advisory-db
advisory-db copied to clipboard
rustsec
Security advisory database for Rust crates published through crates.io
[RUSTSEC-2020-0071](https://github.com/rustsec/advisory-db/blob/main/crates/time/RUSTSEC-2020-0071.md) lists a large number of platforms, some of this are unrecognized by `platforms` crate and end up being treated as unknown by RustSec tooling. For example, [the OSV exported...
The `hexchat` crate has `register_command` and `deregister_command` functions. When used together, they can cause an use-after-free. This seems to be the case with most if not all of the callback-related...
**Following-Up from here re:unicase** https://github.com/rustsec/advisory-db/pull/1176 https://github.com/interledger-rs/interledger-rs/pull/744 **Crates** interledger - 2,962 downloads - over 2 years ago - crates.io: 0.6.0, github: 1.0.0 (commit 3 years ago) ilp-cli - 665 downloads -...
This PR adds an maintenance warning about the `rust-clipboard` crate. It has not been updated in years and, at this point, two forks of it are the most viable alternatives....
A [maintenance inquiry](https://github.com/ogham/rust-ansi-term/issues/72) has been open since August 2021 without response. The most recent release & PR merge was in September 2019 and multiple PRs + issues are outstanding.
The [`align_first`](https://docs.rs/maligned/latest/maligned/fn.align_first.html) function of the `maligned` crate manually allocates with an alignment larger than `T`, and then uses `Vec::from_raw_parts` on that allocation to get a `Vec`. As per the [stdlib...
The last update (0.6.0) of `interment` notes in its changelog that it removed `LocalIntern` because it can be used to cause use-after-free errors. https://github.com/droundy/internment/blob/9270a4d05c6c18f89e7ecfb2ad3fe52250f6385f/CHANGELOG.md The type is removed in 0.6.0...
The advisory format doesn't have ability to express that a crate may be vulnerable only if an optional Cargo feature is enabled (e.g. when `cargo add halfbaddep` is fine, but...
[rust playground](https://play.rust-lang.org/?version=stable&mode=release&edition=2021&gist=aa4c2687f47d41e9873cc40982eb586a) the above example doesnt reproduce using the actual crate in question but its "safe" wrapper is literally just: `fn safe_uninit() -> Self { unsafe { MaybeUninit::uninit().assume_init() } }`
