{"action":"Upgrade oneshot to 0.1.12 or later.","affected":[{"fixed":"0.1.12","introduced":"0"}],"component":"oneshot","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.1.12"],"ghsa_id":"GHSA-rvr2-r3pv-5m4p","id":"tcs_01M5KF37XPVSEBQ88BCMVYE8JA","modified_at":"2026-09-10T03:50:59.065721671Z","published_at":"2026-01-27T00:59:04Z","references":["https://osv.dev/vulnerability/GHSA-rvr2-r3pv-5m4p","https://github.com/faern/oneshot/issues/73","https://github.com/rustsec/advisory-db/pull/2600","https://github.com/faern/oneshot/commit/d1a1506010bc48962634807d0dcca682af4f50ba","https://github.com/faern/oneshot","https://rustsec.org/advisories/RUSTSEC-2026-0005.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-rvr2-r3pv-5m4p","url":"https://osv.dev/vulnerability/GHSA-rvr2-r3pv-5m4p"}],"summary":"oneshot has potential Use After Free when used asynchronously"}