{"id":"GHSA-pr59-jjr4-gcf6","summary":"anon-vec lacks sufficient checks in public API","details":"The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::\n\n- `AnonVec::get_ref()`\n- `AnonVec::get_mut()`\n- `AnonVec::remove_get()`\n\nThe crate was built as a learning project and is not being maintained.","aliases":["RUSTSEC-2025-0039"],"modified":"2025-10-28T06:29:25.817320Z","published":"2025-06-05T00:39:55Z","database_specific":{"github_reviewed_at":"2025-06-05T00:39:55Z","nvd_published_at":null,"cwe_ids":["CWE-20"],"severity":"LOW","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/RylanYancey/anon-vec"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0039.html"}],"affected":[{"package":{"name":"anon-vec","ecosystem":"crates.io","purl":"pkg:cargo/anon-vec"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.1.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-pr59-jjr4-gcf6/GHSA-pr59-jjr4-gcf6.json"}}],"schema_version":"1.9.0"}