crates.io/slab CVE-2025-55159: medium 5.1, EPSS 0.18%

slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check

Action: Upgrade slab to 0.4.11 or later.

cargo update -p slab --precise 0.4.11

Affected

Fixed versions

Sources

• osv: GHSA-qx2v-8332-m4fv
• nvd: CVE-2025-55159
• https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv
• https://github.com/tokio-rs/slab/pull/152
• https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4ae96b8
• https://github.com/tokio-rs/slab
• https://rustsec.org/advisories/RUSTSEC-2025-0047.html

CVE-2025-55159 · published 2025-08-11T22:45:20Z · modified 2026-09-10T03:50:27.410724478Z · JSON