Security advisory for the regex crate (CVE-2022-24713) | Rust Blog

This page summarizes the projects mentioned and recommended in the original post on /r/rust

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • go

    The Go programming language

    It's worth pointing out that another recent regex security issue happened in Go, but AFAIK it was a DoS-level one and not a memory safety problem: https://github.com/golang/go/issues/51112

  • rust_x

    List of Rust packages that are de facto standard library packages

    Your link was broken (spurious backslash) should be: https://github.com/Timmmm/rust_x/wiki/De-facto-Rust-standard-library-packages

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  • stdx

    The missing batteries of Rust

    As an example of the above, if you're not aware of it already, you might find brson/stdx interesting.

  • rustsec

    RustSec API & Tooling

    It uses the RustSec database maintained by the Rust Secure Code Working Group.

  • regex

    An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs.

    The fix is at https://github.com/rust-lang/regex/commit/ae70b41d4f46641dbc45c7a4f87954aea356283e. It's actually an interesting technical read.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts