{"action":"Upgrade block_buffer to 0.12.1 or later.","affected":[{"fixed":"0.12.1","introduced":"0"}],"component":"block_buffer","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.12.1"],"ghsa_id":"GHSA-qwgh-2vcv-g2f7","id":"tcs_01M5KF2SM7869N5Q9QBQKV4CYB","modified_at":"2026-08-19T19:30:06.686866977Z","published_at":"2026-08-19T19:15:34Z","references":["https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7","https://github.com/RustCrypto/utils/security/advisories/GHSA-qwgh-2vcv-g2f7","https://github.com/RustCrypto/utils","https://github.com/RustCrypto/utils/releases/tag/block-buffer-v0.12.1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qwgh-2vcv-g2f7","url":"https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7"}],"summary":"block_buffer: panic corrupts inline buffer position"}