Vulnerabilites #42

New Issue

2025-12-11T15:51:07-05:00

mysticmomba commented

2025-12-11 15:51:07 -05:00

Crate: ring
Version: 0.16.20
Title: Some AES functions may panic when overflow checking is enabled.
Date: 2025-03-06
ID: RUSTSEC-2025-0009
URL: https://rustsec.org/advisories/RUSTSEC-2025-0009
Solution: Upgrade to >=0.17.12
Dependency tree:
ring 0.16.20
└── rustls 0.20.9
└── tokio-rustls 0.23.4
└── tonic 0.8.3
├── opentelemetry-proto 0.1.0
│ ├── opentelemetry-otlp 0.11.0
│ │ └── airlock_libs 5.2.2
│ └── airlock_libs 5.2.2
├── opentelemetry-otlp 0.11.0
└── airlock_libs 5.2.2

Crate: rustls
Version: 0.20.9
Title: rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input
Date: 2024-04-19
ID: RUSTSEC-2024-0336
URL: https://rustsec.org/advisories/RUSTSEC-2024-0336
Severity: 7.5 (high)
Solution: Upgrade to >=0.23.5 OR >=0.22.4, <0.23.0 OR >=0.21.11, <0.22.0
Dependency tree:
rustls 0.20.9
└── tokio-rustls 0.23.4
└── tonic 0.8.3
├── opentelemetry-proto 0.1.0
│ ├── opentelemetry-otlp 0.11.0
│ │ └── airlock_libs 5.2.2
│ └── airlock_libs 5.2.2
├── opentelemetry-otlp 0.11.0
└── airlock_libs 5.2.2

Crate: ring Version: 0.16.20 Title: Some AES functions may panic when overflow checking is enabled. Date: 2025-03-06 ID: RUSTSEC-2025-0009 URL: https://rustsec.org/advisories/RUSTSEC-2025-0009 Solution: Upgrade to >=0.17.12 Dependency tree: ring 0.16.20 └── rustls 0.20.9 └── tokio-rustls 0.23.4 └── tonic 0.8.3 ├── opentelemetry-proto 0.1.0 │ ├── opentelemetry-otlp 0.11.0 │ │ └── airlock_libs 5.2.2 │ └── airlock_libs 5.2.2 ├── opentelemetry-otlp 0.11.0 └── airlock_libs 5.2.2 Crate: rustls Version: 0.20.9 Title: `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input Date: 2024-04-19 ID: RUSTSEC-2024-0336 URL: https://rustsec.org/advisories/RUSTSEC-2024-0336 Severity: 7.5 (high) Solution: Upgrade to >=0.23.5 OR >=0.22.4, <0.23.0 OR >=0.21.11, <0.22.0 Dependency tree: rustls 0.20.9 └── tokio-rustls 0.23.4 └── tonic 0.8.3 ├── opentelemetry-proto 0.1.0 │ ├── opentelemetry-otlp 0.11.0 │ │ └── airlock_libs 5.2.2 │ └── airlock_libs 5.2.2 ├── opentelemetry-otlp 0.11.0 └── airlock_libs 5.2.2

mysticmomba added this to the Version 1.0.0 Release milestone 2025-12-11 15:51:07 -05:00

mysticmomba added the bug label 2025-12-11 15:51:07 -05:00

mysticmomba self-assigned this 2025-12-11 15:51:07 -05:00

mysticmomba commented

2025-12-11 15:51:27 -05:00