Skip to content
OpenAdvisories

Package · crates.io

gix-attributes

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-cx7h-h87r-jpgr

    The kstring integration in gix-attributes is unsound

    `gix-attributes` (in [`state::ValueRef`](https://github.com/Byron/gitoxide/blob/gix-attributes-v0.22.2/gix-attributes/src/state.rs#L19-L27)) unsafely creates a `&str` from a `&[u8]` containing non-UTF8 data, with the justification that so long as nothing read…

    gix-attributes crates.io