GitHub Advisoryadvisory · crates.io

GHSA-7vjm-6qgq-3mrq Shaman has soundness issues and is unmaintained

LOW Published 2025-11-03 Modified 2025-11-03 Official page ↗
Ecosystem
crates.io
Packages
shaman
Severity
Low
Reviewed
2025-11-03

Affected packages

• crates.io shaman: <= 0.1.0 (no fix yet)

Description

`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero. `shaman` is unmaintained.

References