crates.io/static-alloc: low
static-alloc vulnerability leads to uninitialized read after allocating MemBump
Action: Upgrade static-alloc to 0.2.6 or later.
cargo update -p static-alloc --precise 0.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.2 | 0.2.6 | - |
Fixed versions
| 0.2.6 |
Sources
- osv: GHSA-xrrq-rrgq-h89w
- https://github.com/197g/static-alloc/issues/81
- https://github.com/197g/static-alloc/pull/82/commits/d8d6a7d096d3aaafd963b356a8f1bbd8d26fd967
- https://github.com/197g/static-alloc
- https://rustsec.org/advisories/RUSTSEC-2025-0042.html
published · modified · JSON