What is GHSA-8xw8-mmqv-frqq?

GHSA-8xw8-mmqv-frqq is a security advisory published by GitHub Security Advisories with High severity. fake-static allows converting any reference into a `'static` reference

Why does GHSA-8xw8-mmqv-frqq have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-8xw8-mmqv-frqq?

GHSA-8xw8-mmqv-frqq affects 1 product, including: rust/fake-static:\u003c= 0.1.0.

GHSA-8xw8-mmqv-frqqHighDisclosed before NVD

fake-static allows converting any reference into a `'static` reference

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

January 11, 2023

📋 Description

fake-static allows converting a reference with any lifetime into a reference with 'static lifetime without the unsafe keyword.

Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc

🎯 Affected products1

rust/fake-static:<= 0.1.0

🔗 References (3)

https://github.com/rust-lang/rust/issues/25860
https://rustsec.org/advisories/RUSTSEC-2020-0013.html
https://github.com/advisories/GHSA-8xw8-mmqv-frqq