droundy append-only-vec

• CVE-2026-77650 Critical 9.8 The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-contr 0.8%