Skip to content
OpenAdvisories

Package · crates.io

capnp

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical —

    Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema

    The safe API functions `constant::Reader::get` and `StructSchema::new` rely on `PointerReader::get_root_unchecked`, which can cause undefined behavior (UB) by constructing arbitrary words or schemas. ## `Reader::get` ```rust pub fn get(&self) -> Result<<T as …