HIGH7.5
GHSA-gc6q-cwcj-3vh9
Routinator crashes when sending a maliciously crafted select-asn query parameter
Details
When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes.
This only affects users who allow API access from untrusted networks.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/routinator
Introduced in:
0Fixed in: 0.15.2Upgrade routinator to 0.15.2 or newer (ecosystem crates.io).