An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
{
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:rkyv_project:rkyv:*:*:*:*:*:rust:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.6.0"
}
]
}