This is a cross-post of the official security advisory. The official post contains a signed version with our PGP key, as well. The CVE for this vulnerability is CVE-2019-12083. The Rust team was recently notified of a security vulnerability affecting manual implementations of Error::type_id and their interaction with the Error::downcast family of functions in the standard library. If your code doe