Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1nY2g1LWh3cWYtbXhocM4AA069

Unsoundness in `intern` methods on `intaglio` symbol interners

Affected versions of this crate have a stacked borrows violation when creating
references to interned contents. All interner types are affected.

The flaw was corrected in version 1.9.0 by reordering move and borrowing
operations and storing interned contents by raw pointer instead of as a Box.

Permalink: https://github.com/advisories/GHSA-gch5-hwqf-mxhp
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nY2g1LWh3cWYtbXhocM4AA069
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: 9 months ago
Updated: 9 months ago

Identifiers: GHSA-gch5-hwqf-mxhp
References:

• https://github.com/artichoke/intaglio/pull/236
• https://rustsec.org/advisories/RUSTSEC-2023-0048.html
• https://github.com/advisories/GHSA-gch5-hwqf-mxhp

Repository: https://github.com/artichoke/intaglio
Blast Radius: 0.0

Affected Packages