{"action":"Upgrade imageproc to 0.24.1 or later.","affected":[{"fixed":"0.24.1","introduced":"0.24.0"},{"fixed":"0.25.1","introduced":"0.25.0"},{"fixed":"0.26.2","introduced":"0.26.0"}],"component":"imageproc","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.24.1","0.25.1","0.26.2"],"ghsa_id":"GHSA-5qv7-j6w5-fr4m","id":"tcs_01M5KET6SDVSSCDX5HM93ZCYWN","modified_at":"2026-05-07T09:11:25.320002639Z","published_at":"2026-05-07T03:03:48Z","references":["https://osv.dev/vulnerability/GHSA-5qv7-j6w5-fr4m","https://github.com/image-rs/imageproc","https://rustsec.org/advisories/RUSTSEC-2026-0115.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5qv7-j6w5-fr4m","url":"https://osv.dev/vulnerability/GHSA-5qv7-j6w5-fr4m"}],"summary":"imageproc has fragile bounds check when sampling from image"}