CVE-2025-55159
2 advisories.
crates.io/slab CVE-2025-55159: medium, EPSS 0.18%
slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
Action: Upgrade slab to 0.4.11 or later.
cargo update -p slab --precise 0.4.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.10 | 0.4.11 | - |
Fixed versions
| 0.4.11 |
Sources
- osv: GHSA-qx2v-8332-m4fv
- https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
- https://nvd.nist.gov/vuln/detail/CVE-2025-55159
- https://github.com/tokio-rs/slab/pull/152
- https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4ae96b8
- https://github.com/tokio-rs/slab
- https://rustsec.org/advisories/RUSTSEC-2025-0047.html
CVE-2025-55159 · published · modified · JSON
crates.io/slab CVE-2025-55159: unknown, EPSS 0.18%
Out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
Action: Upgrade slab to 0.4.11 or later.
cargo update -p slab --precise 0.4.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.10 | 0.4.11 | - |
Fixed versions
| 0.4.11 |
Sources
- osv: RUSTSEC-2025-0047
- https://crates.io/crates/slab
- https://rustsec.org/advisories/RUSTSEC-2025-0047.html
- https://github.com/tokio-rs/slab/pull/152
CVE-2025-55159 · published · modified · JSON