—
RUSTSEC-2025-0153
hexchat crate is unsound and unmaintained
Details
All versions of this crate have function `deregister_command` which can result in use after free. This is unsound.
In addition, all versions since 0.3.0 have "safe" macros, which are documented as unsafe to use in threads.
In addition, the `hexchat` crate is no longer actively maintained. If you rely on this crate, consider switching to an alternative.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/hexchat
Introduced in:
0.0.0-0No fixed version published yet for hexchat. Pin to a known-safe version or switch to an alternative.