crates.io/anchor-lang: high

Anchor: `InterfaceAccount` allows account substitution between unexpected types

Action: Upgrade anchor-lang to 1.0.0-rc.2 or later.

cargo update -p anchor-lang --precise 1.0.0-rc.2

Affected

Fixed versions

Sources

• osv: GHSA-429q-fhh4-r6hj
• https://github.com/otter-sec/anchor/security/advisories/GHSA-429q-fhh4-r6hj
• https://github.com/solana-foundation/anchor/security/advisories/GHSA-429q-fhh4-r6hj
• https://github.com/solana-foundation/anchor/pull/3837
• https://github.com/solana-foundation/anchor/pull/4139
• https://github.com/solana-foundation/anchor/commit/26ef36968a62e28a1f028e7adae4806af30c747d
• https://github.com/solana-foundation/anchor
• https://rustsec.org/advisories/RUSTSEC-2026-0146.html

published 2026-05-13T15:33:46Z · modified 2026-05-19T20:30:23.692156902Z · JSON