RUSTSEC-2019-0016: chttp: Use-after-free in buffer conversion implementation


The From implementation for Vec was not properly implemented, returning a vector backed by freed memory. This could lead to memory corruption or be exploited to cause undefined behavior.

A fix was published in version 0.1.3.

More Info

Patched Versions

Unaffected Versions