Skip to content
OpenAdvisories

Package · crates.io

onenote_parser

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.4

    Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

    Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted `.onetoc2` table-of-contents file can cause `Parser::parse_notebook` to open arbitrary files on the host filesystem outside the…