GitHub Advisoryadvisory · crates.io

GHSA-pr59-jjr4-gcf6 anon-vec lacks sufficient checks in public API

LOW Published 2025-06-05 Modified 2025-06-05 Official page ↗
Ecosystem
crates.io
Packages
anon-vec
Severity
Low
Weaknesses
CWE-20
Reviewed
2025-06-05

Affected packages

• crates.io anon-vec: <= 0.1.1 (no fix yet)

Description

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: • `AnonVec::get_ref()` • `AnonVec::get_mut()` • `AnonVec::remove_get()` The crate was built as a learning project and is not being maintained.

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References