CRITICAL9.8
GHSA-7cjc-hvxf-gqh7
Use after free and double free in bitvec
Details
An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/bitvec
Introduced in:
0.11.0Fixed in: 0.17.4Upgrade bitvec to 0.17.4 or newer (ecosystem crates.io).