Shaman: soundness issue and unmaintained
Affects shamanSource GCVE Database
0
Severity
MediumRated Medium by Threat Radar's AI analysis
Data as of 30 Oct 2026, 16:11 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
crates.ioshamanpkg:cargo/shamanOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Since the shaman crate is unmaintained and no patches or fixes are available, users should avoid using this crate or replace it with a maintained alternative. Users should review their dependencies and consider removing or substituting the shaman crate to mitigate potential memory safety risks.
Description
The shaman crate contains a soundness issue in functions like shaman::cryptoutil::write_u64v_le, which cannot guarantee memory safety when certain length parameters are zero. Additionally, the shaman crate is unmaintained.
References
Community reviews
Loading reviews…