MEDIUM5.9
GHSA-pq6v-x7gp-7776
Source code is downloaded over cleartext HTTP in portaudio
Details
An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext HTTP.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/portaudio
Introduced in:
0No fixed version published yet for portaudio. Pin to a known-safe version or switch to an alternative.