Skip to content
OpenAdvisories

Package · crates.io

append-only-vec

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    RUSTSEC-2026-0262

    `append-only-vec` 0.1.9 was removed from crates.io due to a malicious dependency

    A new version of the `append-only-vec` crate was published with a direct dependency on `proc-macro1`, which would execute a malicious build script. The compromised version of this crate was published on 2026-08-20, and was removed approximately 107 minutes la…

    append-only-vec crates.io