GHSA-p7mj-xvxg-grff: `out_reference::Out::from_raw` should be `unsafe`

March 13, 2023

Out::from_raw in affected versions allows writing a value to invalid memory address without requiring unsafe.

The soundness issue has been addressed by making Out::from_raw an unsafe function.

References

github.com/RustyYato/out-ref/issues/1
github.com/advisories/GHSA-p7mj-xvxg-grff
rustsec.org/advisories/RUSTSEC-2021-0152.html

Code Behaviors & Features

Detect and mitigate GHSA-p7mj-xvxg-grff with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →