{"id":"GHSA-79m9-55jc-p6mw","aliases":["RUSTSEC-2025-0033"],"status":"published","title":"scanner has a Public API without sufficient bounds checking","description":"`Match::get()` and `Match::ptr()` lack sufficient bounds checks, leading to potential out of bounds reads.","severity":{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2025-03-27T12:00:00Z","modified":"2025-10-28T06:29:23Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"scanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.1.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"scanner","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.1.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"scanner","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://github.com/pombredanne/scanner-rs/pull/1","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0033.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-79m9-55jc-p6mw"},{"url":"https://github.com/pombredanne/scanner-rs","tags":["package"]},{"url":"https://crates.io/crates/scanner","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-79m9-55jc-p6mw","title":"scanner has a Public API without sufficient bounds checking","description":"`Match::get()` and `Match::ptr()` lack sufficient bounds checks, leading to potential out of bounds reads.","status":"published","published":"2025-05-07T15:26:32Z","modified":"2025-05-07T15:26:33Z","cvss":[{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:38:43.172412Z"}],"osv":[{"id":"GHSA-79m9-55jc-p6mw","title":"scanner has a Public API without sufficient bounds checking","description":"`Match::get()` and `Match::ptr()` lack sufficient bounds checks, leading to potential out of bounds reads.","status":"published","published":"2025-05-07T15:26:32Z","modified":"2025-10-28T06:29:23.563606Z","cvss":[{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"RUSTSEC-2025-0033","title":"Public API without sufficient bounds checking","description":"`Match::get()` and `Match::ptr()` lack sufficient bounds checks, leading to potential out of bounds reads.","status":"published","published":"2025-03-27T12:00:00Z","modified":"2025-10-28T06:29:23.563606Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}