wgp race condition in inner::drop

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

CVE-2025-47737

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...

CVE-2025-47735

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

CVE-2025-47737

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...

CVE-2025-47735

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

CVE-2025-47737

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...

CVE-2025-47735

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

PT-2025-20472 · Unknown · Trailer Crate

Name of the Vulnerable Software and Affected Versions: trailer crate versions 0.1.2 and earlier Description: The issue is related to the lib.rs file in the trailer crate for Rust, which mishandles allocating with a size of zero. Recommendations: For trailer crate version 0.1.2 and earlier, consid...

PT-2025-20470 · Wgp · Wgp

Name of the Vulnerable Software and Affected Versions: wgp crate versions 0.2.0 and earlier Description: The issue is related to the lack of drop slow thread synchronization in the inner::drop function within the inner.rs file of the wgp crate for Rust. This synchronization issue may lead to...

CVE-2025-47737

The vulnerability CVE-2025-47737 affects the trailer crate for Rust up to version 0.1.2, where lib.rs mishandles allocations of size zero. The issue is documented across multiple sources (GHSA-6X45-R4PR-5362, Red Hat RH CVE, OSV, PT-2025-20472) and is tied to zero-size allocation handling in the ...

CVE-2025-47735

CVE-2025-47735 affects the Rust wgp crate (versions 0.2.0 and earlier). The root cause is missing drop_slow thread synchronization in inner::drop (inner.rs), leading to a race condition in multithreaded contexts. Exploit details are not provided in the documents; remediation references suggest av...

CVE-2025-47735

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

CVE-2025-47737

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...

SUSE CVE-2024-58253

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value...

asn-tools (>=0.2.2 <=0.2.5), bitslideslib (>=0.1.1 <=0.1.2) +13 more potentially affected by unknown CVE via shaman (=0.1.0)

shaman CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - asn-tools =0.2.2, =0.1.1, =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...

RUSTSEC-2025-0039 Lack of sufficient checks in public API

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...

PT-2025-23486 · Crates.Io · Anon-Vec

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::get ref - AnonVec::get mut - AnonVec::remove get The crate was built as a learning project and is not being maintained...

RUSTSEC-2025-0163 Unsound issue in Trailer

Our static analyzer find a potential unsound issue in the construction of Trailer, where it doesn't provide enough check to ensure the soundness. trailer/src/lib.rs, Lines 18 to 25 in d474984: pub fn newcapacity: usize - Trailer unsafe let trailer = Trailer::allocatecapacity; let ptr = trailer.pt...

Unsound issue in Trailer

Our static analyzer find a potential unsound issue in the construction of Trailer, where it doesn't provide enough check to ensure the soundness. trailer/src/lib.rs, Lines 18 to 25 in d474984: pub fn newcapacity: usize - Trailer unsafe let trailer = Trailer::allocatecapacity; let ptr = trailer.pt...

CVE-2024-58253

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value...