Files
vuln-osv/data/crates.io/RUSTSEC-2025-0019.json
T

1 line
1.3 KiB
JSON

{"schema_version":"1.7.3","id":"RUSTSEC-2025-0019","published":"2025-03-27T12:00:00Z","modified":"2025-10-28T06:29:23.375894Z","aliases":["GHSA-67r5-rqwv-9p9q"],"summary":"`array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop`","details":"The `Drop` implementation will get run twice when using the cursor.\n\nThis issue does not affect you, if you are using only using the crate with\ntypes that are `Copy` such as `u8`.\n\nThis issue also does not affect you, if you are only depending on it through\nthe crate `planus`.","affected":[{"package":{"name":"array-init-cursor","ecosystem":"crates.io","purl":"pkg:cargo/array-init-cursor"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.2.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["memory-corruption"],"cvss":null,"informational":"unsound","source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0019.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/array-init-cursor"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2025-0019.html"},{"type":"REPORT","url":"https://github.com/planus-org/planus/issues/293"}],"database_specific":{"license":"CC0-1.0"}}