https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:07:41 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-92612 <p>In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &amp;str and trigger undefined behavior using entirely safe Rust.</p> <p>In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &amp;str and trigger undefined behavior using entirely safe Rust.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-92612 https://vulnerability.circl.lu/vuln/ghsa-gm83-3hcx-j6jj <p>In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &amp;str and trigger undefined behavior using entirely safe Rust.</p> <p>In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &amp;str and trigger undefined behavior using entirely safe Rust.</p> https://vulnerability.circl.lu/vuln/ghsa-gm83-3hcx-j6jj