Lucene search
+L

1 matches found

RustSec
RustSec
added 2021/02/09 12:0 p.m.28 views

Use after free possible in `uri::Formatter` on panic

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.5CVSS1.2AI score0.01025EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder