CVE-2020-35895: Stack Project Stack

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion.

Affected products

• Stack Project Stack: before 0.3.1 (fixed in 0.3.1)

Published 2020-12-31. Last modified 2026-06-17.