{"action":"Upgrade pest_grammars to 2.9.3 or later.","affected":[{"fixed":"2.9.3","introduced":"0.0.0-0"}],"component":"pest_grammars","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["2.9.3"],"ghsa_id":"GHSA-7632-4q2x-hvjw","id":"tcs_01M5JHHYSXXBDTVQG2F8HHXTKC","modified_at":"2026-10-16T23:30:02.385972501Z","published_at":"2026-10-16T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0366","https://crates.io/crates/pest_grammars","https://rustsec.org/advisories/RUSTSEC-2026-0366.html","https://github.com/pest-parser/pest/pull/1212"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0366","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0366"}],"summary":"Stack overflow when parsing deeply nested input in pest_grammars"}