{"id":"GHSA-g98v-hv3f-hcfr","aliases":["RUSTSEC-2021-0145"],"url":"https://o3.security/vulnerability/GHSA-g98v-hv3f-hcfr","summary":"atty potential unaligned read","details":"On windows, `atty` dereferences a potentially unaligned pointer.\n\nIn practice however, the pointer won't be unaligned unless a custom global allocator is used.\n\nIn particular, the `System` allocator on windows uses `HeapAlloc`, which guarantees a large enough alignment.\n\n# atty is Unmaintained\n\nA Pull Request with a fix has been provided over a year ago but the maintainer seems to be unreachable.\n\nLast release of `atty` was almost 3 years ago.\n\n## Possible Alternative(s)\n\nThe below list has not been vetted in any way and may or may not contain alternatives;\n\n- [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0\n- [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0\"\n","published":"2023-06-30T20:21:59Z","modified":"2026-09-10T03:49:53.897184297Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"atty","fixedVersion":null}],"fix":{"url":"https://github.com/softprops/atty/pull/51","label":"softprops/atty#51"},"references":[{"type":"WEB","url":"https://github.com/softprops/atty/issues/50"},{"type":"WEB","url":"https://github.com/softprops/atty/pull/51"},{"type":"PACKAGE","url":"https://github.com/softprops/atty"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2021-0145.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-10T03:49:53.897184297Z"}}