GHSA-2jq9-6xx7-3h29

Suggest an improvement
Source
https://github.com/advisories/GHSA-2jq9-6xx7-3h29
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-2jq9-6xx7-3h29/GHSA-2jq9-6xx7-3h29.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-2jq9-6xx7-3h29
Aliases
Published
2022-08-11T18:10:52Z
Modified
2023-11-08T04:14:07.505706Z
Summary
`temporary` makes use of uninitialized memory
Details

Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, tempfile is an alternative for this crate.

Database specific 
{
    "nvd_published_at": null,
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2022-08-11T18:10:52Z"
}
References

Affected packages

crates.io / temporary

Package

Name
temporary
View open source insights on deps.dev
Purl
pkg:cargo/temporary

Affected ranges

Type
SEMVER
Events
Introduced
0.3.0
Fixed
0.6.4