CVE-2019-25010

CVE-2019-25010 affects the Rust failure crate (up to 0.1.5, affected through 2019-11-13). The issue is a type confusion that can occur when private_get_type_id is overridden, enabling potential misbehavior in applications relying on this crate. The NVD CVSS data indicates high to critical impact ...

CVE-2020-25575

CVE-2020-25575 affects the Rust failure crate up to version 0.1.5, introducing compatibility hazards and a type confusion flaw when downcasting. The issue relates to unmaintained/unsupported products and may overlap CVE-2019-25010. CVSS data indicates high to critical impact (network, no auth, wi...