https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:27:22 +0000 https://cve.radiocsirt.org/vuln/cve-2025-55159 <p><strong>Affected:</strong> tokio-rs slab</p> <p>slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab&#39;s capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has been fixed in slab 0.4.11. A workaround for this issue involves to avoid using get_disjoint_mut with indices that might be beyond the slab&#39;s actual length.</p> <p><strong>Affected:</strong> tokio-rs slab</p> <p>slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab&#39;s capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has been fixed in slab 0.4.11. A workaround for this issue involves to avoid using get_disjoint_mut with indices that might be beyond the slab&#39;s actual length.</p> https://cve.radiocsirt.org/vuln/cve-2025-55159 https://cve.radiocsirt.org/vuln/ghsa-qx2v-8332-m4fv <p><strong>Affected:</strong> crates.io: slab</p> <p>### Impact</p> <p>The `get_disjoint_mut` method in slab v0.4.10 incorrectly checked if indices were within the slab&#39;s capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes.</p> <p>### Patches</p> <p>This has been fixed in slab v0.4.11.</p> <p>### Workarounds</p> <p>Avoid using `get_disjoint_mut` with indices that might be beyond the slab&#39;s actual length, or upgrade to v0.4.11 or later.</p> <p>### References</p> <p>- [https://github.com/tokio-rs/slab/pull/152](https://github.com/tokio-rs/slab/pull/152)</p> <p><strong>Affected:</strong> crates.io: slab</p> <p>### Impact</p> <p>The `get_disjoint_mut` method in slab v0.4.10 incorrectly checked if indices were within the slab&#39;s capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes.</p> <p>### Patches</p> <p>This has been fixed in slab v0.4.11.</p> <p>### Workarounds</p> <p>Avoid using `get_disjoint_mut` with indices that might be beyond the slab&#39;s actual length, or upgrade to v0.4.11 or later.</p> <p>### References</p> <p>- [https://github.com/tokio-rs/slab/pull/152](https://github.com/tokio-rs/slab/pull/152)</p> https://cve.radiocsirt.org/vuln/ghsa-qx2v-8332-m4fv