7 matches found
ferris-says has undefined behavior when not using UTF-8
Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...
arcon_compiler (>=0.1.0, <=0.1.1), astrology (>=0.1.0, <=0.1.55) +17 more potentially affected by unknown CVE via ferris-says (>=0.1.2, <=0.2.1)
ferris-says CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =10.10.10 - rusty-example 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V363-RRF2-5FMJ...
GHSA-V363-RRF2-5FMJ ferris-says has undefined behavior when not using UTF-8
Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...
arcon_compiler (>=0.1.0, <=0.1.1), astrology (>=0.1.0, <=0.1.55) +17 more potentially affected by unknown CVE via ferris-says (>=0.1.2, <=0.2.1)
ferris-says CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =10.10.10 - rusty-example 1.0.0 and more Source cves: unknown CVE Source advisory: GHSA-V363-RRF2-5FMJ...
RUSTSEC-2024-0001 Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8
Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...
crabsay (>=0.1.0, <=0.1.1), craterfinder (>=0.1.0, <=0.1.1) +10 more potentially affected by unknown CVE via ferris-says (0.2.1)
ferris-says CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ferris-says and may be impacted: - crabsay =0.1.0, =0.1.0, =0.1.0, =0.1.1 - rs-lean 0.1.0 - rust-study 0.1.0 - rustbyexample 0.2.0 - rusty-grep 0.1.0 - rusty-redis 0.1.0...
Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8
Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...