GHSA-4h96-mv53-2c86: 
Rust vulnerability analysis and mitigation

The fastidmap Rust package has been identified with a moderate severity vulnerability (GHSA-4h96-mv53-2c86) that was published on May 8, 2025. The vulnerability affects all versions up to and including 0.1.0 of the package, which is currently unmaintained. The issue was first reported on May 6, 2025, and involves a soundness issue in the FastMap::get() function (GitHub Advisory, RustSec Advisory).

The vulnerability stems from insufficient parameter validation in the FastMap::get() function. Specifically, the function lacks proper checks for its parameter index when accessing Vec elements, which could lead to memory corruption issues. The vulnerability has been classified with CWE-20 and has been assigned a moderate severity rating (GitHub Advisory).

The vulnerability could potentially result in memory corruption due to unsafe access of Vec elements, which could affect the reliability and security of applications using the fastidmap package (RustSec Advisory).

Currently, there are no patched versions available for this vulnerability. Given that the package is unmaintained, users are advised to consider alternative packages for their projects (GitHub Advisory, RustSec Advisory).