{"id":"GHSA-m2xr-2vj4-wh94","summary":"tanton_engine has unsound public API","details":"The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary\nchecks in public API:\n\n- `Stack::offset()`\n- `ThreadStack::get()`\n- `RootMoveList::insert_score_depth()`\n- `RootMoveList::insert_score()`\n\nThe tanton_engine crate is no longer maintained, so there are no plans to fix this issue.","aliases":["RUSTSEC-2025-0031"],"modified":"2025-10-28T06:29:25.372902Z","published":"2025-05-06T16:44:30Z","database_specific":{"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2025-05-06T16:44:30Z","nvd_published_at":null,"cwe_ids":["CWE-119"]},"references":[{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0031.html"}],"affected":[{"package":{"name":"tanton_engine","ecosystem":"crates.io","purl":"pkg:cargo/tanton_engine"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.0.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-m2xr-2vj4-wh94/GHSA-m2xr-2vj4-wh94.json"}}],"schema_version":"1.9.0"}