Publish Advisories

GHSA-2w4w-4385-vh4h
GHSA-6x45-r4pr-5362
GHSA-8m95-fffc-h4c5
This commit is contained in:
advisory-database[bot]
2025-05-09 15:54:55 +00:00
parent c6956b5d3b
commit 99fa29e4a3
3 changed files with 81 additions and 14 deletions
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2w4w-4385-vh4h",
"modified": "2025-05-09T06:32:36Z",
"modified": "2025-05-09T15:53:26Z",
"published": "2025-05-09T06:32:36Z",
"aliases": [
"CVE-2025-47735"
],
"summary": "wgp race condition in inner::drop",
"details": "inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.",
"severity": [
{
@@ -13,7 +14,27 @@
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [],
"affected": [
{
"package": {
"ecosystem": "crates.io",
"name": "wgp"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.2.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
@@ -24,8 +45,8 @@
"url": "https://github.com/Nugine/wgp/issues/1"
},
{
"type": "WEB",
"url": "https://crates.io/crates/wgp"
"type": "PACKAGE",
"url": "https://github.com/Nugine/wgp"
}
],
"database_specific": {
@@ -33,8 +54,8 @@
"CWE-362"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-05-09T15:53:26Z",
"nvd_published_at": "2025-05-09T05:15:51Z"
}
}
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6x45-r4pr-5362",
"modified": "2025-05-09T06:32:36Z",
"modified": "2025-05-09T15:54:03Z",
"published": "2025-05-09T06:32:36Z",
"aliases": [
"CVE-2025-47737"
],
"summary": "trailer mishandles allocating with a size of zero",
"details": "lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.",
"severity": [
{
@@ -13,7 +14,27 @@
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"affected": [
{
"package": {
"ecosystem": "crates.io",
"name": "trailer"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.1.2"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
@@ -26,6 +47,10 @@
{
"type": "WEB",
"url": "https://crates.io/crates/trailer"
},
{
"type": "PACKAGE",
"url": "https://github.com/Geal/trailer"
}
],
"database_specific": {
@@ -33,8 +58,8 @@
"CWE-762"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-05-09T15:54:02Z",
"nvd_published_at": "2025-05-09T05:15:51Z"
}
}
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8m95-fffc-h4c5",
"modified": "2025-05-09T06:32:36Z",
"modified": "2025-05-09T15:53:43Z",
"published": "2025-05-09T06:32:36Z",
"aliases": [
"CVE-2025-47736"
],
"summary": "libsql-sqlite3-parser crash due to invalid UTF-8 input",
"details": "dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.",
"severity": [
{
@@ -13,7 +14,27 @@
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"affected": [
{
"package": {
"ecosystem": "crates.io",
"name": "libsql-sqlite3-parser"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.13.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
@@ -41,8 +62,8 @@
"CWE-228"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2025-05-09T15:53:43Z",
"nvd_published_at": "2025-05-09T05:15:51Z"
}
}