CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-27376
Critical (9.8) in nb-connect project nb-connect. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in nb-connect 1.0.3.
An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nb-connect_project:nb-connect
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rm4w-6696-r77p | crates.io | nb-connect | <1.0.3 | 1.0.3 |
| RUSTSEC-2021-0021 | crates.io | nb-connect | >=0.0.0-0 <1.0.3 | 1.0.3 |