GHSA-2jq9-6xx7-3h29
Suggest an improvement- Source
- https://github.com/advisories/GHSA-2jq9-6xx7-3h29
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-2jq9-6xx7-3h29/GHSA-2jq9-6xx7-3h29.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-2jq9-6xx7-3h29
- Aliases
- Published
- 2022-08-11T18:10:52Z
- Modified
- 2023-11-08T04:14:07.505706Z
- Summary
- `temporary` makes use of uninitialized memory
- Details
-
Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, <code>tempfile</code> is an alternative for this crate.
- Database specific
{ "nvd_published_at": null, "severity": "MODERATE", "cwe_ids": [], "github_reviewed_at": "2022-08-11T18:10:52Z", "github_reviewed": true }- References
Affected packages
crates.io / temporary
Package
- Name
- temporary
- View open source insights on deps.dev
- Purl
- pkg:cargo/temporary