VYPR

crates.io package

nano_arena

pkg:cargo/nano_arena

Vulnerabilities (1)

  • CVE-2021-28032Mar 5, 2021
    affected < 0.5.2fixed 0.5.2

    An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at because two mutable references can exist for the same element, if Borrow behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free