rkyv
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution | rkyv | Rust / Cargo | Medium | Fix reported | |
| Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc | rkyv | Rust / Cargo | Unknown | Fix reported | |
| Insufficient archive validation can cause out-of-bounds reads in archives containing hash tables | rkyv | Rust / Cargo | Unknown | Fix reported | |
| Crafted archives can cause a use-after-free during deserialization | rkyv | Rust / Cargo | Unknown | Fix reported | |
| Potential Undefined Behaviors in `Arc<T>`/`Rc<T>` impls of `from_value` on OOM | rkyv | Rust / Cargo | Unknown | Fix reported | |
| Use of uninitialized buffer in rkyv | rkyv | Rust / Cargo | High | Fix reported |