| Package | Affected versions | Patched versions |
|---|---|---|
| bzip2 | < 0.4.4 | 0.4.4 |
The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free