GHSA-3rjw-m598-pq24 missing from the Rustsec Advisory DB
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 75/100
Research direction
Look at the existing advisory in the RustCrypto/utils repository under the security advisories section. Understand the format required by the Rustsec Advisory Database. Check how other advisories are submitted to Rustsec, likely via a pull request to their advisory-db repository. The task is to convert the existing advisory data into the Rustsec format, ensuring platform tags like 'aarch64' are included, and submit it.
Written by the indexing model from the issue text.
Description
I am relying on cargo deny to find all kinds of issues with my dependencies. So I was surprised to have a different tool find GHSA-3rjw-m598-pq24 here on Github where it is a lot less discoverable.
Is this intentional? I think it would make sense to additionally publish advisories on the Rustsec Advisory DB.
I think there it even could be tagged for the affected platforms (aarch64), which currently is only available for humans when reading the text.
- Dominant language
- Rust
- Stars
- 674
- Forks
- 170
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 10
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from RustCrypto/utils
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
RustCrypto/utils#1537 · 7 comments ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
RustCrypto/utils#1534 · 2 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 45/100
RustCrypto/utils#1529 · 4 comments ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
RustCrypto/utils#1510 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 45/100
RustCrypto/utils#1509 ·
All issues in RustCrypto/utils
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
BurntSushi/jiff#653 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
ZcashFoundation/zeeder#106 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
oxidize-rb/rb-sys#807 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
todo:ticket
Difficulty 2/5 1-2 days Newbie friendliness 74/100