—

RUSTSEC-2021-0103

Partial read is incorrect in molecule

Details

Anyone who uses total_size(..) function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/molecule

Introduced in: 0.0.0-0Fixed in: 0.7.2

Upgrade molecule to 0.7.2 or newer (ecosystem crates.io).

References

https://crates.io/crates/molecule[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2021-0103.html[ADVISORY]
https://github.com/nervosnetwork/molecule/security/advisories/GHSA-82hm-vh7g-hrh9[ADVISORY]