GHSA-pr59-jjr4-gcf6

Source

https://github.com/advisories/GHSA-pr59-jjr4-gcf6

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-pr59-jjr4-gcf6/GHSA-pr59-jjr4-gcf6.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-pr59-jjr4-gcf6

Aliases

RUSTSEC-2025-0039

Published

2025-06-05T00:39:55Z

Modified

2025-10-28T06:29:25.817320Z

Summary

anon-vec lacks sufficient checks in public API

Details

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::

AnonVec::get_ref()
AnonVec::get_mut()
AnonVec::remove_get()

The crate was built as a learning project and is not being maintained.

Database specific

{
    "github_reviewed": true,
    "severity": "LOW",
    "github_reviewed_at": "2025-06-05T00:39:55Z",
    "cwe_ids": [
        "CWE-20"
    ],
    "nvd_published_at": null
}

References

Affected packages

crates.io / anon-vec

Package

Name: anon-vec; View open source insights on deps.dev
Purl: pkg:cargo/anon-vec

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.1.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-pr59-jjr4-gcf6/GHSA-pr59-jjr4-gcf6.json"