{"action":"Upgrade dbn to 0.22.1 or later.","affected":[{"fixed":"0.22.1","introduced":"0"}],"component":"dbn","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.22.1"],"ghsa_id":"GHSA-pfr9-2p92-qrhq","id":"tcs_01M5KF22WMZRQRYNAK9EFDK1FH","modified_at":"2026-05-20T01:00:15.746612546Z","published_at":"2024-10-09T14:34:24Z","references":["https://osv.dev/vulnerability/GHSA-pfr9-2p92-qrhq","https://github.com/databento/dbn/issues/67","https://github.com/databento/dbn/commit/339efb90fdb980920a5e8829008abc1114f4bfdd","https://github.com/databento/dbn","https://rustsec.org/advisories/RUSTSEC-2024-0377.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-pfr9-2p92-qrhq","url":"https://osv.dev/vulnerability/GHSA-pfr9-2p92-qrhq"}],"summary":"Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function"}