search

lucid-kv / lucid

High performance and distributed KV store w/ REST API. 🦀
https://clintnetwork.gitbook.io/lucid/
MIT License
373 stars 31 forks source link

RUSTSEC-2020-0146: arr! macro erases lifetimes #76

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

arr! macro erases lifetimes

Details
Package generic-array
Version 0.12.3
URL https://github.com/fizyk20/generic-array/issues/98
Date 2020-04-09
Patched versions >=0.14.0
Unaffected versions <0.8.0

Affected versions of this crate allowed unsoundly extending lifetimes using arr! macro. This may result in a variety of memory corruption scenarios, most likely use-after-free.

See advisory page for additional details.