https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:32:54 +0000 https://cve.radiocsirt.org/vuln/cve-2021-28028 <p>An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic.</p> <p>An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic.</p> https://cve.radiocsirt.org/vuln/cve-2021-28028 https://cve.radiocsirt.org/vuln/ghsa-wcvp-r8j8-47pc <p><strong>Affected:</strong> crates.io: toodee</p> <p>When inserting rows from an iterator at a particular index, toodee would shift items over, duplicating their ownership. The space reserved for the new elements was based on the len() returned by the ExactSizeIterator.</p> <p>This could result in elements in the array being freed twice if the iterator panics. Uninitialized or previously freed elements could also be exposed if the len() didn&#39;t match the number of elements.</p> <p>These issues were fixed in commit `ced70c17` by temporarily setting the length of the array smaller while processing it and adding assertions on the number of elements returned by the iterator.</p> <p><strong>Affected:</strong> crates.io: toodee</p> <p>When inserting rows from an iterator at a particular index, toodee would shift items over, duplicating their ownership. The space reserved for the new elements was based on the len() returned by the ExactSizeIterator.</p> <p>This could result in elements in the array being freed twice if the iterator panics. Uninitialized or previously freed elements could also be exposed if the len() didn&#39;t match the number of elements.</p> <p>These issues were fixed in commit `ced70c17` by temporarily setting the length of the array smaller while processing it and adding assertions on the number of elements returned by the iterator.</p> https://cve.radiocsirt.org/vuln/ghsa-wcvp-r8j8-47pc