3 matches found
tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service
A malicious or compromised server can send a row containing fewer fields than its row description declares columns. Reading one of the missing columns then panics with an out-of-bounds index, aborting the calling task. This affects even the otherwise non-panicking tryget, and both Row and...
GHSA-3GJW-F78C-VVPW tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service
A malicious or compromised server can send a row containing fewer fields than its row description declares columns. Reading one of the missing columns then panics with an out-of-bounds index, aborting the calling task. This affects even the otherwise non-panicking tryget, and both Row and...
adom (>=0.0.5, <=0.0.6), good-ormning-runtime (>=0.1.0, <=0.3.3) +6 more potentially affected by unknown CVE via tokio-uds (0.1.2)
tokio-uds CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on tokio-uds and may be impacted: - adom =0.0.5, =0.1.0, =0.0.5, =0.1.0, =0.1.0, =0.0.1, =0.1.0 - web3 0.0.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0050...