RUSTSEC-2025-0039

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0039

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0039.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2025-0039

Aliases

GHSA-pr59-jjr4-gcf6

Published

2025-05-06T12:00:00Z

Modified

2025-10-28T06:29:25.817320Z

Summary

Lack of sufficient checks in public API

Details

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::

AnonVec::get_ref()
AnonVec::get_mut()
AnonVec::remove_get()

The crate was built as a learning project and is not being maintained.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / anon-vec

Package

Name: anon-vec; View open source insights on deps.dev
Purl: pkg:cargo/anon-vec

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Ecosystem specific

{
    "affects": {
        "os": [],
        "arch": [],
        "functions": [
            "anon_vec::AnonVec::get_mut",
            "anon_vec::AnonVec::get_ref",
            "anon_vec::AnonVec::remove_get"
        ]
    },
    "affected_functions": null
}