A lot of Rust CVEs are filed for things that C/C++ software would just consider normal bugs, or not bugs at all. For example: https://blog.rust-lang.org/2022/0

A lot of Rust CVEs are filed for things that C/C++ software would just consider normal bugs, or not bugs at all. For example: https://blog.rust-lang.org/2022/01/20/cve-2022-21658.html https://blog.rust-lang.org/2022/01/20/cve-2022-21658.html The C++ stdlib is affected by the same issue, but they don't consider it a security bug, because the API doesn't claim to be safe of race conditions. Rust doesn't explicitly claim that either, but the Rust community has a higher bar for correctness around these things, so it gets a CVE. Prior discussion here: https://news.ycombinator.com/item?id=30461036 https://news.ycombinator.com/item?id=30461036 https://www.reddit.com/r/cpp/comments/s8ok0h/possible_toctou_vulnerabilities_in/hti8jyt/ https://www.reddit.com/r/cpp/comments/s8ok0h/possible_toctou...