pyo3 (crates.io)
Advisories
15
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.29.0 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p pyo3 --precise 0.29.0Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-chgr-c6px-7xpp PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures |
Medium | < 0.29.0 | 0.29.0 |
| GHSA-36hh-v3qg-5jq4 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators |
High | < 0.29.0 | 0.29.0 |
| GHSA-36hh-v3qg-5jq4 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators |
High | >= 0.24.0, < 0.29.0 | 0.29.0 |
| GHSA-chgr-c6px-7xpp PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures |
Medium | >= 0.0.0-0, < 0.29.0 | 0.29.0 |
| GHSA-47qc-857f-7w7f PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature |
High | >= 0.28.0, < 0.28.2 | 0.28.2 |
| GHSA-47qc-857f-7w7f PyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature |
High | >= 0.28.0, < 0.28.2 | 0.28.2 |
| GHSA-pph8-gcv7-4qj5 PyO3 Risk of buffer overflow in `PyString::from_object` |
Low | >= 0.1.0, < 0.24.1 | 0.24.1 |
| GHSA-pph8-gcv7-4qj5 PyO3 Risk of buffer overflow in `PyString::from_object` |
Low | >= 0.0.0-0, < 0.24.1 | 0.24.1 |
| GHSA-vxcf-c7mx-pg53 Build corruption when using `PYO3_CONFIG_FILE` environment variable |
Medium | >= 0.23.0, < 0.23.3 | 0.23.3 |
| GHSA-vxcf-c7mx-pg53 Build corruption when using `PYO3_CONFIG_FILE` environment variable |
Medium | >= 0.23.0, < 0.23.3 | 0.23.3 |
| GHSA-f8x4-f32r-w556 Duplicate Advisory: PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references Withdrawn |
Medium | >= 0.22.0, < 0.22.4 | 0.22.4 |
| GHSA-6jgw-rgmm-7cv6 PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references |
Medium EPSS 0.21% |
>= 0.22.0, < 0.22.4 | 0.22.4 |
| GHSA-6jgw-rgmm-7cv6 PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references |
Medium EPSS 0.21% |
>= 0.22.0, < 0.22.4 | 0.22.4 |
| GHSA-2vx6-fcw6-hpr6 Reference counting error in pyo3 |
Medium EPSS 0.39% |
>= 0.12.0, < 0.12.4 | 0.12.4 |
| GHSA-2vx6-fcw6-hpr6 Reference counting error in pyo3 |
Medium EPSS 0.39% |
>= 0.12.0, < 0.12.4 | 0.12.4 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor