CVE-2024-36760

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

actix-casbin (>=0.1.0 <=0.3.3), actix-casbin-auth (>=0.1.0 <=0.3.2) +29 more potentially affected by CVE-2024-36760 via rhai (>=0.11.1 <=1.17.1)

rhai CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.5.1, =0.1.0, =3.1.0, =0.1.0, =0.5.0, =0.9.4 and more Source cves: CVE-2024-36760 Source advisory: OSV:GHSA-67FV-9R7G-432H...

GHSA-67FV-9R7G-432H Rhai stack overflow vulenrability

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

Rhai stack overflow vulenrability

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2024-36760

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

rhai Security Vulnerabilities

rhai is an embedded scripting language for Rust in the rhai open source. A security vulnerability exists in rhai version 1.18.0, which stems from the presence of a stack overflow vulnerability...

CVE-2024-36760

Rhai 1.18.0 contains a stack overflow vulnerability caused by a recursive call in the eval_stmt_block function (source path: /SRC/rhai/SRC/eval/STMT.Rs). CVE-2024-36760 and related advisories describe an impact on availability with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. A practical worka...

CVE-2024-36760

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2024-36760

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

PT-2024-27153 · Rhai · Rhai

Name of the Vulnerable Software and Affected Versions: rhai version 1.18.0 Description: A stack overflow vulnerability was found in rhai. The issue is related to a recursive call in the eval stmt block function, located in the /SRC/rhai/SRC/eval/STMT.Rs file. This vulnerability can be exploited d...

agnes (>=0.3.0 <=0.3.2), automl (>=0.2.6 <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (=0.1.1)

csv-sniffer CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-R67P-M7G9-GXW6...

agnes (>=0.3.0 <=0.3.2), automl (>=0.2.6 <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (=0.1.1)

csv-sniffer CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-9783-42PM-X5JQ...

agnes (>=0.3.0 <=0.3.2), automl (>=0.2.6 <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (=0.1.1)

csv-sniffer CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:RUSTSEC-2021-0088...