GHSA-w3vw-ccc5-qr8v: Use After Free in Context::start_auth_session

June 17, 2022

This issue only applies to applications starting authorization sessions using an explicit initial nonce.

References

github.com/advisories/GHSA-w3vw-ccc5-qr8v
github.com/parallaxsecond/rust-tss-esapi
github.com/parallaxsecond/rust-tss-esapi/security/advisories/GHSA-w3vw-ccc5-qr8v

Code Behaviors & Features

Detect and mitigate GHSA-w3vw-ccc5-qr8v with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →