RUSTSEC-2025-0019

array-init-cursor in version 0.2.0 and below is unsound when used with types that implement Drop

Reported

March 27, 2025

Issued

March 30, 2025

Package

array-init-cursor (crates.io)

Type

INFO Unsound

Categories

References

Patched

The Drop implementation will get run twice when using the cursor.

This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.

This issue also does not affect you, if you are only depending on it through the crate planus.

Advisory available under CC0-1.0 license.