rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update gh-pages

Browse Source
This commit is contained in:
github-actions
2025-12-27 05:19:38 +00:00
parent eb311aaf03
commit f27ebfd8d9
4 changed files with 41 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
advisories/RUSTSEC-2025-0137.html
View File

@@ -88,6 +88,10 @@
December 24, 2025 December 24, 2025
</time> </time>
<time datetime="2025-12-27">
(last modified: December 27, 2025)
</time>
</dd> </dd>
<dt id="package">Package</dt> <dt id="package">Package</dt>
@@ -130,6 +134,19 @@
<dt id="aliases">Aliases</dt>
<dd>
<ul>
<li>
<a href="https://github.com/advisories/GHSA-9fjq-45qv-pcm7">GHSA-9fjq-45qv-pcm7</a>
</li>
</ul>
</dd>
<dt id="details">References</dt> <dt id="details">References</dt>

19
feed.xml
View File

@@ -217,7 +217,7 @@ NGI Zero Core grant program for rpgp.&lt;/p&gt;
&lt;/p&gt; &lt;/p&gt;
&lt;/article&gt;</content></entry><entry><title>RUSTSEC-2025-0137: Vulnerability in ruint</title><id>https://rustsec.org/advisories/RUSTSEC-2025-0137.html</id><updated>2025-12-24T12:00:00+00:00</updated><category term="memory-corruption"/><link href="https://rustsec.org/advisories/RUSTSEC-2025-0137.html" rel="alternate" type="text/html" title="RUSTSEC-2025-0137: Vulnerability in ruint"/><published>2025-12-24T12:00:00+00:00</published><summary xml:lang="en">Unsoundness of safe `reciprocal_mg10`</summary><content xml:lang="en" type="html"> &lt;article&gt; &lt;/article&gt;</content></entry><entry><title>RUSTSEC-2025-0137: Vulnerability in ruint</title><id>https://rustsec.org/advisories/RUSTSEC-2025-0137.html</id><updated>2025-12-27T12:00:00+00:00</updated><category term="memory-corruption"/><link href="https://rustsec.org/advisories/RUSTSEC-2025-0137.html" rel="alternate" type="text/html" title="RUSTSEC-2025-0137: Vulnerability in ruint"/><published>2025-12-24T12:00:00+00:00</published><summary xml:lang="en">Unsoundness of safe `reciprocal_mg10`</summary><content xml:lang="en" type="html"> &lt;article&gt;
&lt;span class=&quot;floating-menu&quot;&gt; &lt;span class=&quot;floating-menu&quot;&gt;
&lt;a href=&quot;https://github.com/RustSec/advisory-db/commits/main/crates/ruint/RUSTSEC-2025-0137.md&quot;&gt;History&lt;/a&gt; ⋅ &lt;a href=&quot;https://github.com/RustSec/advisory-db/commits/main/crates/ruint/RUSTSEC-2025-0137.md&quot;&gt;History&lt;/a&gt; ⋅
@@ -252,6 +252,10 @@ NGI Zero Core grant program for rpgp.&lt;/p&gt;
December 24, 2025 December 24, 2025
&lt;/time&gt; &lt;/time&gt;
&lt;time datetime=&quot;2025-12-27&quot;&gt;
(last modified: December 27, 2025)
&lt;/time&gt;
&lt;/dd&gt; &lt;/dd&gt;
&lt;dt id=&quot;package&quot;&gt;Package&lt;/dt&gt; &lt;dt id=&quot;package&quot;&gt;Package&lt;/dt&gt;
@@ -294,6 +298,19 @@ NGI Zero Core grant program for rpgp.&lt;/p&gt;
&lt;dt id=&quot;aliases&quot;&gt;Aliases&lt;/dt&gt;
&lt;dd&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;a href=&quot;https://github.com/advisories/GHSA-9fjq-45qv-pcm7&quot;&gt;GHSA-9fjq-45qv-pcm7&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/dd&gt;
&lt;dt id=&quot;details&quot;&gt;References&lt;/dt&gt; &lt;dt id=&quot;details&quot;&gt;References&lt;/dt&gt;

4
js/index.js
View File

File diff suppressed because one or more lines are too long

6
packages/ruint.json
View File

@@ -1,9 +1,11 @@
[ [
{ {
"id": "RUSTSEC-2025-0137", "id": "RUSTSEC-2025-0137",
"modified": "2025-12-24T15:19:06Z", "modified": "2025-12-27T05:19:26Z",
"published": "2025-12-22T12:00:00Z", "published": "2025-12-22T12:00:00Z",
"aliases": [], "aliases": [
"GHSA-9fjq-45qv-pcm7"
],
"related": [], "related": [],
"summary": "Unsoundness of safe `reciprocal_mg10`", "summary": "Unsoundness of safe `reciprocal_mg10`",
"details": "The function `reciprocal_mg10` is marked as safe but can trigger undefined behavior (out-of-bounds access) because it relies on `debug_assert!` for safety checks instead of `assert!`.\n\nWhen compiled in release mode, the `debug_assert!` is optimized out, potentially allowing invalid inputs to cause memory corruption.", "details": "The function `reciprocal_mg10` is marked as safe but can trigger undefined behavior (out-of-bounds access) because it relies on `debug_assert!` for safety checks instead of `assert!`.\n\nWhen compiled in release mode, the `debug_assert!` is optimized out, potentially allowing invalid inputs to cause memory corruption.",