advisory-db icon indicating copy to clipboard operation
advisory-db copied to clipboard
verified publisher icon rustsec

UB fixed in smallvec >= 1.13.2

Open gendx opened this issue 1 year ago • 0 comments

According to https://github.com/servo/rust-smallvec/issues/343, the smallvec crate had undefined behavior in the Smallvec::insert() function in versions >= 1.8.1, <= 1.13.1 (https://github.com/servo/rust-smallvec/issues/343#issuecomment-2010314421).

Given the number of downloads and crates depending on it, it's probably worth recording it in the advisory database.

gendx avatar May 15 '24 21:05 gendx