Product

crates.io miniscript vulnerabilities

1 published CVE affecting crates.io miniscript, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest crates.io miniscript CVEs

Newest publication first

CVE-2024-44073 Miniscript allows stack consumption
Published 2024-08-19

HighCVSS 7.5 EPSS 0.63%

The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

crates.io miniscript vulnerabilities

Latest crates.io miniscript CVEs

CVE-2024-44073 Miniscript allows stack consumption