{"action":"Upgrade brillig to 1.0.0-beta.19 or later.","affected":[{"fixed":"1.0.0-beta.19","introduced":"0"}],"component":"brillig","cve_ids":["CVE-2026-41197"],"ecosystem":"crates.io","epss":0.00395,"exploited":false,"fixed_versions":["1.0.0-beta.19"],"ghsa_id":"GHSA-jj7c-x25r-r8r3","id":"tcs_01M5KF12Y56PAHAC159RZFTFBR","modified_at":"2026-05-05T16:10:00.908903Z","published_at":"2026-04-21T20:16:09Z","references":["https://osv.dev/vulnerability/GHSA-jj7c-x25r-r8r3","https://github.com/noir-lang/noir/security/advisories/GHSA-jj7c-x25r-r8r3","https://nvd.nist.gov/vuln/detail/CVE-2026-41197","https://github.com/noir-lang/noir","https://github.com/noir-lang/noir/releases/tag/v1.0.0-beta.19"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-jj7c-x25r-r8r3","url":"https://osv.dev/vulnerability/GHSA-jj7c-x25r-r8r3"},{"source":"nvd","source_id":"CVE-2026-41197","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41197"}],"summary":"Brillig: Heap corruption in foreign call results with nested tuple arrays"}