Skip to content

← Public intelligence

crates.io package

abi_stable

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 7.5crates.ioPublished

    Update unsound DrainFilter and RString::retain

    CVE-2020-36212 · GHSA-vq23-5h4f-vwpv

    Affected
    • crates.io abi_stable < 0.9.1
    Fixed in
    0.9.1· Vendor fix available
    Issue
    An issue was discovered in the abistable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop.

    Recommended action: Upgrade to 0.9.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →
  2. High, CVSS 7.5crates.ioPublished

    Update unsound DrainFilter and RString::retain

    CVE-2020-36213 · GHSA-wqxc-qrq4-w5v4

    Affected
    • crates.io abi_stable < 0.9.1
    Fixed in
    0.9.1· Vendor fix available
    Issue
    An issue was discovered in the abistable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness.

    Recommended action: Upgrade to 0.9.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →