WS-2022-0435

The function Table::asref in prettytable-rs before 0.10.0 contains a reference of vector is force cast to slice...

prettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behavior

In function Table::asref, a reference of vector is force cast to slice. There are multiple problems here: 1. To guarantee the size is correct, we have to first do Vec::shrinktofit. The function requires a mutable reference, so we have to force cast from immutable to mutable, which is undefined...

akiv (>=0.1.0, <=0.1.2), arrow (>=1.0.1, <=5.5.0) +249 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)

prettytable-rs CARGO version =0.5.2, =0.1.0, =1.0.1, =0.1.0, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =0.2.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: GHSA-GFGM-CHR3-X6PX...

akiv (>=0.1.0, <=0.1.2), arrow (>=1.0.1, <=5.5.0) +249 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)

prettytable-rs CARGO version =0.5.2, =0.1.0, =1.0.1, =0.1.0, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =0.2.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFGM-CHR3-X6PX...

akiv (>=0.1.0, <=0.1.2), arrow (>=1.0.1, <=5.5.0) +249 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)

prettytable-rs CARGO version =0.5.2, =0.1.0, =1.0.1, =0.1.0, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =0.2.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0074...