PT-2026-6477 · Crates.Io · Lru

Publicado 2026-01-07 · Atualizado 2026-01-07

OSV

CVSS v4.0

2.7

Baixa

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Affected versions of this crate contain a soundness issue in the IterMut iterator implementation. The IterMut::next and IterMut::next back methods temporarily create an exclusive reference to the key when dereferencing the internal node pointer.

This invalidates the shared pointer held by the internal HashMap, violating Stacked Borrows rules.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

GHSA-RHFX-M35P-FF5J

Produtos afetados

Lru

Referências · 4

• https://github.com/jeromefroe/lru-rs/pull/224 · Nota
• https://github.com/jeromefroe/lru-rs · Nota
• https://rustsec.org/advisories/RUSTSEC-2026-0002.html · Nota
• https://osv.dev/vulnerability/GHSA-rhfx-m35p-ff5j · Aviso do Fabricante