Advisories for Cargo/Tremor-Script package

2022

Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`

Affected versions of this crate maintains references to memory that might have been freed already. If affects the following two tremor-script language constructs: A Merge where we assign the result back to the target expression and the expression to be merged needs to reference the event: let state = merge state of event end; A Patch where we assign the result back to the target expression and the patch operations …

2021