CVE-2018-20999

Name of the Vulnerable Software and Affected Versions orion crate versions prior to 0.11.2

Description An issue in the orion crate causes incorrect results when reset() is called without first finalizing the streaming state. This occurs because the state is not properly reset. The flaw was corrected by changing the behavior of the reset() call to not check if the state had already been reset.

Recommendations For versions prior to 0.11.2, update to version 0.11.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the reset() function without first finalizing the streaming state to minimize the risk of incorrect results.