-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ouch | rust | < 0.3.1 | 0.3.1 |
The vulnerability description explicitly identifies convert_zip_date_time as containing the unsafe transmute operation. The GitHub issue stack trace shows the crash originating from this function (zip.rs:219), and multiple advisory sources confirm this as the root cause. While other functions like days_in_year_month are mentioned in crash reports, they appear to be victims of the uninitialized memory rather than the source of vulnerability. The combination of direct references in advisories, stack trace evidence, and unsafe code usage makes this identification high confidence.