https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:26:42.952368+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-17265 cnvd-2021-17265 2026-10-08T19:26:42.956578+00:00 cnvd-2021-17265 https://cve.radiocsirt.org/vuln/euvd-2026-25769 EUVD-2026-25769 2026-10-08T19:26:42.956610+00:00 EUVD-2026-25769 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28029 fkie_cve-2021-28029 2026-10-08T19:26:42.956624+00:00

An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations.

 https://cve.radiocsirt.org/vuln/ghsa-xm9m-2vj8-fmfr GHSA-xm9m-2vj8-fmfr — Uninitialized memory access in toodee 2026-10-08T19:26:42.956653+00:00

Affected: crates.io: toodee

An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations.

 https://cve.radiocsirt.org/vuln/gsd-2021-28029 gsd-2021-28029 2026-10-08T19:26:42.956675+00:00 gsd-2021-28029 https://cve.radiocsirt.org/vuln/rustsec-2021-0028 RUSTSEC-2021-0028 — Multiple memory safety issues in insert_row 2026-10-08T19:26:42.956687+00:00

Affected: crates.io: toodee

When inserting rows from an iterator at a particular index, `toodee` would shift items over, duplicating their ownership. The space reserved for the new elements was based on the `len()` returned by the `ExactSizeIterator`.

This could result in elements in the array being freed twice if the iterator panics. Uninitialized or previously freed elements could also be exposed if the `len()` didn't match the number of elements.

These issues were fixed in commit `ced70c17` by temporarily setting the length of the array smaller while processing it and adding assertions on the number of elements returned by the iterator.