https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:20:55.976328+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-17263 cnvd-2021-17263 2026-10-08T09:20:55.979938+00:00 cnvd-2021-17263 https://cve.radiocsirt.org/vuln/euvd-2026-25764 EUVD-2026-25764 2026-10-08T09:20:55.979970+00:00 EUVD-2026-25764 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28031 fkie_cve-2021-28031 2026-10-08T09:20:55.979985+00:00

An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function.

 https://cve.radiocsirt.org/vuln/ghsa-3qm2-rfqw-fmrw GHSA-3qm2-rfqw-fmrw — move_elements can double-free objects on panic 2026-10-08T09:20:55.980013+00:00

Affected: crates.io: scratchpad

Affected versions of scratchpad used ptr::read to read elements while calling a user provided function f on them. Since the pointer read duplicates ownership, a panic inside the user provided f function could cause a double free when unwinding.

The flaw was fixed in commit `891561bea` by removing the unsafe block and using a plain iterator.

 https://cve.radiocsirt.org/vuln/gsd-2021-28031 gsd-2021-28031 2026-10-08T09:20:55.980037+00:00 gsd-2021-28031 https://cve.radiocsirt.org/vuln/rustsec-2021-0030 RUSTSEC-2021-0030 — move_elements can double-free objects on panic 2026-10-08T09:20:55.980049+00:00

Affected: crates.io: scratchpad

Affected versions of `scratchpad` used `ptr::read` to read elements while calling a user provided function `f` on them.

Since the pointer read duplicates ownership, a panic inside the user provided `f` function could cause a double free when unwinding.

The flaw was fixed in commit `891561bea` by removing the unsafe block and using a plain iterator.