Skip to content
OpenAdvisories

Package · crates.io

bumpalo

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-f85w-wvc7-crwc

    bumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`

    In affected versions of this crate, the lifetime of the iterator produced by `Vec::into_iter()` is not constrained to the lifetime of the `Bump` that allocated the vector's memory. Using the iterator after the `Bump` is dropped causes use-after-free accesses.…

    bumpalo crates.io