mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish Advisories
GHSA-2w4w-4385-vh4h GHSA-6x45-r4pr-5362 GHSA-8m95-fffc-h4c5
This commit is contained in:
+27
-6
@@ -1,11 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-2w4w-4385-vh4h",
|
||||
"modified": "2025-05-09T06:32:36Z",
|
||||
"modified": "2025-05-09T15:53:26Z",
|
||||
"published": "2025-05-09T06:32:36Z",
|
||||
"aliases": [
|
||||
"CVE-2025-47735"
|
||||
],
|
||||
"summary": "wgp race condition in inner::drop",
|
||||
"details": "inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.",
|
||||
"severity": [
|
||||
{
|
||||
@@ -13,7 +14,27 @@
|
||||
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "crates.io",
|
||||
"name": "wgp"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"last_affected": "0.2.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
@@ -24,8 +45,8 @@
|
||||
"url": "https://github.com/Nugine/wgp/issues/1"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://crates.io/crates/wgp"
|
||||
"type": "PACKAGE",
|
||||
"url": "https://github.com/Nugine/wgp"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
@@ -33,8 +54,8 @@
|
||||
"CWE-362"
|
||||
],
|
||||
"severity": "LOW",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2025-05-09T15:53:26Z",
|
||||
"nvd_published_at": "2025-05-09T05:15:51Z"
|
||||
}
|
||||
}
|
||||
+29
-4
@@ -1,11 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-6x45-r4pr-5362",
|
||||
"modified": "2025-05-09T06:32:36Z",
|
||||
"modified": "2025-05-09T15:54:03Z",
|
||||
"published": "2025-05-09T06:32:36Z",
|
||||
"aliases": [
|
||||
"CVE-2025-47737"
|
||||
],
|
||||
"summary": "trailer mishandles allocating with a size of zero",
|
||||
"details": "lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.",
|
||||
"severity": [
|
||||
{
|
||||
@@ -13,7 +14,27 @@
|
||||
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "crates.io",
|
||||
"name": "trailer"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"last_affected": "0.1.2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
@@ -26,6 +47,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://crates.io/crates/trailer"
|
||||
},
|
||||
{
|
||||
"type": "PACKAGE",
|
||||
"url": "https://github.com/Geal/trailer"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
@@ -33,8 +58,8 @@
|
||||
"CWE-762"
|
||||
],
|
||||
"severity": "LOW",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2025-05-09T15:54:02Z",
|
||||
"nvd_published_at": "2025-05-09T05:15:51Z"
|
||||
}
|
||||
}
|
||||
+25
-4
@@ -1,11 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8m95-fffc-h4c5",
|
||||
"modified": "2025-05-09T06:32:36Z",
|
||||
"modified": "2025-05-09T15:53:43Z",
|
||||
"published": "2025-05-09T06:32:36Z",
|
||||
"aliases": [
|
||||
"CVE-2025-47736"
|
||||
],
|
||||
"summary": "libsql-sqlite3-parser crash due to invalid UTF-8 input",
|
||||
"details": "dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.",
|
||||
"severity": [
|
||||
{
|
||||
@@ -13,7 +14,27 @@
|
||||
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
|
||||
}
|
||||
],
|
||||
"affected": [],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "crates.io",
|
||||
"name": "libsql-sqlite3-parser"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "0"
|
||||
},
|
||||
{
|
||||
"last_affected": "0.13.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
@@ -41,8 +62,8 @@
|
||||
"CWE-228"
|
||||
],
|
||||
"severity": "LOW",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2025-05-09T15:53:43Z",
|
||||
"nvd_published_at": "2025-05-09T05:15:51Z"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user