Description
An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext HTTP.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | portaudio | <= 0.7.0 | — | GHSA-pq6v-x7gp-7776 |
| crates.io | portaudio | >= 0.0.0-0 | — | RUSTSEC-2016-0003 |