{"action":"Upgrade zaino-state to 0.4.1 or later.","affected":[{"fixed":"0.4.1","introduced":"0"}],"component":"zaino-state","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.1"],"ghsa_id":"GHSA-3whf-vgf2-9w6g","id":"tcs_01M5KES5R122HZATXJ63N97TRZ","modified_at":"2026-07-31T20:00:18.581395365Z","published_at":"2026-07-31T19:49:35Z","references":["https://osv.dev/vulnerability/GHSA-3whf-vgf2-9w6g","https://github.com/zingolabs/zaino/security/advisories/GHSA-3whf-vgf2-9w6g","https://github.com/zingolabs/zaino/pull/1172","https://github.com/zingolabs/zaino/commit/428822509bc722eb9727681752686ede9bc87e77","https://github.com/zingolabs/zaino/commit/d874295f1377bec7fd712ef75b364181b8c77d46","https://github.com/zingolabs/zaino/commit/e05112aac54ec3cdb6da29fbc143ea710b32f009","https://github.com/zingolabs/zaino"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-3whf-vgf2-9w6g","url":"https://osv.dev/vulnerability/GHSA-3whf-vgf2-9w6g"}],"summary":"zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit"}