GHSA-67r5-rqwv-9p9q
array-init-cursor is unsound when used with types that implement `Drop`
GHSA-67r5-rqwv-9p9q is a low vulnerability (CVSS 2.9) in array-init-cursor, published March 27, 2025. No source lists public exploit code. Fixed in array-init-cursor 0.2.1.
- Severity
- 2.9 LowCVSS 4.0, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.2.1array-init-cursor +1 more
Description
The Drop implementation will get run twice when using the cursor.
This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.
This issue also does not affect you, if you are only depending on it through the crate planus.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Affected packages
| Package | Affected | Fixed |
|---|---|---|
array-init-cursorcrates.io | before 0.2.1 | 0.2.1 |
array-init-cursorcrates.io | 0.0.0-0 up to 0.2.1 | 0.2.1 |
What each source reports
GitHub Advisories Score used
array-init-cursor is unsound when used with types that implement `Drop`
The Drop implementation will get run twice when using the cursor.
This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.
This issue also does not affect you, if you are only depending on it through the crate planus.
- Record
GHSA-67r5-rqwv-9p9q- CVSS 4.0
- 2.9 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P - Weakness
- CWE-672
- Updated
- 2026-11-02
OSV
array-init-cursor is unsound when used with types that implement `Drop`
The Drop implementation will get run twice when using the cursor.
This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.
This issue also does not affect you, if you are only depending on it through the crate planus.
- Record
GHSA-67r5-rqwv-9p9q- CVSS 4.0
- 2.9 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P - Weakness
- CWE-672
- Updated
- 2026-11-02
OSVRUSTSEC-2025-0019No score
`array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop`
The Drop implementation will get run twice when using the cursor.
This issue does not affect you, if you are using only using the crate with
types that are Copy such as u8.
This issue also does not affect you, if you are only depending on it through
the crate planus.
- Record
RUSTSEC-2025-0019- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.