Description
An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | yottadb | < 1.2.0 | 1.2.0 | GHSA-9658-c26v-7qvf |
| crates.io | yottadb | >= 0.0.0-0, < 1.2.0 | 1.2.0 | RUSTSEC-2021-0022 |