Skip to content

Product

crates.io bitmaps vulnerabilities

2 published CVES affecting crates.io bitmaps, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
0
Low
0
Unscored
2
CISA KEV
0

Latest crates.io bitmaps CVEs

Newest publication first

  1. RUSTSEC-2026-0247 bitmaps is unmaintained

    Published
    Unknown

    The bitmaps crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternatives: fixedbitset bitvec

  2. RUSTSEC-2025-0167 `Bitmap::try_from(&[u8])` can create invalid values

    Published
    Unknown

    The TryFrom<&[u8]> implementation for Bitmap<SIZE> copies the input bytes into an uninitialized backing store and calls assume_init() without validating that the bytes form a valid value of the backing store type. For SIZE = 1 the backing store is a bool, so any input byte other...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.