RUSTSEC-2021-0065

vendorUSosv

anymap is unmaintained.

view advisory published 2021-05-07Licence: CC0-1.0

The `anymap` crate does not appear to be maintained, and the most recent published version 0.12.1 includes a soundness bug. This has been [fixed](https://github.com/chris-morgan/anymap/pull/32) a few years ago, but was never released.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-38187US	critical9.8	1.44% (73rd)	—	2021-08-08
An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a u8 to a u64.

references

External citations — patches, advisories, analysis.

https://crates.io/crates/anymapPACKAGE
https://github.com/chris-morgan/anymap/issues/37REPORT
https://rustsec.org/advisories/RUSTSEC-2021-0065.htmlADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan