{ "schema_version": "1.4.0", "id": "GHSA-8xw8-mmqv-frqq", "modified": "2021-08-18T21:41:18Z", "published": "2021-08-25T20:55:33Z", "aliases": [], "summary": "fake-static allows converting any reference into a `'static` reference", "details": "fake-static allows converting a reference with any lifetime into\na reference with `'static` lifetime without the `unsafe` keyword.\n\nInternally, this crate does not use unsafe code, it instead\nexploits a soundness bug in rustc\n\n\n", "severity": [], "affected": [ { "package": { "ecosystem": "crates.io", "name": "fake-static" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "last_affected": "0.1.0" } ] } ] } ], "references": [ { "type": "WEB", "url": "https://github.com/rust-lang/rust/issues/25860" }, { "type": "PACKAGE", "url": "https://github.com/NieDzejkob/fake-static" }, { "type": "WEB", "url": "https://rustsec.org/advisories/RUSTSEC-2020-0013.html" } ], "database_specific": { "cwe_ids": [ "CWE-657" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2021-08-18T21:41:18Z", "nvd_published_at": null } }