{"id":"GHSA-mrrw-grhq-86gf","summary":"Ascii (crate) allows out-of-bounds array indexing in safe code","details":"Affected version of this crate had implementation of `From\u003c&mut AsciiStr\u003e` for `&mut [u8]` and `&mut str`. This can result in out-of-bounds array indexing in safe code.\n\nThe flaw was corrected in commit [8a6c779](https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc) by removing those impls.","aliases":["RUSTSEC-2023-0015"],"modified":"2026-07-16T19:00:21.951703667Z","published":"2023-02-28T20:30:10Z","database_specific":{"cwe_ids":["CWE-119"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2023-02-28T20:30:10Z","nvd_published_at":null},"references":[{"type":"WEB","url":"https://github.com/tomprogrammer/rust-ascii/issues/64"},{"type":"WEB","url":"https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc"},{"type":"PACKAGE","url":"https://github.com/tomprogrammer/rust-ascii"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2023-0015.html"}],"affected":[{"package":{"name":"ascii","ecosystem":"crates.io","purl":"pkg:cargo/ascii"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.7.0"},{"fixed":"0.9.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-mrrw-grhq-86gf/GHSA-mrrw-grhq-86gf.json"}}],"schema_version":"1.9.0"}