GHSA-67r5-rqwv-9p9q

Source

https://github.com/advisories/GHSA-67r5-rqwv-9p9q

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-67r5-rqwv-9p9q/GHSA-67r5-rqwv-9p9q.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-67r5-rqwv-9p9q

Published

2025-03-31T16:13:34Z

Modified

2025-03-31T16:13:34Z

Severity

2.9 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

array-init-cursor is unsound when used with types that implement `Drop`

Details

The Drop implementation will get run twice when using the cursor.

This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.

This issue also does not affect you, if you are only depending on it through the crate planus.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-672"
    ],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2025-03-31T16:13:34Z"
}

References

Affected packages

crates.io / array-init-cursor

Package

Name: array-init-cursor; View open source insights on deps.dev
Purl: pkg:cargo/array-init-cursor

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.1