rocket
Activity
- Latest release
- 2y ago
- Total releases
- 58
- Cadence
- ~20 days
- Last 12 months
- 0
Details
- License
- MIT OR Apache-2.0
- First release
- Dec 23, 2016
| Version | Released | |
|---|---|---|
0.5.1
unknown
|
0.5.1
unknown
Dependencies (34)
+ 26 more |
|
0.5.0
unknown
|
0.5.0
unknown
Dependencies (34)
+ 26 more |
|
0.5.0-rc.4
unknown
|
0.5.0-rc.4
unknown
Dependencies (34)
+ 26 more |
|
0.5.0-rc.3
unknown
|
0.5.0-rc.3
unknown
Dependencies (35)
+ 27 more |
|
0.4.11
unknown
|
0.4.11
unknown
Dependencies (14)
+ 6 more |
|
0.5.0-rc.2
unknown
|
0.5.0-rc.2
unknown
Dependencies (35)
+ 27 more |
|
0.5.0-rc.1
unknown
|
0.5.0-rc.1
unknown
Dependencies (34)
+ 26 more |
|
0.4.10
unknown
|
0.4.10
unknown
Dependencies (14)
+ 6 more |
|
0.4.9
unknown
|
0.4.9
unknown
Dependencies (14)
+ 6 more |
|
0.4.8
unknown
|
0.4.8
unknown
Dependencies (14)
+ 6 more |
|
0.4.7
unknown
|
0.4.7
unknown
Dependencies (14)
+ 6 more |
|
0.4.6
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.4.6
unknown
Dependencies (14)
+ 6 more |
|
0.4.5
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.4.5
unknown
Dependencies (14)
+ 6 more |
|
0.4.4
unknown
2 CVEs
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-35882
GHSA-8q2v-67v7-6vc6
RUSTSEC-2020-0028
Aug 25, 2021
Data races in rocket
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time. Fixed in
0.4.5
References Updated Nov 08, 2023 · Source: OSV.dev |
0.4.4
unknown
Dependencies (14)
+ 6 more |
|
0.4.3
unknown
2 CVEs
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-35882
GHSA-8q2v-67v7-6vc6
RUSTSEC-2020-0028
Aug 25, 2021
Data races in rocket
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time. Fixed in
0.4.5
References Updated Nov 08, 2023 · Source: OSV.dev |
0.4.3
unknown
Dependencies (14)
+ 6 more |
|
0.4.2
unknown
2 CVEs
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-35882
GHSA-8q2v-67v7-6vc6
RUSTSEC-2020-0028
Aug 25, 2021
Data races in rocket
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time. Fixed in
0.4.5
References Updated Nov 08, 2023 · Source: OSV.dev |
0.4.2
unknown
Dependencies (14)
+ 6 more |
|
0.4.1
unknown
2 CVEs
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-35882
GHSA-8q2v-67v7-6vc6
RUSTSEC-2020-0028
Aug 25, 2021
Data races in rocket
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time. Fixed in
0.4.5
References Updated Nov 08, 2023 · Source: OSV.dev |
0.4.1
unknown
Dependencies (14)
+ 6 more |
|
0.4.0
unknown
2 CVEs
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-35882
GHSA-8q2v-67v7-6vc6
RUSTSEC-2020-0028
Aug 25, 2021
Data races in rocket
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time. Fixed in
0.4.5
References Updated Nov 08, 2023 · Source: OSV.dev |
0.4.0
unknown
Dependencies (14)
+ 6 more |
|
0.4.0-rc.2
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.4.0-rc.2
unknown
Dependencies (14)
+ 6 more |
|
0.4.0-rc.1
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.4.0-rc.1
unknown
Dependencies (14)
+ 6 more |
|
0.4.0-rc
unknown
yanked
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.4.0-rc
unknown
yanked
Dependencies (14)
+ 6 more |
|
0.3.17
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.17
unknown
Dependencies (21)
+ 13 more |
|
0.3.16
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.16
unknown
Dependencies (21)
+ 13 more |
|
0.3.15
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.15
unknown
Dependencies (21)
+ 13 more |
|
0.3.14
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.14
unknown
Dependencies (21)
+ 13 more |
|
0.3.13
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.13
unknown
Dependencies (21)
+ 13 more |
|
0.3.12
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.12
unknown
Dependencies (21)
+ 13 more |
|
0.3.11
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.11
unknown
Dependencies (21)
+ 13 more |
|
0.3.10
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.10
unknown
Dependencies (21)
+ 13 more |
|
0.3.9
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.9
unknown
Dependencies (21)
+ 13 more |
|
0.3.8
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.8
unknown
Dependencies (21)
+ 13 more |
|
0.3.7
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.7
unknown
Dependencies (21)
+ 13 more |
|
0.3.6
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.6
unknown
Dependencies (21)
+ 13 more |
|
0.3.5
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.5
unknown
Dependencies (21)
+ 13 more |
|
0.3.4
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.4
unknown
Dependencies (21)
+ 13 more |
|
0.3.3
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.3
unknown
Dependencies (21)
+ 13 more |
|
0.2.11
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.11
unknown
Dependencies (13)
+ 5 more |
|
0.3.2
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.2
unknown
Dependencies (21)
+ 13 more |
|
0.3.1
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.1
unknown
Dependencies (21)
+ 13 more |
|
0.2.10
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.10
unknown
Dependencies (13)
+ 5 more |
|
0.3.0
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.0
unknown
Dependencies (21)
+ 13 more |
|
0.2.9
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.9
unknown
Dependencies (13)
+ 5 more |
|
0.2.8
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.8
unknown
Dependencies (13)
+ 5 more |
|
0.2.7
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.7
unknown
Dependencies (13)
+ 5 more |
|
0.2.6
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.6
unknown
Dependencies (13)
+ 5 more |
|
0.2.5
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.5
unknown
Dependencies (13)
+ 5 more |
|
0.2.4
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.4
unknown
Dependencies (13)
+ 5 more |
|
0.2.3
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.3
unknown
Dependencies (13)
+ 5 more |
|
0.2.2
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.2
unknown
Dependencies (13)
+ 5 more |
|
0.2.1
unknown
1 CVE
CVE-2021-29935
GHSA-vcw4-8ph6-7vw8
RUSTSEC-2021-0044
Aug 25, 2021
Use after free in Rocket
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop, however, a function f was called that could invoke a user provided function. If the user provided panicked, then the assumption used by the function was no longer true and the transmute to &'static would create an illegal static reference to the string. This could result in a freed string being used during (such as in a Drop implementation) or after (e.g through catch_unwind) the panic unwinding. This flaw was corrected in commit Fixed in
0.4.7
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.1
unknown
Dependencies (13)
+ 5 more |