Is lzf affected by GHSA-5m39-wx2q-mxg3?

crates.io lzf is affected in <0.3.2.

Is GHSA-5m39-wx2q-mxg3 being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

medium

GHSA-5m39-wx2q-mxg3

Q: Is GHSA-5m39-wx2q-mxg3 being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

crates.io · lzf

Summary

Invalid use of `mem::uninitialized` causes `use-of-uninitialized-value`

Severity: medium
Also known as: RUSTSEC-2022-0067
Published: 2022-11-08

References

https://github.com/badboy/lzf-rs/issues/9
https://github.com/badboy/lzf-rs/commit/b633bf265e41c60dfce3be7eac4e4dd5e18d06cf
https://github.com/badboy/lzf-rs

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.