debian/rust-failure vulnerabilities

Latest debian/rust-failure CVEs

Newest publication first

1. CVE-2019-25010 Rust Failure Crate Vulnerable to Type confusion

   Published 2020-12-31

   Critical·CVSS 9.8 EPSS 1.5%

   An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when private_get_type_id is overridden.

2. CVE-2020-25575 Type confusion if __private_get_type_id__ is overriden

   Published 2020-09-14

   Critical·CVSS 9.8 EPSS 2.9%

   An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE:...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.