Skip to content
OpenAdvisories

Package · crates.io

nanorand

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2021-45705

    Aliased mutable references from `tls_rand` & `TlsWyRand`

    An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer.

    nanorand crates.io
  • Medium 5.1
    CVE-2020-35926

    Improper random number generation in nanorand

    An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled.

    nanorand crates.io