`lru` crate has security warning
Author: PolycarbohydrateCreated Aug 29, 2026Updated Aug 29, 2026
Labelsbug
Is your issue REALLY a bug?
- My issue is indeed a bug!
- I am not crazy! I will not fill out this form just to ask a question or request a feature. Pinky promise.
Is there an existing issue for this?
- I have searched the existing issues.
Is this issue related to iced?
- My hardware is compatible and my graphics drivers are up-to-date.
What happened?
cargo audit displays an unsound warning for crate lru.
What is the expected behavior?
lru should not be causing any security warnings for iced.
The issue is fixed in lru versions >=18.2.
Latest lru is 18.3, consider bumping to 18.2?
Version
crates.io release
Operating System
Windows
Do you have any log output?
Crate: lru
Version: 0.16.4
Warning: unsound
Title: Potential use-after-free due to lack of panic safety in `LruCache::pop()`
Date: 2026-05-12
ID: RUSTSEC-2026-0253
URL: https://rustsec.org/advisories/RUSTSEC-2026-0253Source: iced-rs/iced