[Nehliin]

Affected crate(s)

• vortex-bittorrent (72)

Links to upstream issue(s) or PR(s)

Nehliin/vortex#164

Severity

This allows mallicious torrents to create or overwrite arbitrary files on the system that vortex-bittorrent can access. This may result in RCE or potentially result in privilege escalation. I put in FormatInjection as my category though, let me know if you want me to change that.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

[djc]

This crate doesn't meet our notability criteria:

#wg-secure-code > Minimum notability criteria?