VDB
KO
MEDIUM 5.5

GHSA-2vx6-fcw6-hpr6

Reference counting error in pyo3

Details

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io / pyo3
Introduced in: 0.12.0 Fixed in: 0.12.4

Upgrade pyo3 to 0.12.4 or newer (ecosystem crates.io).

References