{"id":"GHSA-m2xr-2vj4-wh94","aliases":["RUSTSEC-2025-0031"],"status":"published","title":"tanton_engine has unsound public API","description":"The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary\nchecks in public API:\n\n- `Stack::offset()`\n- `ThreadStack::get()`\n- `RootMoveList::insert_score_depth()`\n- `RootMoveList::insert_score()`\n\nThe tanton_engine crate is no longer maintained, so there are no plans to fix this issue.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2025-04-24T12:00:00Z","modified":"2025-10-28T06:29:25Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"tanton_engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"tanton_engine","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.0.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"tanton_engine","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0031.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m2xr-2vj4-wh94"},{"url":"https://crates.io/crates/tanton_engine","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-m2xr-2vj4-wh94","title":"tanton_engine has unsound public API","description":"The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary\nchecks in public API:\n\n- `Stack::offset()`\n- `ThreadStack::get()`\n- `RootMoveList::insert_score_depth()`\n- `RootMoveList::insert_score()`\n\nThe tanton_engine crate is no longer maintained, so there are no plans to fix this issue.","status":"published","published":"2025-05-06T16:44:30Z","modified":"2025-05-06T16:44:31Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:38:42.263728Z"}],"osv":[{"id":"GHSA-m2xr-2vj4-wh94","title":"tanton_engine has unsound public API","description":"The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary\nchecks in public API:\n\n- `Stack::offset()`\n- `ThreadStack::get()`\n- `RootMoveList::insert_score_depth()`\n- `RootMoveList::insert_score()`\n\nThe tanton_engine crate is no longer maintained, so there are no plans to fix this issue.","status":"published","published":"2025-05-06T16:44:30Z","modified":"2025-10-28T06:29:25.372902Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:51.10002Z"},{"id":"RUSTSEC-2025-0031","title":"Unsound public API in unmaintained crate","description":"The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary\nchecks in public API:\n\n- `Stack::offset()`\n- `ThreadStack::get()`\n- `RootMoveList::insert_score_depth()`\n- `RootMoveList::insert_score()`\n\nThe tanton_engine crate is no longer maintained, so there are no plans to fix this issue.","status":"published","published":"2025-04-24T12:00:00Z","modified":"2025-10-28T06:29:25.372902Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}