{"action":"Upgrade kcl-lib to 0.3.129 or later.","affected":[{"fixed":"0.3.129","introduced":"0"}],"component":"kcl-lib","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.3.129"],"ghsa_id":"GHSA-jgvr-6x5w-hx5w","id":"tcs_01M5KF123WB9Q4F90HC07YY2SJ","modified_at":"2026-08-20T18:45:14.889310Z","published_at":"2026-08-20T18:34:05Z","references":["https://osv.dev/vulnerability/GHSA-jgvr-6x5w-hx5w","https://github.com/KittyCAD/modeling-app/security/advisories/GHSA-jgvr-6x5w-hx5w","https://github.com/KittyCAD/modeling-app"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jgvr-6x5w-hx5w#crates.io/kcl-lib","url":"https://osv.dev/vulnerability/GHSA-jgvr-6x5w-hx5w"}],"summary":"Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service"}