blurhash
Activity
- Latest release
- 2y ago
- Total releases
- 6
- Cadence
- ~4 months
- Last 12 months
- 0
Details
- License
- Apache-2.0/MIT
- First release
- Jul 12, 2019
| Version | Released | |
|---|---|---|
0.2.3
unknown
|
0.2.3
unknown
Dependencies (5)
|
|
0.2.2
unknown
|
0.2.2
unknown
Dependencies (4)
|
|
0.2.1
unknown
|
0.2.1
unknown
Dependencies (4)
|
|
0.2.0
unknown
|
0.2.0
unknown
Dependencies (4)
|
|
0.1.1
unknown
1 CVE
CVE-2023-42447
GHSA-cxvp-82cq-57h2
RUSTSEC-2023-0083
Sep 21, 2023
blurhash panics on parsing crafted inputs
8.6
/ 10
High
Network
Low
None
None
Changed
None
None
High
ImpactThe blurhash parsing code may panic due to multiple panic-guarded out-of-bounds accesses on untrusted input. In a typical deployment, this may get triggered by feeding a maliciously crafted blurhashes over the network. These may include:
PatchesThe patches will be released under version 0.2.0, which requires user intervention because of slight API churn. Workaroundsn.a. Referencesn.a. Affected versions
0.1.1
Fixed in
0.2.0
References Updated Mar 16, 2026 · Source: OSV.dev |
0.1.1
unknown
Dependencies (1)
|
|
0.1.0
unknown
|
0.1.0
unknown
Dependencies (1)
|