AIKIDO-2025-10256
array-init-cursor is vulnerable to Operation on a Resource after Expiration or Release
48
Medium Risk
This Affects:
array-init-cursorTL;DR
Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release due to unsound handling of types implementing Drop. An attacker can exploit this flaw to trigger undefined behavior, potentially leading to memory corruption through the unintended double execution of a Drop implementation.
Who does this affect?
You are affected if you are using a version which is within vulnerability ranges
Background info
array-init-cursor is vulnerable to Operation on a Resource after Expiration or Release in versions 0.1.0 - 0.2.0.
How to fix this
Upgrade the array-init-cursor library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant