{"id":"GHSA-pq5v-rwp8-p7gm","aliases":["RUSTSEC-2025-0131"],"status":"published","title":"rtvm-interpreter lacks sufficient checks in public API","description":"The affected function is unsound due to insufficient checks on public struct field.","severity":{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-475"],"published":"2025-10-31T12:00:00Z","modified":"2025-12-02T06:12:51Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"rtvm-interpreter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.0.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"rtvm-interpreter","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"4.0.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"rtvm-interpreter","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0131.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pq5v-rwp8-p7gm"},{"url":"https://crates.io/crates/rtvm-interpreter","tags":["package"]},{"url":"https://crates.io/crates/rtvm-interpreter/4.0.0","tags":["package"]},{"url":"https://docs.rs/rtvm-interpreter/latest/src/rtvm_interpreter/interpreter.rs.html","tags":["web"]}],"sources":{"ghsa":[{"id":"GHSA-pq5v-rwp8-p7gm","title":" rtvm-interpreter lacks sufficient checks in public API","description":"The affected function is unsound due to insufficient checks on public struct field.","status":"published","published":"2025-12-02T00:27:10Z","modified":"2025-12-02T00:27:13Z","cvss":[{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-475"],"updated_at":"2026-11-02T14:39:11.110487Z"}],"osv":[{"id":"GHSA-pq5v-rwp8-p7gm","title":" rtvm-interpreter lacks sufficient checks in public API","description":"The affected function is unsound due to insufficient checks on public struct field.","status":"published","published":"2025-12-02T00:27:10Z","modified":"2025-12-02T06:12:51.584058Z","cvss":[{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-475"],"updated_at":"2026-11-02T15:46:53.700556Z"},{"id":"RUSTSEC-2025-0131","title":"Lack of sufficient checks in public API","description":"The affected function is unsound due to insufficient checks on public struct field.","status":"published","published":"2025-10-31T12:00:00Z","modified":"2025-12-02T06:12:51.584058Z","updated_at":"2026-11-02T15:53:40.430679Z"}]}}