{"action":"Upgrade xmas-elf to 0.10 or later.","affected":[{"fixed":"0.10","introduced":"0"}],"component":"xmas-elf","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.10"],"ghsa_id":"GHSA-9cc5-2pq7-hfj8","id":"tcs_01M5KEWB09MAMFDQDKG0DXHMZR","modified_at":"2026-09-10T03:50:23.078536527Z","published_at":"2025-03-26T20:11:24Z","references":["https://osv.dev/vulnerability/GHSA-9cc5-2pq7-hfj8","https://github.com/nrc/xmas-elf/issues/86","https://github.com/nrc/xmas-elf/commit/57685c35512a57269086314a42a70441af4ef451","https://github.com/nrc/xmas-elf","https://rustsec.org/advisories/RUSTSEC-2025-0018.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9cc5-2pq7-hfj8","url":"https://osv.dev/vulnerability/GHSA-9cc5-2pq7-hfj8"}],"summary":"xmas-elf potential out-of-bounds read with a malformed ELF file and the HashTable API."}