PT-2024-40968 · Unknown+1 · Proc-Macro-Error+3

Published 2024-09-15 · Updated 2024-09-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions get-size (affected versions not specified)

Description The maintainer of get-size seems to be unreachable, with no commits or releases for 1 year and no activity on the GitHub repository. get-size depends on get-size-derive 0.1.3, which uses attribute-derive ^0.6, a version of the crate that uses the yanked crate proc-macro-error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2024-0425

Affected Products

Attribute-Derive

Get-Size

Get-Size-Derive

Proc-Macro-Error

References · 4

• https://osv.dev/vulnerability/RUSTSEC-2024-0425 · Vendor Advisory
• https://github.com/DKerp/get-size/issues/22 · Note
• https://rustsec.org/advisories/RUSTSEC-2024-0425.html · Note
• https://crates.io/crates/get-size · Note