RUSTSEC-2026-0122
NoneCVSS
—
EPSS
—
Published
Apr 23, 2026
CISA due date
—
The record
Potential use-after-free due to lack of panic safety in `InlineVec::clear` and `SerVec::clear`
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | rkyv | 0.8.0 | 0.8.16 |