1 matches found
gix-date can create non-utf8 string with `TimeBuf::as_str`
The function gixdate::parse::TimeBuf::asstr can create an illegal string containing non-utf8 characters. This violates the safety invariant of TimeBuf and can lead to undefined behavior when consuming the string. The bug can be prevented by adding str::fromutf8 to the function TimeBuf::write...
7.1CVSS7.3AI score0.00193EPSS
SaveExploits1References8Affected Software1
20