VDB
MAL-2022-1
MAL-2022-1
PUBLISHED
Malicious code in rustdecimal (crates.io)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | rustdecimal | 0, 0, 0 |
Timeline
- Aug 11, 2022 CVE Published
- Jan 7, 2023 CVE Updated
References
- https://groups.google.com/g/rustlang-security-announcements/c/5DVtC8pgJLw?pli=1 url
- https://raw.globalsecuritydatabase.org/GSD-2022-1002520 url
- https://rustsec.org/advisories/RUSTSEC-2022-0042.html url
- https://github.com/advisories/GHSA-7pwq-f4pq-78gm vendor-advisory
- https://github.com/paupino/rust-decimal/issues/514#issuecomment-1115408888 discussion