Vulnerability RUSTSEC-2026-0183
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 months ago
May 12, 2026 at 12:00 PM UTC
Potential undefined behavior when calling Remote::list()
0.0.1 - 0.20.4
0.0.1 - 0.20.4
Summary
Potential undefined behavior when calling Remote::list()
Details
When calling Remote::list() for a remote of a git repository, when that remote does not advertise any references, git2 passes a null pointer to the unsafe function slice::from_raw_parts(). Based on the safety section documentation of function, data must be non-null even for slices of length zero. Thus, the use of a null pointer leads to undefined behavior.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 months ago
Potential undefined behavior with Signature from a buffer-created BlameHunk
0.0.1 - 0.20.4 RUSTSEC-2026-0184
0.0.1 - 0.20.4 RUSTSEC-2026-0184
Low Risk
8 months ago
git2 has potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3 GHSA-j39j-6gw9-jw6h
0.0.1 - 0.20.3 GHSA-j39j-6gw9-jw6h
Unknown
8 months ago
Potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3 RUSTSEC-2026-0008
0.0.1 - 0.20.3 RUSTSEC-2026-0008
Medium Risk
3 years ago
git2-rs fails to verify SSH keys by default
0.0.1 - 0.16.0 GHSA-m4ch-rfv5-x5g3
0.0.1 - 0.16.0 GHSA-m4ch-rfv5-x5g3
Impacted packages
Timeline
Published
5 months ago
May 12, 2026 at 12:00 PM UTC
Fixed (0.21.0)
4 months ago
May 18, 2026 at 04:06 PM UTC
Last Modified
3 months ago
June 17, 2026 at 01:00 PM UTC