Description
An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | postscript | < 0.14.0 | 0.14.0 | GHSA-fhvc-gp6c-h2wx |
| crates.io | postscript | >= 0.0.0-0, < 0.14.0 | 0.14.0 | RUSTSEC-2021-0017 |