{"id":"GHSA-2jq9-6xx7-3h29","summary":"`temporary` makes use of uninitialized memory","details":"Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, [`tempfile`](https://crates.io/crates/tempfile) is an alternative for this crate.\n","aliases":["RUSTSEC-2018-0022"],"modified":"2023-11-08T04:14:07.505706Z","published":"2022-08-11T18:10:52Z","database_specific":{"nvd_published_at":null,"cwe_ids":[],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2022-08-11T18:10:52Z"},"references":[{"type":"WEB","url":"https://github.com/stainless-steel/temporary/issues/2"},{"type":"PACKAGE","url":"https://github.com/stainless-steel/temporary"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2018-0022.html"}],"affected":[{"package":{"name":"temporary","ecosystem":"crates.io","purl":"pkg:cargo/temporary"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.3.0"},{"fixed":"0.6.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-2jq9-6xx7-3h29/GHSA-2jq9-6xx7-3h29.json"}}],"schema_version":"1.9.0"}