RUSTSEC-2026-0244
`setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization
setlocale and TextDomain::init are unsound and may allow safe code to exhibit undefined behavior when called in a multi-threaded program.
The flaw is fixed in 0.8.0 by marking these functions unsafe and documenting the conditions under which they can be called safely.
What each source reports
OSV No score
`setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization
setlocale and TextDomain::init are unsound and may allow safe code to exhibit undefined behavior when called in a multi-threaded program.
The flaw is fixed in 0.8.0 by marking these functions unsafe and documenting the conditions under which they can be called safely.
- Record
RUSTSEC-2026-0244- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gettext-rscrates.io |
0.0.0-0 up to 0.8.0 | 0.8.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0244 is a vulnerability with no CVSS score yet in gettext-rs, published August 6, 2026. No source lists public exploit code. Fixed in gettext-rs 0.8.0.