RUSTSEC-2025-0039:
Rust vulnerability analysis and mitigation

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments::

AnonVec::get_ref()
AnonVec::get_mut()
AnonVec::remove_get() The crate was built as a learning project and is not being maintained.

Source: NVD

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-65807	HIGH	8.4	Rust	rust-sd	No	No	Dec 10, 2025
CVE-2025-66627	HIGH	7.8	Rust	wasmi	No	Yes	Dec 09, 2025
CVE-2025-67487	MEDIUM	5.5	Rust	static-web-server	No	Yes	Dec 09, 2025
CVE-2025-66622	LOW	1.3	Rust	matrix-sdk-base	No	Yes	Dec 09, 2025
RUSTSEC-2025-0135	N/A	N/A	Rust	matrix-sdk-base	No	Yes	Dec 08, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

A community-led vulnerabilities database

A threat intelligence database

A tenant isolation framework

Get a personalized demo

"Best User Experience I have ever seen, provides full visibility to cloud workloads."

David EstlickCISO

"Wiz provides a single pane of glass to see what is going on in our cloud environments."

Adam FletcherChief Security Officer

"We know that if Wiz identifies something as critical, it actually is."

Greg PoniatowskiHead of Threat and Vulnerability Management