rust-type-erasure
Warn
Audited by Socket on Nov 4, 2026
1 alert found:
SecuritySecurityreferences/gat-anymap.md
MEDIUMSecurityMEDIUM
references/gat-anymap.md
High-severity Rust memory-safety flaw demonstrated: the Evil extractor erases the map-borrow lifetime, allowing safe caller code to retain a dangling &'static reference and trigger use-after-free/undefined behavior. The fragment contains no network, credential-theft, or system-modification behavior and is not conventional malware; its risk is the unsafe API design if used in a library. Confidence is high for the demonstrated flaw, though the fragment alone does not establish whether a published package contains this implementation.
Confidence: 99%Severity: 91%
Audit Metadata