{"action":"Upgrade oneringbuf to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0"}],"component":"oneringbuf","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-q95x-7g78-rccv","id":"tcs_01M5KF2G3TTHGWNG72ZPPE6HJ8","modified_at":"2026-07-09T06:56:37.198846378Z","published_at":"2026-07-08T20:26:23Z","references":["https://osv.dev/vulnerability/GHSA-q95x-7g78-rccv","https://github.com/skilvingr/rust-oneringbuf/commit/643a24b30914068416dff9021a069c12c865a316","https://github.com/Skilvingr/rust-oneringbuf","https://rustsec.org/advisories/RUSTSEC-2026-0152.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q95x-7g78-rccv","url":"https://osv.dev/vulnerability/GHSA-q95x-7g78-rccv"}],"summary":"OneRingBuf has a Use After Free Vulnerability"}