VDB
Sign up
LOW

GHSA-gch5-hwqf-mxhp

Unsoundness in `intern` methods on `intaglio` symbol interners

Details

Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected.

The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a `Box`.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/intaglio
Introduced in: 0Fixed in: 1.9.0

Upgrade intaglio to 1.9.0 or newer (ecosystem crates.io).

References