{"id":"RUSTSEC-2020-0169","summary":"multi_mut is Unmaintained","details":"Last release was about 6 years ago.\n\nThere is an outstanding [soundness issue](https://github.com/golddranks/multi_mut/issues/1).\n\nThe maintainer has not responded for two years to the existing soundness issue.\n\nRust compiler has enabled errors relating to LLVM noalias rules and may not\ncompile anymore where as the old compiler versions had turned these off.\n\nThe maintainer has stated:\n\n\u003e I will take no responsibility of undefined behaviour possibly caused by this crate.\n\nThis crate may or may not be suitable for use anymore given the outstanding issues.","modified":"2024-12-04T12:55:45Z","published":"2020-02-07T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/multi_mut"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2020-0169.html"},{"type":"REPORT","url":"https://github.com/golddranks/multi_mut/issues/1"},{"type":"REPORT","url":"https://github.com/rust-lang/rust/issues/39155"},{"type":"WEB","url":"https://www.reddit.com/r/rust/comments/5ofuun/multi_mut_multiple_mutable_references_to_hashmap/"}],"affected":[{"package":{"name":"multi_mut","ecosystem":"crates.io","purl":"pkg:cargo/multi_mut"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"os":[],"functions":[]}},"database_specific":{"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2020-0169.json","cvss":null,"informational":"unsound","categories":[]}}],"schema_version":"1.7.3"}