a .clone panic...
CVE-2021-30455: Double Free
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clonefrom upon a .clone panic...
Multiple functions can cause double-frees
The following functions in the crate are affected: IdMap::clonefrom The clonefrom implementation for IdMap drops the values present in the map and then begins cloning values from the other map. If a .clone call pancics, then the afformentioned dropped elements can be freed again. getorinsert...
RUSTSEC-2021-0052 Multiple functions can cause double-frees
The following functions in the crate are affected: IdMap::clonefrom The clonefrom implementation for IdMap drops the values present in the map and then begins cloning values from the other map. If a .clone call pancics, then the afformentioned dropped elements can be freed again. getorinsert...
PT-2021-18732
Name of the Vulnerable Software and Affected Versions id-map crate through 2021-02-26 for Rust Description The issue concerns a double free error that can occur in the id-map crate. This happens in the IdMap::clone from function when a .clone call panics, causing previously dropped elements to be...
PT-2021-18733
Name of the Vulnerable Software and Affected Versions id-map crate through 2021-02-26 for Rust Description A double free issue can occur in the id-map crate due to panic in user-provided functions. Specifically, the IdMap::clone from, get or insert, and remove set functions are affected. In clone...