neon

Version	Released
`1.1.2` patch	Oct 02, 2026
`1.2.0-alpha.0` unknown	Dec 05, 2025
`1.1.1` unknown	May 23, 2025
`1.1.0` unknown	May 23, 2025
`1.1.0-alpha.2` unknown	May 02, 2025
`1.1.0-alpha.1` unknown	Oct 07, 2024
`1.1.0-alpha.0` unknown	May 31, 2024
`1.0.0` unknown	Feb 23, 2024
`1.0.0-alpha.4` unknown	Apr 14, 2023
`1.0.0-alpha.3` unknown	Apr 14, 2023
`1.0.0-alpha.2` unknown	Nov 11, 2022
`1.0.0-alpha.1` unknown	Jul 11, 2022
`1.0.0-alpha.0` unknown yanked	Jul 11, 2022
`0.10.1` unknown	May 23, 2022
`0.10.0` unknown 1 CVE	Mar 07, 2022
`0.10.0-alpha.3` unknown 1 CVE	Dec 08, 2021
`0.10.0-alpha.2` unknown 1 CVE	Sep 17, 2021
`0.10.0-alpha.1` unknown 1 CVE	Aug 30, 2021
`0.10.0-alpha.0` unknown yanked 1 CVE	Aug 30, 2021
`0.9.1-legacy` unknown 1 CVE	Aug 26, 2021
`0.9.1` unknown 1 CVE	Aug 26, 2021
`0.9.0` unknown 1 CVE	Jul 26, 2021
`0.8.3-napi` unknown 1 CVE	Jun 02, 2021
`0.8.3` unknown 1 CVE	Jun 02, 2021
`0.8.2-napi` unknown 1 CVE	May 18, 2021
`0.8.2` unknown 1 CVE	May 18, 2021
`0.8.1-napi` unknown 1 CVE	Apr 30, 2021
`0.8.1` unknown 1 CVE	Apr 30, 2021
`0.8.0-napi` unknown	Mar 23, 2021
`0.8.0` unknown 1 CVE	Mar 23, 2021
`0.7.1-napi` unknown	Feb 04, 2021
`0.7.1` unknown	Feb 04, 2021
`0.7.0-napi.3` unknown	Jan 06, 2021
`0.7.0-napi.2` unknown	Jan 05, 2021
`0.7.0-napi.1` unknown	Jan 05, 2021
`0.7.0-napi` unknown	Jan 05, 2021
`0.7.0` unknown	Jan 05, 2021
`0.6.0-napi` unknown	Dec 09, 2020
`0.6.0` unknown	Dec 09, 2020
`0.5.3-napi` unknown	Nov 24, 2020
`0.5.3` unknown	Nov 24, 2020
`0.5.2` unknown	Nov 16, 2020
`0.5.1-napi` unknown	Oct 28, 2020
`0.5.1` unknown	Oct 28, 2020
`0.5.0` unknown	Oct 12, 2020
`0.4.2-napi.2` unknown	Sep 23, 2020
`0.4.2-napi.1` unknown yanked	Sep 23, 2020
`0.4.2` unknown yanked	Sep 23, 2020
`0.4.2-napi` unknown yanked	Sep 23, 2020
`0.4.1` unknown yanked	Sep 18, 2020

1.1.2 patch

Oct 02, 2026

1.2.0-alpha.0 unknown

Dec 05, 2025

1.1.1 unknown

May 23, 2025

1.1.0 unknown

May 23, 2025

1.1.0-alpha.2 unknown

May 02, 2025

1.1.0-alpha.1 unknown

Oct 07, 2024

1.1.0-alpha.0 unknown

May 31, 2024

1.0.0 unknown

Feb 23, 2024

1.0.0-alpha.4 unknown

Apr 14, 2023

1.0.0-alpha.3 unknown

Apr 14, 2023

1.0.0-alpha.2 unknown

Nov 11, 2022

1.0.0-alpha.1 unknown

Jul 11, 2022

1.0.0-alpha.0 unknown yanked

Jul 11, 2022

0.10.1 unknown

May 23, 2022

0.10.0 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Mar 07, 2022

0.10.0-alpha.3 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Dec 08, 2021

0.10.0-alpha.2 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Sep 17, 2021

0.10.0-alpha.1 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Aug 30, 2021

0.10.0-alpha.0 unknown yanked

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Aug 30, 2021

0.9.1-legacy unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Aug 26, 2021

0.9.1 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Aug 26, 2021

0.9.0 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Jul 26, 2021

0.8.3-napi unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Jun 02, 2021

0.8.3 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Jun 02, 2021

0.8.2-napi unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

May 18, 2021

0.8.2 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

May 18, 2021

0.8.1-napi unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Apr 30, 2021

0.8.1 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Apr 30, 2021

0.8.0-napi unknown

Mar 23, 2021

0.8.0 unknown

1 CVE

GHSA-8mj7-wxmc-f424 RUSTSEC-2022-0028 Jun 17, 2022

Use after free in Neon external buffers

High

Neon provides functionality for creating JavaScript ArrayBuffer (and the Buffer subtype) instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from types that may be freed while they are still referenced by a JavaScript ArrayBuffer.

The following example demonstrates use after free. It compiles on versions <0.10.1 and fails to compile afterward.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];
    
    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

Fixed in


          0.10.1

References

Updated Nov 08, 2023 · Source: OSV.dev

Mar 23, 2021

0.7.1-napi unknown

Feb 04, 2021

0.7.1 unknown

Feb 04, 2021

0.7.0-napi.3 unknown

Jan 06, 2021

0.7.0-napi.2 unknown

Jan 05, 2021

0.7.0-napi.1 unknown

Jan 05, 2021

0.7.0-napi unknown

Jan 05, 2021

0.7.0 unknown

Jan 05, 2021

0.6.0-napi unknown

Dec 09, 2020

0.6.0 unknown

Dec 09, 2020

0.5.3-napi unknown

Nov 24, 2020

0.5.3 unknown

Nov 24, 2020

0.5.2 unknown

Nov 16, 2020

0.5.1-napi unknown

Oct 28, 2020

0.5.1 unknown

Oct 28, 2020

0.5.0 unknown

Oct 12, 2020

0.4.2-napi.2 unknown

Sep 23, 2020

0.4.2-napi.1 unknown yanked

Sep 23, 2020

0.4.2 unknown yanked

Sep 23, 2020

0.4.2-napi unknown yanked

Sep 23, 2020

0.4.1 unknown yanked

Sep 18, 2020

Activity

Details