DoS vunrability in aHash
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 1.2k
- Forks
- 544
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 45
Description
I would submit a pull request, but I was not sure how to format the patch versions section.
package = "ahash"
url = "https://github.com/tkaitchuck/aHash/issues/163"
categories = ["denial-of-service"]
arch = ["x86", "x86_64", "arm", "aarch64"]
Affected versions: 0.4.2 - 0.4.7, 0.5.0 - 0.5.10, 0.6.0 - 0.6.3, 0.7.0 - 0.7.6 and 0.8.0 - 0.8.3
Patch versions: 0.8.4, 0.7.7, and 0.4.8
Affected crate versions have been yanked.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No repository file or test is named. Start by locating the RustSec advisory entry for ahash and comparing nearby advisories for patch-version formatting; done means the affected and patched versions are recorded consistently and the advisory validates.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100