# Unsoundness in `intern` methods on `intaglio` symbol interners

Source: https://junglewise.ai/threats/unsoundness-in-intern-methods-on-intaglio-symbol-interners-30b7682b  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-07-27  
License: CC BY 4.0 with a link back

Severity: info · Published 2023-07-27

Unsoundness in `intern` methods on `intaglio` symbol interners

Technologies: [intaglio (crates.io)](https://junglewise.ai/threats/technologies/intaglio). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Informational severity, published 27 July 2023.

**Which products and versions are affected?** intaglio (crates.io) SEMVER:introduced=0,fixed=1.9.0.

**Is there a fix for This vulnerability?** Yes. intaglio (crates.io): upgrade to 1.9.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected?** Check whether you run intaglio (crates.io) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- intaglio (crates.io): upgrade to 1.9.0 or later

  ```sh
  cargo update -p intaglio
  ```


## Affected products

- intaglio (crates.io) SEMVER:introduced=0,fixed=1.9.0

## Related threats

- [RUSTSEC-2026-0078 - Symbol confusion after hasher panic in `intaglio` interners](https://junglewise.ai/threats/rustsec-2026-0078-symbol-confusion-after-hasher-panic-in-intaglio-ab9e3b94)
- [RUSTSEC-2023-0048 - Unsoundness in `intern` methods on `intaglio` symbol interners](https://junglewise.ai/threats/rustsec-2023-0048-unsoundness-in-intern-methods-on-intaglio-symbol-d39e4311)