{"id":"GHSA-82hm-vh7g-hrh9","revision":"c9312c036162406697021de3d8349150","records":[{"revision":"c9312c036162406697021de3d8349150","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"GHSA-82hm-vh7g-hrh9","aliases":["CVE-2021-45697","GHSA-6p3c-v8vc-c244","RUSTSEC-2021-0103"],"title":"Partial read is incorrect in molecule","description":"### Impact\n\nAnyone who uses `total_size(..)` function to partial read the length of any `FixVec` will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release.\n\n### Workarounds\n\nIf you already have the whole `FixVec` `A`, you can use `A.as_slice().len()` to get the total size of the `FixVec`.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n- [Open an issue to ask use directly](https://github.com/nervosnetwork/molecule/issues/new).","state":0,"publishedAt":"2021-08-25T21:01:25+00:00","modifiedAt":"2023-11-08T04:07:22.503158+00:00","affected":[{"ecosystem":"crates.io","name":"molecule","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.7.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/nervosnetwork/molecule/security/advisories/GHSA-82hm-vh7g-hrh9","https://github.com/nervosnetwork/molecule/pull/49","https://github.com/nervosnetwork/molecule","https://rustsec.org/advisories/RUSTSEC-2021-0103.html"],"sourceUrl":"https://github.com/advisories/GHSA-82hm-vh7g-hrh9","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-82hm-vh7g-hrh9","identifiers":["GHSA-82hm-vh7g-hrh9","CVE-2021-45697","GHSA-6p3c-v8vc-c244","RUSTSEC-2021-0103"]},"retained":false,"historicalAffected":[]}],"coverage":[]}