{"id":"GHSA-pr59-jjr4-gcf6","aliases":["RUSTSEC-2025-0039"],"status":"published","title":"anon-vec lacks sufficient checks in public API","description":"The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::\n\n- `AnonVec::get_ref()`\n- `AnonVec::get_mut()`\n- `AnonVec::remove_get()`\n\nThe crate was built as a learning project and is not being maintained.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2025-05-06T12:00:00Z","modified":"2025-10-28T06:29:25Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"anon-vec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.1.1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"anon-vec","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.1.1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"anon-vec","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://github.com/RylanYancey/anon-vec","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0039.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pr59-jjr4-gcf6"},{"url":"https://crates.io/crates/anon-vec","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-pr59-jjr4-gcf6","title":"anon-vec lacks sufficient checks in public API","description":"The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::\n\n- `AnonVec::get_ref()`\n- `AnonVec::get_mut()`\n- `AnonVec::remove_get()`\n\nThe crate was built as a learning project and is not being maintained.","status":"published","published":"2025-06-05T00:39:55Z","modified":"2025-06-05T00:39:57Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:38:45.948817Z"}],"osv":[{"id":"GHSA-pr59-jjr4-gcf6","title":"anon-vec lacks sufficient checks in public API","description":"The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::\n\n- `AnonVec::get_ref()`\n- `AnonVec::get_mut()`\n- `AnonVec::remove_get()`\n\nThe crate was built as a learning project and is not being maintained.","status":"published","published":"2025-06-05T00:39:55Z","modified":"2025-10-28T06:29:25.81732Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:53.700556Z"},{"id":"RUSTSEC-2025-0039","title":"Lack of sufficient checks in public API","description":"The following functions in the anon-vec crate are unsound due to insufficient checks on their\narguments::\n\n- `AnonVec::get_ref()`\n- `AnonVec::get_mut()`\n- `AnonVec::remove_get()`\n\nThe crate was built as a learning project and is not being maintained.","status":"published","published":"2025-05-06T12:00:00Z","modified":"2025-10-28T06:29:25.81732Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}