Product
1 published CVE affecting crates.io out-reference, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Out::from_raw in affected versions allows writing a value to invalid memory address without requiring unsafe. The soundness issue has been addressed by making Out::from_raw an unsafe function.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.