baoyachi / shadow-rs

A build-time information stored in your rust project.(binary,lib,cdylib,dylib)
https://docs.rs/shadow-rs
MIT License
444 stars 40 forks source link

Memory corruption, denial of service, and arbitrary code execution in libgit2 #154

Closed thinkgos closed 5 months ago

thinkgos commented 6 months ago

see https://github.com/rust-lang/git2-rs/pull/1017, this cause security audit failure. upgrade git2 to version 0.18.2 can solve this.

thinkgos commented 5 months ago

The main branch has been updated! closed