rustsec / advisory-db

Security advisory database for Rust crates published through crates.io
https://rustsec.org
Other
904 stars 354 forks source link

UB fixed in smallvec >= 1.13.2 #1960

Open gendx opened 4 months ago

gendx commented 4 months ago

According to https://github.com/servo/rust-smallvec/issues/343, the smallvec crate had undefined behavior in the Smallvec::insert() function in versions >= 1.8.1, <= 1.13.1 (https://github.com/servo/rust-smallvec/issues/343#issuecomment-2010314421).

Given the number of downloads and crates depending on it, it's probably worth recording it in the advisory database.