{"action":"Upgrade soroban-sdk-macros to 22.0.10 or later.","affected":[{"fixed":"25.1.1","introduced":"25.0.0"},{"fixed":"23.5.2","introduced":"23.0.0"},{"fixed":"22.0.10","introduced":"0"}],"component":"soroban-sdk-macros","cve_ids":["CVE-2026-26267"],"ecosystem":"crates.io","epss":0.00361,"exploited":false,"fixed_versions":["25.1.1","23.5.2","22.0.10"],"ghsa_id":"GHSA-4chv-4c6w-w254","id":"tcs_01M5KESJABH3F5T9R32A3P053M","modified_at":"2026-02-22T23:21:46.313513Z","published_at":"2026-02-17T21:29:05Z","references":["https://osv.dev/vulnerability/GHSA-4chv-4c6w-w254","https://github.com/stellar/rs-soroban-sdk/security/advisories/GHSA-4chv-4c6w-w254","https://nvd.nist.gov/vuln/detail/CVE-2026-26267","https://github.com/stellar/rs-soroban-sdk/pull/1729","https://github.com/stellar/rs-soroban-sdk/pull/1730","https://github.com/stellar/rs-soroban-sdk/pull/1731","https://github.com/stellar/rs-soroban-sdk/commit/e92a3933e5f92dc09da3c740cf6a360d55709a2b","https://github.com/stellar/rs-soroban-sdk"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4chv-4c6w-w254","url":"https://osv.dev/vulnerability/GHSA-4chv-4c6w-w254"}],"summary":"The rs-soroban-sdk #[contractimpl] macro calls inherent function instead of trait function when names collide"}