google / google/zerocopy

Yank vulnerable versions

Open
#3,642 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
2.6k
Forks
179
Avg merge
1d 19h
Merged PRs (30d)
29

Description

This issue tracks fixed releases, advisories, documentation, and crates.io yanks for [recent OpenAI bug reports](https://github.com/google/zerocopy/issues?q=is%3Aissue%20created%3A2026-09-04%20sort%3Acreated-desc).

## Reports and affected stable ranges

| Issue | Package containing the defect | Affected stable releases |
|---|---|---|
| #3617 | `zerocopy` | `0.8.0` through `0.8.56` |
| #3618 | `zerocopy` | `0.8.0` through `0.8.56` |
| #3619 | `zerocopy-derive` | `0.8.0` through `0.8.56` |
| #3620 | `zerocopy-derive` | `0.1.0`–`0.1.4`, `0.2.0`–`0.2.1`, `0.3.0`–`0.3.2`, `0.6.2`–`0.6.6`, `0.7.0`–`0.7.35`, and `0.8.0`–`0.8.56` |
| #3621 | `zerocopy-derive` | `0.8.0` through `0.8.56` |
| #3632 | `zerocopy` | `0.8.35` through `0.8.56` |

## Pending yanks

### `zerocopy-derive`

- [ ] `0.1.0` through `0.1.4`
- [ ] `0.2.0`
- [ ] `0.3.0` through `0.3.2`
- [ ] `0.6.2` through `0.6.6`
- [ ] `0.7.0` through `0.7.26`
- [ ] `0.7.29` through `0.7.35`
- [ ] `0.8.0` through `0.8.56`

The following affected `zerocopy-derive` releases are already yanked and require no new action:

- `0.2.1`
- `0.7.27`
- `0.7.28`

### `zerocopy`

- [ ] `0.8.0` through `0.8.56`

Contributor guide

Open the contributing guide

Research direction

Start by reviewing reports #3617, #3618, #3619, #3620, #3621, and #3632, then compare their affected ranges with the pending-yank checklist. Verify the listed zerocopy and zerocopy-derive releases on crates.io, complete only the unchecked yanks, and update the checklist when all pending versions are handled.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
release, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.