An open API service providing security vulnerability metadata for many open source software ecosystems.
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
cargo:glsl-layout
PURL:
pkg:cargo/glsl-layout
|
< 0.4.0 | 0.4.0 | |
Affected Version RangesAll affected versions0.1.0, 0.1.1, 0.2.0, 0.3.0, 0.3.2 All unaffected versions0.4.0, 0.4.1, 0.4.2, 0.5.0 |
|||
Affected versions of this crate did not guard against panic within the user-provided function f (2nd parameter of fn map_array), and thus panic within f causes double drop of a single object.
The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within ManuallyDrop.
References: