high7.5
CVE-2020-36213
Update unsound DrainFilter and RString::retain
Impact
An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | abi_stable | < 0.9.1 | 0.9.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abi Stable Project | Abi Stable | before 0.9.1 |