CVE-2021-31919: Rkyv Project Rkyv

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.

Affected products

• Rkyv Project Rkyv: before 0.6.0 (fixed in 0.6.0)

Published 2021-04-30. Last modified 2026-06-17.