CVE-2020-25573

Name of the Vulnerable Software and Affected Versions linked-hash-map crate versions prior to 0.5.3

Description An issue was discovered in the linked-hash-map crate, where it creates an uninitialized NonNull pointer, violating a non-null constraint. The affected versions of this crate called mem::uninitialized() to create a NonNull<T>, which is undefined behavior. The flaw was corrected by avoiding the use of mem::uninitialized().

Recommendations For versions prior to 0.5.3, update to version 0.5.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of mem::uninitialized() in the affected crate until a patch is available.