GHSA-67r5-rqwv-9p9q: array-init-cursor is unsound when used with types that implement `Drop`

March 31, 2025

The Drop implementation will get run twice when using the cursor.

This issue does not affect you, if you are using only using the crate with types that are Copy such as u8.

This issue also does not affect you, if you are only depending on it through the crate planus.

References

github.com/advisories/GHSA-67r5-rqwv-9p9q
github.com/planus-org/planus
github.com/planus-org/planus/issues/293
github.com/planus-org/planus/pull/294
rustsec.org/advisories/RUSTSEC-2025-0019.html

Code Behaviors & Features

Detect and mitigate GHSA-67r5-rqwv-9p9q with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →