{"id":"GHSA-f2wx-xjfw-xjv6","summary":"topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all","details":"### Summary\nhttps://github.com/advisories/GHSA-mc8h-8q98-g5hr\nhttps://github.com/XAMPPRocky/remove_dir_all/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead\n\n`tempfile` v0.4.26 ships with affected `remove_dir_all` v0.5.3 and so blocks my deployment of v12 to openSUSE distribution because it imposes a clean `cargo audit`\n\nUpdating `tempfile` is warranted","modified":"2023-07-17T18:21:58Z","published":"2023-07-17T18:21:58Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2023-07-17T18:21:58Z","nvd_published_at":null,"cwe_ids":["CWE-367"],"severity":"LOW"},"references":[{"type":"WEB","url":"https://github.com/topgrade-rs/topgrade/security/advisories/GHSA-f2wx-xjfw-xjv6"},{"type":"WEB","url":"https://github.com/XAMPPRocky/remove_dir_all/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-mc8h-8q98-g5hr"},{"type":"PACKAGE","url":"https://github.com/topgrade-rs/topgrade"},{"type":"WEB","url":"https://github.com/topgrade-rs/topgrade/releases/tag/v12.0.0"}],"affected":[{"package":{"name":"topgrade","ecosystem":"crates.io","purl":"pkg:cargo/topgrade"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"12.0.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-f2wx-xjfw-xjv6/GHSA-f2wx-xjfw-xjv6.json","last_known_affected_version_range":"\u003c= 12.0.0"}}],"schema_version":"1.9.0"}