bronzedb (=0.1.0), bronzedb-client (>=0.1.0 <=0.1.1) +3 more potentially affected by CVE-2021-45682 via bronzedb-protocol (=0.1.0)

bronzedb-protocol CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bronzedb-protocol and may be impacted: - bronzedb =0.1.0 - bronzedb-client =0.1.0, =0.1.1 - bronzedb-memory-db-server =0.1.0 - bronzedb-server =0.1.0 -...

CVE-2021-45682

The CVE-2021-45682 entry concerns the bronzedb-protocol crate for Rust, for versions through 2021-01-03. The root issue is that ReadKVExt may read from uninitialized memory locations, which can lead to undefined behavior and potential memory exposure. Public-environment advisories (OSV, Red Hat, ...

CVE-2021-45682

An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. ReadKVExt may read from uninitialized memory locations...