-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from using debug_assert! for critical parameter validation in the partial_sort function. The advisory specifically mentions this function's 'last' parameter validation as the root cause. The GitHub issue #7 explicitly shows the debug_assert! at line 58 of lib.rs is insufficient for release builds, leading to OOB reads. The function's logic then proceeds with unsafe get_unchecked operations that rely on this validation, making partial_sort itself the vulnerable entry point.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| partial_sort | rust | < 0.2.0 | 0.2.0 |
Ongoing coverage of React2Shell