Skip to content
OpenAdvisories

Package · crates.io

zerovec-derive

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.2
    GHSA-74r5-g7vc-j2v2

    zerovec-derive incorrectly uses `#[repr(packed)]`

    The affected versions make unsafe memory accesses under the assumption that `#[repr(packed)]` has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 (1.80.0-beta) starts reordering field…

    zerovec-derive crates.io