GitHub Advisoryadvisory · crates.io
GHSA-2jq9-6xx7-3h29 `temporary` makes use of uninitialized memory
MEDIUM
Official page ↗
- Ecosystem
- crates.io
- Packages
- temporary
- Severity
- Moderate
- Reviewed
- 2022-08-11
Affected packages
• crates.io temporary: >= 0.3.0, < 0.6.4 → fixed in 0.6.4
Description
Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, `tempfile` is an alternative for this crate.