GHSA-2c6h-4899-wjxr: scaly: Multiple soundness issues in Rust safe APIs
Affected versions contain multiple safe APIs that can trigger undefined behavior:
Array<T>::indexcan perform an out-of-bounds read.String::get_lengthcan perform an out-of-bounds read.String::append_charactercan perform an invalid write.String::to_c_stringcan perform an out-of-bounds write.
These issues were reproduced against scaly 0.0.37 under Miri. The crate is unmaintained.
References
Code Behaviors & Features
Detect and mitigate GHSA-2c6h-4899-wjxr with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →