guion (>=0.1.0, <=0.2.0-dev2), guion_sdl2 (>=0.1.0, <=0.2.0-dev2) potentially affected by CVE-2021-26954 via qwutils (>=0.1.1, <=0.2.0)

qwutils CARGO version =0.1.1, =0.1.0, =0.1.0, =0.2.0-dev2 Source cves: CVE-2021-26954 Source advisory: OSV:GHSA-68P4-PJPF-XWCQ...

CVE-2021-26954

CVE-2021-26954 affects the Rust crate qwutils prior to 0.3.1. When a Clone panic occurs, the function insert_slice_clone can perform a double drop (and potentially a double-free) due to temporary ownership duplication during insertion into a Vec. The root cause is related to how ownership is hand...

guion (>=0.1.0, <=0.2.0-dev2), guion_sdl2 (>=0.1.0, <=0.2.0-dev2) potentially affected by CVE-2021-26954 via qwutils (>=0.1.1, <=0.2.0)

qwutils CARGO version =0.1.1, =0.1.0, =0.1.0, =0.2.0-dev2 Source cves: CVE-2021-26954 Source advisory: OSV:RUSTSEC-2021-0018...