PT-2024-40970 · Unknown · Get-Size-Derive

Published 2024-09-15 · Updated 2024-09-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions get-size-derive (affected versions not specified)

Description The maintainer of get-size-derive seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repository. Additionally, get-size-derive depends on a version of the crate attribute-derive that uses the yanked crate proc-macro-error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Related Identifiers

RUSTSEC-2024-0427

Affected Products

Get-Size-Derive

References · 4

• https://osv.dev/vulnerability/RUSTSEC-2024-0427 · Vendor Advisory
• https://github.com/DKerp/get-size/issues/22 · Note
• https://rustsec.org/advisories/RUSTSEC-2024-0427.html · Note
• https://crates.io/crates/get-size-derive · Note