CRITICAL9.8

GHSA-8rc5-mr4f-m243

Use after free in rio

Details

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/rio

Introduced in: 0

No fixed version published yet for rio. Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-35876[ADVISORY]
https://github.com/spacejam/rio/issues/11[WEB]
https://github.com/spacejam/rio/pull/31[WEB]
https://github.com/spacejam/rio[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0021.html[WEB]