CLEANSTART-2026-GX06770 Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate

CVE-2026-6654 affects multiple packages. Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. See references for individual vulnerability details...

CVE-2026-6654

Double-Free / Use-After-Free UAF in the "IntoIter::drop" and "ThinVec::clear" functions in the thinvec crate. A panic in "ptr::dropinplace" skips setting the length to zero...

CVE-2026-6654: Double Free

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...