Skip to content

sized-chunks (crates.io)

Advisories
9
Latest version
—
License
—
OpenSSF Scorecard
—

How to fix

Upgrading to 0.6.3 or later clears every advisory below that has a fix.

Upgrade commands
cargo
cargo update -p sized-chunks --precise 0.6.3

Known vulnerabilities

AdvisorySeverityAffectedFixed in
RUSTSEC-2026-0255
Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free)
Not rated yet
>= 0.0.0-0
No fix yet
RUSTSEC-2026-0251
sized-chunks is unmaintained
Not rated yet
>= 0.0.0-0
No fix yet
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
< 0.6.3
0.6.3
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
< 0.6.3
0.6.3
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
< 0.6.3
0.6.3
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
< 0.6.3
0.6.3
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
>= 0.0.0-0, < 0.6.3
0.6.3
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
< 0.6.3
0.6.3
GHSA-fqpx-cq8x-9wp4
Array size is not checked in sized-chunks
High
EPSS 2.92%
< 0.6.3
0.6.3
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor