From 6c750492d5c1db772d5b628e960d6ec65eb58f13 Mon Sep 17 00:00:00 2001 From: Speykious Date: Tue, 6 May 2025 22:55:11 +0200 Subject: [PATCH] RUSTSEC-2025-0028: Indicate 'cve-rs' is a joke --- crates/cve-rs/RUSTSEC-2025-0028.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/crates/cve-rs/RUSTSEC-2025-0028.md b/crates/cve-rs/RUSTSEC-2025-0028.md index d716d3ce..4dc1555a 100644 --- a/crates/cve-rs/RUSTSEC-2025-0028.md +++ b/crates/cve-rs/RUSTSEC-2025-0028.md @@ -15,6 +15,8 @@ unaffected = [] # cve-rs introduces memory vulnerabilities in safe Rust -`cve-rs` allows you to introduce common memory vulnerabilities (such as buffer overflows and segfaults) into your Rust program in a memory safe manner. +This crate is a joke and should never be used. + +`cve-rs` provides demonstrations of common memory vulnerabilities (such as buffer overflows and segfaults) implemented completely within safe Rust. Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860