https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T06:53:08.977683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ghsa-xrv3-jmcp-374j GHSA-xrv3-jmcp-374j — zerovec incorrectly uses `#[repr(packed)]` 2026-10-15T06:53:08.978669+00:00

Affected: crates.io: zerovec

The affected versions make unsafe memory accesses under the assumption that `#[repr(packed)]` has a guaranteed field order.

The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 (1.80.0-beta) starts reordering fields of `#[repr(packed)]` structs, leading to illegal memory accesses.

The patched versions `0.9.7` and `0.10.4` use `#[repr(C, packed)]`, which guarantees field order.