Skip to content

add unsoundness of indradb-lib#2197

Closed
shinmao wants to merge 4 commits intorustsec:mainfrom
shinmao:indradb-lib
Closed

add unsoundness of indradb-lib#2197
shinmao wants to merge 4 commits intorustsec:mainfrom
shinmao:indradb-lib

Conversation

@shinmao
Copy link
Contributor

@shinmao shinmao commented Jan 18, 2025

No description provided.

@shinmao
Copy link
Contributor Author

shinmao commented Aug 11, 2025

Hi, I want to follow up about this PR since this should pass the period of waiting package author's response

@djc
Copy link
Member

djc commented Aug 12, 2025

Responded on the upstream issue, let's give it a week or so.

@shinmao
Copy link
Contributor Author

shinmao commented Aug 17, 2025

Thanks for approval from the developers. We can move forward to release the advisories 👍

keywords = ["out-of-bounds"]

[versions]
patched = [">= 4.0.0"]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As I understand it, only version 5.0.0 and up have been patched, not 4.0.0+.

@shinmao shinmao closed this by deleting the head repository Dec 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants