> In recent weeks several vulnerabilities have rocked the Rust community, causing many to question the safety of the borrow checker, or of Rust in general. In t

> In recent weeks several vulnerabilities have rocked the Rust community, causing many to question the safety of the borrow checker, or of Rust in general. In this post, we will examine two such vulnerabilities: the first is CVE-2024-3094, which involves some malicious files in the xz library, and the second is CVE-2024-24576, which involves command-injection vulnerabilities in Windows. What a weird thing to say. Neither of these are memory safety vulns. The borrow checker is irrelavent. Hell they aren't even rust specific vulns. Rust isn't magic. It is still going to have bugs & security issues from time to time.