Skip to content
OpenAdvisories

Package · crates.io

crayon

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    GHSA-xfhw-6mc4-mgxf

    crayon: ObjectPool creates uninitialized memory when freeing objects

    As of version 0.6.0, the ObjectPool explicitly creates an uninitialized instance of its type parameter when it attempts to free an object, and swaps it into the storage. This causes instant undefined behavior due to reading the uninitialized memory in order t…

    crayon crates.io
  • High 8.1
    CVE-2020-35889

    Memory safety violation in crayon

    An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike.

    crayon crates.io