EUVD-2021-1508

Malware in sbrugna...

CVE-2021-29933

The CVE concerns the Rust crate insert_many (pre-2021-01-26). Affected behavior arises when resizing a vector used to insert items: the implementation moved items with ptr::copy, then iterated the provided Iterator; if the iterator’s next() panics, the elements may be dropped twice, causing doubl...