Skip to content
OpenAdvisories

Package · crates.io

pyo3

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High —

    PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators

    PyO3 0.24.0 added optimized implementations of `Iterator::nth` and `DoubleEndedIterator::nth_back` for the `BoundListIterator` and `BoundTupleIterator` types. These implementations computed the target index using unchecked `usize` addition (`index + n`) befor…

  • High —

    PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature

    PyO3 0.28.1 added support for `#[pyclass(extends=PyList)] struct NativeSub` (and other native types) when targeting Python 3.12 and up with the `abi3` feature. It was discovered that subclasses of such classes would use the type of the subclass when attemptin…