{"id":"GHSA-466c-pfvv-v83g","summary":"wrflib has a soundness issue and is unmaintained","details":"All functions under `wrflib::byte_extract` are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter.\n\n`wrflib` is unmaintained.","aliases":["RUSTSEC-2025-0072"],"modified":"2025-10-28T06:29:22.855364Z","published":"2025-10-03T19:25:09Z","database_specific":{"severity":"LOW","github_reviewed":true,"github_reviewed_at":"2025-10-03T19:25:09Z","nvd_published_at":null,"cwe_ids":["CWE-119"]},"references":[{"type":"PACKAGE","url":"https://github.com/cruise-automation/webviz-rust-framework"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0072.html"}],"affected":[{"package":{"name":"wrflib","ecosystem":"crates.io","purl":"pkg:cargo/wrflib"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.0.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-466c-pfvv-v83g/GHSA-466c-pfvv-v83g.json"}}],"schema_version":"1.9.0"}