RUSTSEC-2026-0267 Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free)

BitVecCore::clear drops every occupied element with dropinplace and only afterwards clears the occupancy bits and resets len. If an element's Drop panics, those metadata updates are skipped, so the slot of the already-dropped element stays marked as occupied. BitVecCore::drop calls clear again,...

descartes (0.1.20), michelangelo (>=0.1.0, <=0.2.5) potentially affected by unknown CVE via stable-vec (0.3.2)

stable-vec CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on stable-vec and may be impacted: - descartes 0.1.20 - michelangelo =0.1.0, =0.2.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0267...

Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free)

BitVecCore::clear drops every occupied element with dropinplace and only afterwards clears the occupancy bits and resets len. If an element's Drop panics, those metadata updates are skipped, so the slot of the already-dropped element stays marked as occupied. BitVecCore::drop calls clear again,...