https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T03:29:26.650546+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/rustsec-2025-0027 RUSTSEC-2025-0027 — Panic in mp3-metadata due to the lack of bounds checking 2026-11-06T03:29:26.651703+00:00

Affected: crates.io: mp3-metadata

The `get_id3()` methods used by `mp3_metadata::read_from_slice()` does not perform adequate bounds checking when recreating the tag due to the use of desynchronization.

Fixed in [Fix index error](https://github.com/GuillaumeGomez/mp3-metadata/pull/37), released as part of 0.4.0.