Skip to content
OpenAdvisories

Package · crates.io

borsh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-fjx5-qpf4-xjf2

    Parsing borsh messages with ZST which are not-copy/clone is unsound

    Affected versions of borsh cause undefined behavior when zero-sized-types (ZST) are parsed and the Copy/Clone traits are not implemented/derived. For instance if 1000 instances of a ZST are deserialized, and the ZST is not copy (this can be achieved through a…

    borsh crates.io