High · 7.5 CVE-2021-45701 CVE-2021-45702EUVD-2022-0669GHSA-3pp4-64mp-9cg9GHSA-9qvw-46gf-4fv8GHSA-q2x5-6q7q-r872RUSTSEC-2021-0111

Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free.

Ecosystem	Package	Affected	Fixed	Record
crates.io	tremor-script	>= 0.7.2, < 0.11.6	0.11.6	GHSA-3pp4-64mp-9cg9
crates.io	tremor-script	>= 0.7.3-0, < 0.11.6	0.11.6	RUSTSEC-2021-0111