-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RustRust| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rust-i18n-support | rust | >= 3.0.0, < 3.0.1 | 3.0.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from AtomicStr::as_str() accessing an Arc<String> through a raw pointer without incrementing the reference count. The commit diff shows this function was previously implemented with unsafe pointer dereferencing, while the patched version replaced it with arc_swap's Guard system that properly manages references. The CWE-416 classification and advisory description both directly implicate this function as the source of use-after-free conditions in multi-threaded scenarios.
Ongoing coverage of React2Shell