Description
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | libp2p-deflate | < 0.27.1 | 0.27.1 | GHSA-gvcp-948f-8f2p |
| crates.io | libp2p-deflate | >= 0.0.0-0, < 0.27.1 | 0.27.1 | RUSTSEC-2020-0123 |