CVE-2020-25575: Failure Project Failure

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010

Affected products

• Failure Project Failure: up to and including 0.1.8

Published 2020-09-14. Last modified 2026-06-17.