N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-79m9-55jc-p6mw

GHSA-79m9-55jc-p6mw: scanner has a Public API without sufficient bounds checking

Match::get() and Match::ptr() lack sufficient bounds checks, leading to potential out of bounds reads.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-79m9-55jc-p6mw

GHSA-79m9-55jc-p6mw:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
scanner	rust	<= 0.1.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability description explicitly mentions Match::get() and Match::ptr() as lacking sufficient bounds checks. The provided commit 277de79e21477ebc2aa82247ffc2fcad1a5c9203 from the pull request modifies these two functions. While the patch doesn't add explicit bounds checks within these functions, it changes the visibility of the struct fields (haystack, at, store) they use from pub to pub(crate) and marks the functions themselves as unsafe. This change signals that these functions perform operations that can lead to memory safety issues (like out-of-bounds reads) if the preconditions are not met by the caller, and restricts direct access to the internal state that could be manipulated to cause such issues. The core logic of accessing memory via pointers and offsets without internal checks remains, thus these are the vulnerable functions where an out-of-bounds read could be triggered if called with crafted inputs or in a specific state.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.