Threats affecting pkg:cargo/shaman

The shaman crate version 0.1.0 and earlier contains soundness issues in functions such as shaman::cryptoutil::write_u64v_le, which cannot guarantee memory safety when certain length parameters are zero. The project is unmaintained, and no patches or fixes are currently available.

The shaman crate contains a soundness issue in functions like shaman::cryptoutil::write_u64v_le, which cannot guarantee memory safety when certain length parameters are zero. Additionally, the shaman crate is unmaintained.