MAL-2025-183198 Malicious code in kisut-dfg-dbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb4e7cfc0b99051f680de254cec0a32e50e97cbc695bab283b900b258767c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb4e7cfc0b99051f680de254cec0a32e50e97cbc695bab283b900b258767c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-PFR9-2P92-QRHQ Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function

The heap-buffer-overflow is triggered in the strlen function when handling the ccharstostr function in the dbn crate. This vulnerability occurs because the CStr::fromptr function in Rust assumes that the provided C string is null-terminated. However, there is no guarantee that the input chars arr...

Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function

The heap-buffer-overflow is triggered in the strlen function when handling the ccharstostr function in the dbn crate. This vulnerability occurs because the CStr::fromptr function in Rust assumes that the provided C string is null-terminated. However, there is no guarantee that the input chars arr...

PT-2024-40398 · Dbn · Dbn

Name of the Vulnerable Software and Affected Versions: dbn crate affected versions not specified Description: The issue occurs in the c chars to str function within the dbn crate, specifically when the strlen function is called. This happens because the CStr::from ptr function in Rust expects a...

RUSTSEC-2024-0377 Heap Buffer overflow using c_chars_to_str function

The heap-buffer-overflow is triggered in the strlen function when handling the ccharstostr function in the dbn crate. This vulnerability occurs because the CStr::fromptr function in Rust assumes that the provided C string is null-terminated. However, there is no guarantee that the input chars arr...