{"action":"Upgrade soroban-env-host to 26.0.0 or later.","affected":[{"fixed":"26.0.0","introduced":"0"}],"component":"soroban-env-host","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["26.0.0"],"ghsa_id":"GHSA-pm4j-7r4q-ccg8","id":"tcs_01M5KF24R6WPH48XQM6CES11DE","modified_at":"2026-03-07T02:47:39.508852Z","published_at":"2026-03-07T02:39:44Z","references":["https://osv.dev/vulnerability/GHSA-pm4j-7r4q-ccg8","https://github.com/stellar/rs-soroban-env/security/advisories/GHSA-pm4j-7r4q-ccg8","https://github.com/stellar/rs-soroban-env"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-pm4j-7r4q-ccg8","url":"https://osv.dev/vulnerability/GHSA-pm4j-7r4q-ccg8"}],"summary":"Soroban: Muxed address<->ScVal conversions may break after a conversion failure"}