{"id":"GHSA-g98v-hv3f-hcfr","summary":"atty potential unaligned read","details":"On windows, `atty` dereferences a potentially unaligned pointer.\n\nIn practice however, the pointer won't be unaligned unless a custom global allocator is used.\n\nIn particular, the `System` allocator on windows uses `HeapAlloc`, which guarantees a large enough alignment.\n\n# atty is Unmaintained\n\nA Pull Request with a fix has been provided over a year ago but the maintainer seems to be unreachable.\n\nLast release of `atty` was almost 3 years ago.\n\n## Possible Alternative(s)\n\nThe below list has not been vetted in any way and may or may not contain alternatives;\n\n- [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0\n- [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0\"\n","aliases":["RUSTSEC-2021-0145"],"modified":"2026-09-10T03:49:53.897184297Z","published":"2023-06-30T20:21:59Z","database_specific":{"nvd_published_at":null,"cwe_ids":[],"severity":"LOW","github_reviewed":true,"github_reviewed_at":"2023-06-30T20:21:59Z"},"references":[{"type":"WEB","url":"https://github.com/softprops/atty/issues/50"},{"type":"WEB","url":"https://github.com/softprops/atty/pull/51"},{"type":"PACKAGE","url":"https://github.com/softprops/atty"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2021-0145.html"}],"affected":[{"package":{"name":"atty","ecosystem":"crates.io","purl":"pkg:cargo/atty"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.2.14"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-g98v-hv3f-hcfr/GHSA-g98v-hv3f-hcfr.json"}}],"schema_version":"1.9.0"}