#3440·iced

`lru` crate has security warning

Author: PolycarbohydrateCreated Aug 29, 2026Updated Aug 29, 2026
Labelsbug

Is your issue REALLY a bug?

  • My issue is indeed a bug!
  • I am not crazy! I will not fill out this form just to ask a question or request a feature. Pinky promise.

Is there an existing issue for this?

  • I have searched the existing issues.

Is this issue related to iced?

  • My hardware is compatible and my graphics drivers are up-to-date.

What happened?

cargo audit displays an unsound warning for crate lru.

What is the expected behavior?

lru should not be causing any security warnings for iced.

The issue is fixed in lru versions >=18.2.

Latest lru is 18.3, consider bumping to 18.2?

Version

crates.io release

Operating System

Windows

Do you have any log output?

bash
Crate:     lru
Version:   0.16.4
Warning:   unsound
Title:     Potential use-after-free due to lack of panic safety in `LruCache::pop()`
Date:      2026-05-12
ID:        RUSTSEC-2026-0253
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0253