VYPR

apk package

chainguard/jujutsu-docs

pkg:apk/chainguard/jujutsu-docs

Vulnerabilities (2)

  • CVE-2025-58160LowAug 29, 2025
    affected < 0.32.0-r2fixed 0.32.0-r2

    tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be i

  • CVE-2025-55159MedAug 11, 2025
    affected < 0.32.0-r1fixed 0.32.0-r1

    slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potentia