diff --git a/crates/anon-vec/RUSTSEC-0000-0000.md b/crates/anon-vec/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..a131589ff --- /dev/null +++ b/crates/anon-vec/RUSTSEC-0000-0000.md @@ -0,0 +1,22 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "anon-vec" +date = "2025-05-06" +informational = "unsound" +url = "https://github.com/RylanYancey/anon-vec" +categories = ["memory-corruption"] + +[affected.functions] +"anon-vec::AnonVec::get_ref" = ["<= 0.1.1"] +"anon-vec::AnonVec::get_mut" = ["<= 0.1.1"] +"anon-vec::AnonVec::remove_get" = ["<= 0.1.1"] + +[versions] +patched = [] +unaffected = [] +``` + +# soundness issue and unmaintained +`anon-vec::AnonVec::get_ref`, `anon-vec::AnonVec::get_mut`, and `anon-vec::AnonVec::remove_get` lack of sufficient checks to its parameter index and used unsafely to get element. +`anon-vec` is unmaintained. \ No newline at end of file