{"action":"Upgrade fast-float2 to 0.2.2 or later.","affected":[{"fixed":"0.2.2","introduced":"0"}],"component":"fast-float2","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.2.2"],"ghsa_id":"GHSA-jqcp-xc3v-f446","id":"tcs_01M5KF1610Q6ATB0189KCCXF48","modified_at":"2025-10-28T06:29:25.294864Z","published_at":"2025-01-29T22:19:01Z","references":["https://osv.dev/vulnerability/GHSA-jqcp-xc3v-f446","https://github.com/aldanor/fast-float-rust/issues/38","https://github.com/Alexhuszagh/fast-float-rust/pull/7","https://github.com/Alexhuszagh/fast-float-rust","https://rustsec.org/advisories/RUSTSEC-2025-0002.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jqcp-xc3v-f446","url":"https://osv.dev/vulnerability/GHSA-jqcp-xc3v-f446"}],"summary":"fast-float2 has a segmentation fault due to lack of bound check"}