Vulnerability in thin-vec (GHSA-xphw-cqx3-667j)

[xtqqczze]

thin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics

GHSA-xphw-cqx3-667j

[djc]

Thanks for reporting -- are you able to submit an advisory PR?

[xtqqczze]

Is there some procedure to ingest advisories from the GitHub Advisory Database?

@emilio Would you submit an advisory PR here?

[djc]

Everyone can submit an advisory; we can mention the maintainer to ask their approval in the PR.

[emilio]

I'm ok with it being here but I'm AFK until Monday.