{"id":"GHSA-67r5-rqwv-9p9q","aliases":["RUSTSEC-2025-0019"],"url":"https://o3.security/vulnerability/GHSA-67r5-rqwv-9p9q","summary":"array-init-cursor is unsound when used with types that implement `Drop`","details":"The `Drop` implementation will get run twice when using the cursor.\n\nThis issue does not affect you, if you are using only using the crate with types that are `Copy` such as `u8`.\n\nThis issue also does not affect you, if you are only depending on it through the crate `planus`.","published":"2025-03-31T16:13:34Z","modified":"2025-10-28T06:29:23.375894Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"array-init-cursor","fixedVersion":"0.2.1"}],"fix":{"url":"https://github.com/planus-org/planus/pull/294","label":"planus-org/planus#294"},"references":[{"type":"WEB","url":"https://github.com/planus-org/planus/issues/293"},{"type":"WEB","url":"https://github.com/planus-org/planus/pull/294"},{"type":"PACKAGE","url":"https://github.com/planus-org/planus"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0019.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-10-28T06:29:23.375894Z"}}