CVE-2026-68510
bit-vec: unsoundness arising with `deserialize` then `get_unchecked`
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
bit-vec is a compact vector of bits. Prior to version 0.10.0, there is undefined behavior if a user performs deserialize from an untrusted source and unsafe get_unchecked. A user of this library may be impacted by incorrect behavior if they perform deserialize from an untrusted source and run operations on the deserialized BitVec. This issue has been patched in version 0.10.0.
| CWE | CWE-20 |
| Vendor | contain-rs |
| Product | bit-vec |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for contain-rs bit-vec
Be the first to know when new unknown vulnerabilities affecting contain-rs bit-vec are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
contain-rs / bit-vec
< 0.10.0