What is GHSA-mrrw-grhq-86gf?

GHSA-mrrw-grhq-86gf is a security advisory published by GitHub Security Advisories with Medium severity. Ascii (crate) allows out-of-bounds array indexing in safe code

Why does GHSA-mrrw-grhq-86gf have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-mrrw-grhq-86gf?

GHSA-mrrw-grhq-86gf affects 1 product, including: rust/ascii:\u003e= 0.7.0, \u003c 0.9.3.

GHSA-mrrw-grhq-86gfMediumDisclosed before NVD

Ascii (crate) allows out-of-bounds array indexing in safe code

Vendor

GitHub Security Advisories

Published

February 28, 2023

Last Modified

July 16, 2026

📋 Description

Affected version of this crate had implementation of From<&mut AsciiStr> for &mut [u8] and &mut str. This can result in out-of-bounds array indexing in safe code.

The flaw was corrected in commit 8a6c779 by removing those impls.

🎯 Affected products1

rust/ascii:>= 0.7.0, < 0.9.3

🔗 References (4)

https://github.com/tomprogrammer/rust-ascii/issues/64
https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc
https://rustsec.org/advisories/RUSTSEC-2023-0015.html
https://github.com/advisories/GHSA-mrrw-grhq-86gf