{"action":"Upgrade slab to 0.4.11 or later.","affected":[{"fixed":"0.4.11","introduced":"0.4.10"}],"component":"slab","cve_ids":["CVE-2025-55159"],"ecosystem":"crates.io","epss":0.00175,"exploited":false,"fixed_versions":["0.4.11"],"ghsa_id":"GHSA-qx2v-8332-m4fv","id":"tcs_01M5KF2TGRT6SF3ZK2PVJ7C7QZ","modified_at":"2026-09-10T03:50:27.410724478Z","published_at":"2025-08-11T22:45:20Z","references":["https://osv.dev/vulnerability/GHSA-qx2v-8332-m4fv","https://github.com/tokio-rs/slab/security/advisories/GHSA-qx2v-8332-m4fv","https://nvd.nist.gov/vuln/detail/CVE-2025-55159","https://github.com/tokio-rs/slab/pull/152","https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4ae96b8","https://github.com/tokio-rs/slab","https://rustsec.org/advisories/RUSTSEC-2025-0047.html"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-qx2v-8332-m4fv","url":"https://osv.dev/vulnerability/GHSA-qx2v-8332-m4fv"},{"source":"nvd","source_id":"CVE-2025-55159","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55159"}],"summary":"slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check"}