{"id":"GHSA-7vjm-6qgq-3mrq","aliases":["RUSTSEC-2025-0113"],"status":"published","title":"Shaman has soundness issues and is unmaintained","description":"`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero.\n\n`shaman` is unmaintained.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-05-06T12:00:00Z","modified":"2025-11-04T06:43:02Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"shaman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.1.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"shaman","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.1.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"shaman","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://crates.io/crates/shaman","tags":["web","package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0113.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-7vjm-6qgq-3mrq"}],"sources":{"ghsa":[{"id":"GHSA-7vjm-6qgq-3mrq","title":"Shaman has soundness issues and is unmaintained","description":"`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero.\n\n`shaman` is unmaintained.","status":"published","published":"2025-11-03T21:50:14Z","modified":"2025-11-03T21:50:14Z","updated_at":"2026-11-02T14:39:05.278442Z"}],"osv":[{"id":"GHSA-7vjm-6qgq-3mrq","title":"Shaman has soundness issues and is unmaintained","description":"`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero.\n\n`shaman` is unmaintained.","status":"published","published":"2025-11-03T21:50:14Z","modified":"2025-11-04T06:43:02.07844Z","updated_at":"2026-11-02T15:46:41.349637Z"},{"id":"RUSTSEC-2025-0113","title":"soundness issue and unmaintained","description":"`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero.\n\n`shaman` is unmaintained.","status":"published","published":"2025-05-06T12:00:00Z","modified":"2025-11-04T06:43:02.07844Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}