PT-2022-37421 · Unknown · Interledger

Published 2022-08-04 · Updated 2022-08-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Interledger (affected versions not specified)

Description The Interledger family of crates is no longer actively maintained, and the owner of the published crate is unresponsive. There is a concern regarding username comparison, which may or may not be resolved by updating the project's dependencies.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2022-0050

Affected Products

Interledger

References · 5

• https://osv.dev/vulnerability/RUSTSEC-2022-0050 · Vendor Advisory
• https://github.com/interledger-rs/interledger-rs/pull/744 · Note
• https://github.com/interledger-rs/interledger-rs/issues/745 · Note
• https://rustsec.org/advisories/RUSTSEC-2022-0050.html · Note
• https://crates.io/crates/interledger-packet · Note