—
RUSTSEC-2026-0244
`setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization
Details
`setlocale` and `TextDomain::init` are unsound and may allow safe code to exhibit undefined behavior when called in a multi-threaded program.
The flaw is fixed in 0.8.0 by marking these functions `unsafe` and documenting the conditions under which they can be called safely.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io / gettext-rs
Introduced in:
0.0.0-0 Fixed in: 0.8.0 Upgrade gettext-rs to 0.8.0 or newer (ecosystem crates.io).