sea-orm icon indicating copy to clipboard operation
sea-orm copied to clipboard

Vulnerability in the `rsa` (a recursive dependency of SeaORM)

Open baraknaveh opened this issue 7 months ago • 2 comments

Description

Dependabot complains on a vulnerability in rsa, a recursive dependency of SeaORM. This is a link to the issue: https://rustsec.org/advisories/RUSTSEC-2023-0071.html

Vulnerability location:

├── sea-orm v0.12.15
│   ├── sea-query-binder v0.5.0
│   │   ├── sqlx v0.7.4
│   │   │   ├── sqlx-mysql v0.7.4
│   │   │   │   ├── rsa v0.9.6       <-- Vulnerable

Steps to Reproduce

Run GitHub dependabot on the codebase.

Expected Behavior

No vulnerabilities

Actual Behavior

https://rustsec.org/advisories/RUSTSEC-2023-0071.html

Reproduces How Often

Always

Workarounds

🤷‍♂️

Reproducible Example

Marvin Attack Vulnerability

Versions

v0.12.15

baraknaveh avatar Jul 26 '24 18:07 baraknaveh