GHSA-8mv5-7x95-7wcf: `mopa` is technically unsound

June 17, 2022 (updated June 13, 2023)

The mopa crate redefines the deprecated TraitObject struct from core::raw like so:

References

github.com/advisories/GHSA-8mv5-7x95-7wcf
github.com/chris-morgan/mopa
github.com/chris-morgan/mopa/issues/13
rustsec.org/advisories/RUSTSEC-2021-0095.html

Code Behaviors & Features

Detect and mitigate GHSA-8mv5-7x95-7wcf with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →