- cvss
- —
- not scored
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- —
- no score, EPSS covers CVEs only
- public exploits
- 0
- none known
Summary
Last release was about 6 years ago.
There is an outstanding [soundness issue](https://github.com/golddranks/multi_mut/issues/1).
The maintainer has not responded for two years to the existing soundness issue.
Rust compiler has enabled errors relating to LLVM noalias rules and may not compile anymore where as the old compiler versions had turned these off.
The maintainer has stated:
> I will take no responsibility of undefined behaviour possibly caused by this crate.
This crate may or may not be suitable for use anymore given the outstanding issues.
Is RUSTSEC-2020-0169 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerAffected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| crates.io | multi_mut | >=0.0.0-0 |
no fix listed |
References
Sources
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.