{"id":"GHSA-7vjm-6qgq-3mrq","summary":"Shaman has soundness issues and is unmaintained","details":"`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero.\n\n`shaman` is unmaintained.","aliases":["RUSTSEC-2025-0113"],"modified":"2025-11-04T06:43:02.078440Z","published":"2025-11-03T21:50:14Z","database_specific":{"github_reviewed_at":"2025-11-03T21:50:14Z","nvd_published_at":null,"cwe_ids":[],"severity":"LOW","github_reviewed":true},"references":[{"type":"WEB","url":"https://crates.io/crates/shaman"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0113.html"}],"affected":[{"package":{"name":"shaman","ecosystem":"crates.io","purl":"pkg:cargo/shaman"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.1.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-7vjm-6qgq-3mrq/GHSA-7vjm-6qgq-3mrq.json"}}],"schema_version":"1.9.0"}