CVE-2020-35902

CVE-2020-35902 affects the actix-codec crate prior to 0.3.0-beta.1 for Rust, with a use-after-free in Framed caused by lack of proper pinning. The issue is documented in RUSTSEC-2020-0049 and various feeds (Red Hat, OSV, GHSA). Impact is reflected in CVSS metrics (up to Critical in v3.1, HIGH in ...

NeteaseCloudMusicRustApi (=0.1.1), RustMusic (=0.1.0) +325 more potentially affected by CVE-2020-35902 via actix-codec (>=0.1.2 <=0.2.0)

actix-codec CARGO version =0.1.2, =0.1.0, =0.8.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.1 - actix-delay =0.1.0 - actix-diesel-actor =0.1.1 and more Source cves: CVE-2020-35902 Source advisory: OSV:RUSTSEC-2020-0049...