crates.io/rkyv: medium

rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution

Action: Upgrade rkyv to 0.8.16 or later.

cargo update -p rkyv --precise 0.8.16

Affected

Fixed versions

Sources

• osv: GHSA-vfvv-c25p-m7mm
• https://github.com/rkyv/rkyv/commit/5828cf5c27b664eb4432c4a93d4769e12e5e42fb
• https://github.com/rkyv/rkyv
• https://rustsec.org/advisories/RUSTSEC-2026-0122.html

published 2026-05-15T18:09:10Z · modified 2026-09-10T03:50:47.714144241Z · JSON