GitHub Advisoryadvisory · crates.io

GHSA-95hm-pr6q-298w fast-able is vulnerable to DoS attack through insecure method

HIGH Published 2025-09-15 Modified 2025-09-15 Official page ↗
Ecosystem
crates.io
Packages
fast-able
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weaknesses
CWE-125
Reviewed
2025-09-15

Affected packages

• crates.io fast-able: < 1.13.7 → fixed in 1.13.7

Description

The public accessible struct SyncVec has a public safe method get_unchecked. It accept a parameter index and used in the get_unchecked without sufficient checks as mentioned here.

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References