GitHub Advisoryadvisory · crates.io

GHSA-466c-pfvv-v83g wrflib has a soundness issue and is unmaintained

LOW Published 2025-10-03 Modified 2025-10-03 Official page ↗
Ecosystem
crates.io
Packages
wrflib
Severity
Low
Weaknesses
CWE-119
Reviewed
2025-10-03

Affected packages

• crates.io wrflib: <= 0.0.3 (no fix yet)

Description

All functions under `wrflib::byte_extract` are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter. `wrflib` is unmaintained.

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References