Yank vulnerable versions
- Dominant language
- Rust
- Stars
- 2.6k
- Forks
- 179
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 29
Description
This issue tracks fixed releases, advisories, documentation, and crates.io yanks for [recent OpenAI bug reports](https://github.com/google/zerocopy/issues?q=is%3Aissue%20created%3A2026-09-04%20sort%3Acreated-desc).
## Reports and affected stable ranges
| Issue | Package containing the defect | Affected stable releases |
|---|---|---|
| #3617 | `zerocopy` | `0.8.0` through `0.8.56` |
| #3618 | `zerocopy` | `0.8.0` through `0.8.56` |
| #3619 | `zerocopy-derive` | `0.8.0` through `0.8.56` |
| #3620 | `zerocopy-derive` | `0.1.0`–`0.1.4`, `0.2.0`–`0.2.1`, `0.3.0`–`0.3.2`, `0.6.2`–`0.6.6`, `0.7.0`–`0.7.35`, and `0.8.0`–`0.8.56` |
| #3621 | `zerocopy-derive` | `0.8.0` through `0.8.56` |
| #3632 | `zerocopy` | `0.8.35` through `0.8.56` |
## Pending yanks
### `zerocopy-derive`
- [ ] `0.1.0` through `0.1.4`
- [ ] `0.2.0`
- [ ] `0.3.0` through `0.3.2`
- [ ] `0.6.2` through `0.6.6`
- [ ] `0.7.0` through `0.7.26`
- [ ] `0.7.29` through `0.7.35`
- [ ] `0.8.0` through `0.8.56`
The following affected `zerocopy-derive` releases are already yanked and require no new action:
- `0.2.1`
- `0.7.27`
- `0.7.28`
### `zerocopy`
- [ ] `0.8.0` through `0.8.56`
Contributor guide
Research direction
Start by reviewing reports #3617, #3618, #3619, #3620, #3621, and #3632, then compare their affected ranges with the pending-yank checklist. Verify the listed zerocopy and zerocopy-derive releases on crates.io, complete only the unchecked yanks, and update the checklist when all pending versions are handled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- release, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100