-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RustRustMiggo AIRoot Cause AnalysisThe vulnerability stems directly from the insert_slice_clone implementation shown in the commit diff. The critical flaw was performing ptr::copy and clone operations without first truncating the vector (via set_len(0)), leaving the vector in an inconsistent state if cloning panicked. The GitHub issue reproduction demonstrates double-dropping via this function, and the fix explicitly adds set_len(0) to prevent this scenario. The function's path is confirmed by the RustSec advisory and code context.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| qwutils | rust | < 0.3.1 | 0.3.1 |
Ongoing coverage of React2Shell