endian_trait_derive (>=0.2.0, <=0.4.0) potentially affected by CVE-2021-29929 via endian_trait (>=0.2.0, <=0.3.0)

endiantrait CARGO version =0.2.0, =0.2.0, =0.4.0 Source cves: CVE-2021-29929 Source advisory: OSV:GHSA-VPW8-43WM-RXW5...

CVE-2021-29929

The CVE-2021-29929 entry concerns the endian_trait crate for Rust (through 2021-01-04). The root cause is a panic in a user-provided Endian implementation, which can trigger a double drop of the underlying value. This is described across multiple sources (e.g., RUSTSEC-2021-0039 and related advis...

endian_trait_derive (>=0.2.0, <=0.4.0) potentially affected by CVE-2021-29929 via endian_trait (>=0.2.0, <=0.3.0)

endiantrait CARGO version =0.2.0, =0.2.0, =0.4.0 Source cves: CVE-2021-29929 Source advisory: OSV:RUSTSEC-2021-0039...