—
RUSTSEC-2026-0080
Multiple soundness issues in `scaly` safe APIs
Details
Affected versions contain multiple safe APIs that can trigger undefined behavior:
- `Array<T>::index` can perform an out-of-bounds read. - `String::get_length` can perform an out-of-bounds read. - `String::append_character` can perform an invalid write. - `String::to_c_string` can perform an out-of-bounds write.
These issues were reproduced against `scaly` 0.0.37 under Miri. And the crate is unmaintained.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/scaly
Introduced in:
0.0.0-0No fixed version published yet for scaly. Pin to a known-safe version or switch to an alternative.