RUSTSEC-2026-0097
NoneCVSS
—
EPSS
—
Published
Apr 9, 2026
CISA due date
—
The record
Rand is unsound with a custom logger using `rand::rng()`
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | rand | 0.10.0 | 0.10.1 |
| crates.io | rand | 0.7.0 | 0.8.6 |
| crates.io | rand | 0.9.0 | 0.9.3 |