Skip to content

Commit c5edacf

Browse files
1 parent ef53359 commit c5edacf

File tree

1 file changed

+29
-4
lines changed

1 file changed

+29
-4
lines changed

advisories/unreviewed/2025/05/GHSA-v2p5-q653-9j99/GHSA-v2p5-q653-9j99.json renamed to advisories/github-reviewed/2025/05/GHSA-v2p5-q653-9j99/GHSA-v2p5-q653-9j99.json

Lines changed: 29 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,40 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-v2p5-q653-9j99",
4-
"modified": "2025-05-02T21:30:43Z",
4+
"modified": "2025-05-05T17:25:08Z",
55
"published": "2025-05-02T21:30:43Z",
66
"aliases": [
77
"CVE-2024-58253"
88
],
9+
"summary": "obfstr Type Confusion vulnerability",
910
"details": "In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.",
1011
"severity": [
1112
{
1213
"type": "CVSS_V3",
1314
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
1415
}
1516
],
16-
"affected": [],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "crates.io",
21+
"name": "obfstr"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "0.4.4"
32+
}
33+
]
34+
}
35+
]
36+
}
37+
],
1738
"references": [
1839
{
1940
"type": "ADVISORY",
@@ -23,6 +44,10 @@
2344
"type": "WEB",
2445
"url": "https://github.com/CasualX/obfstr/issues/60"
2546
},
47+
{
48+
"type": "PACKAGE",
49+
"url": "https://github.com/CasualX/obfstr"
50+
},
2651
{
2752
"type": "WEB",
2853
"url": "https://github.com/CasualX/obfstr/compare/v0.4.3...v0.4.4"
@@ -33,8 +58,8 @@
3358
"CWE-843"
3459
],
3560
"severity": "LOW",
36-
"github_reviewed": false,
37-
"github_reviewed_at": null,
61+
"github_reviewed": true,
62+
"github_reviewed_at": "2025-05-05T17:25:08Z",
3863
"nvd_published_at": "2025-05-02T20:15:19Z"
3964
}
4065
}

0 commit comments

Comments
 (0)