RUSTSEC-2026-0142
NoneCVSS
—
EPSS
—
Published
May 14, 2026
CISA due date
—
The record
Double-free in `vmem` storage reachable from safe Rust (predecessor of `oneringbuf`)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | mutringbuf | 0.0.0-0 | No fix |