no cvss
—
- cvss
- —
- not scored
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- —
- no score, EPSS covers CVEs only
- public exploits
- 0
- none known
Summary
Interledger family of crates is not being actively maintained anymore.
The owner of the published crate does not appear to be responsive.
There is an outstanding concern around username comparison.
This concern may or may not be resolved by bumping up the dependencies of the project.
Patch / fix
- github.com/interledger-rs/interledger-rs#744 pull request
Is RUSTSEC-2022-0050 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerAffected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| crates.io | interledger-packet | >=0.0.0-0 |
no fix listed |
References
Sources
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.