VDB
KO

RUSTSEC-2023-0126

Aliasing violation in `OrdSet` insertion

Details

Inserting into an `im::OrdSet` (for example by collecting an iterator into one) can violate Rust's aliasing rules: Miri reports a stacked borrows violation in `sized_chunks::Chunk::force_copy()`, which is called during insertion, where a shared borrow is invalidated by a unique borrow before the read through it completes. This is undefined behavior, reachable from safe code.

No fixed version is available, as the crate is unmaintained; its GitHub repository was archived by the owner on 2026-05-03.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io / im
Introduced in: 0.0.0-0

No fixed version published yet for im. Pin to a known-safe version or switch to an alternative.

References