RUSTSEC-2023-0126
Aliasing violation in `OrdSet` insertion
Inserting into an im::OrdSet (for example by collecting an iterator into one) can violate
Rust's aliasing rules: Miri reports a stacked borrows violation in
sized_chunks::Chunk::force_copy(), which is called during insertion, where a shared borrow
is invalidated by a unique borrow before the read through it completes.
This is undefined behavior, reachable from safe code.
No fixed version is available, as the crate is unmaintained; its GitHub repository was archived by the owner on 2026-05-03.
What each source reports
OSV No score
Aliasing violation in `OrdSet` insertion
Inserting into an im::OrdSet (for example by collecting an iterator into one) can violate
Rust's aliasing rules: Miri reports a stacked borrows violation in
sized_chunks::Chunk::force_copy(), which is called during insertion, where a shared borrow
is invalidated by a unique borrow before the read through it completes.
This is undefined behavior, reachable from safe code.
No fixed version is available, as the crate is unmaintained; its GitHub repository was archived by the owner on 2026-05-03.
- Record
RUSTSEC-2023-0126- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imcrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2023-0126 is a vulnerability with no CVSS score yet in im, published February 4, 2023. No source lists public exploit code. No source names a fixed version.