LowFix available
xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release
Type: advisorySource: OSV
I have a minimized safe Rust witness for xxhash-rust 0.8.15. Safe public route: xxhash_rust::xxh3::xxh3_64_with_secret(&[0x41], &[]) The caller-side harness contains no unsafe code. Under release execution, the intern…
Products: xxhash-rust