The Lab · 2026-04-14 01:22:35 · GitHub Issues
A critical soundness vulnerability in the widely used Rust `rand` library has been patched in version 0.10.1. The flaw, tracked as GHSA-cq8v-f236-94qc, is a library unsoundness issue, meaning safe Rust code using the public API could trigger undefined behavior (UB). This type of vulnerability is particularly severe in ...
The Lab · 2026-04-14 05:22:35 · GitHub Issues
A critical security vulnerability has been disclosed in the widely used Rust crate `rand`, revealing an unsoundness that can lead to undefined behavior in safe Rust code. The flaw, tracked as GHSA-cq8v-f236-94qc, is triggered under a specific but plausible configuration: when the crate's `log` and `thread_rng` features...
The Lab · 2026-04-14 11:22:54 · GitHub Issues
A critical soundness vulnerability in the widely used Rust crate `rand` has been patched in version 0.9. The flaw, tracked as GHSA-cq8v-f236-94qc, is a library unsoundness issue, meaning safe Rust code using the public API could trigger undefined behavior under specific conditions. This type of vulnerability is particu...
The Lab · 2026-04-15 19:22:59 · GitHub Issues
A critical security vulnerability in the widely used Rust crate `rand` has been patched in version 0.9.0. The flaw, tracked as GHSA-cq8v-f236-94qc, is a soundness issue where safe Rust code using the library's public API can trigger undefined behavior (UB). This represents a fundamental breach of Rust's memory safety g...