Description
An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | nb-connect | < 1.0.3 | 1.0.3 | GHSA-rm4w-6696-r77p |
| crates.io | nb-connect | >= 0.0.0-0, < 1.0.3 | 1.0.3 | RUSTSEC-2021-0021 |