debian/rust-pyo3 vulnerabilities

Latest debian/rust-pyo3 CVEs

Newest publication first

1. CVE-2024-9979 Pyo3: risk of use-after-free in `borrowed` reads from python weak references

   Published 2024-10-15

   Medium·CVSS 5.3 EPSS 0.21%

   A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak Python references.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.