{"id":"GHSA-m2xr-2vj4-wh94","aliases":["RUSTSEC-2025-0031"],"url":"https://o3.security/vulnerability/GHSA-m2xr-2vj4-wh94","summary":"tanton_engine has unsound public API","details":"The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary\nchecks in public API:\n\n- `Stack::offset()`\n- `ThreadStack::get()`\n- `RootMoveList::insert_score_depth()`\n- `RootMoveList::insert_score()`\n\nThe tanton_engine crate is no longer maintained, so there are no plans to fix this issue.","published":"2025-05-06T16:44:30Z","modified":"2025-10-28T06:29:25.372902Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"tanton_engine","fixedVersion":null}],"fix":null,"references":[{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0031.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-10-28T06:29:25.372902Z"}}