Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

miniscript

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 high
Registry
crates.io

Advisories 1

  • The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth.

    Affected: from 12.0.0, fixed in 12.2.0; from 11.0.0, fixed in 11.2.0; from 10.0.0, fixed in 10.2.0; fixed in 9.2.0.