{"action":"Upgrade capnp to 0.24.0 or later.","affected":[{"fixed":"0.24.0","introduced":"0"}],"component":"capnp","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.24.0"],"ghsa_id":"GHSA-5w5r-mf82-595p","id":"tcs_01M5KET9TMEK7FCN3RPNMB5RRC","modified_at":"2026-02-03T03:06:53.944791Z","published_at":"2026-01-28T16:06:09Z","references":["https://osv.dev/vulnerability/GHSA-5w5r-mf82-595p","https://github.com/capnproto/capnproto-rust/issues/605","https://github.com/capnproto/capnproto-rust/commit/7b981f4c75a975c80444cd38729bcdf12bf3eabf","https://github.com/capnproto/capnproto-rust/commit/e3aeec213e6d1b30a182bf61682a370f20d8a02c","https://github.com/capnproto/capnproto-rust","https://rustsec.org/advisories/RUSTSEC-2025-0143.html"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-5w5r-mf82-595p","url":"https://osv.dev/vulnerability/GHSA-5w5r-mf82-595p"}],"summary":"Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema"}