{"action":"Upgrade stellar-xdr to 25.0.1 or later.","affected":[{"fixed":"25.0.1","introduced":"0"}],"component":"stellar-xdr","cve_ids":["CVE-2026-29795"],"ecosystem":"crates.io","epss":0.00205,"exploited":false,"fixed_versions":["25.0.1"],"ghsa_id":"GHSA-x57h-xx53-v53w","id":"tcs_01M5KF4JBQDKENRKC152VWP9EW","modified_at":"2026-03-06T23:02:40.557695Z","published_at":"2026-03-05T20:45:46Z","references":["https://osv.dev/vulnerability/GHSA-x57h-xx53-v53w","https://github.com/stellar/rs-stellar-xdr/security/advisories/GHSA-x57h-xx53-v53w","https://nvd.nist.gov/vuln/detail/CVE-2026-29795","https://github.com/stellar/rs-stellar-xdr/issues/499","https://github.com/stellar/rs-stellar-xdr/pull/500","https://github.com/stellar/rs-stellar-xdr/commit/1f840013c3e2fca0321fb844b048afa01d10dda6","https://github.com/stellar/rs-stellar-xdr"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-x57h-xx53-v53w","url":"https://osv.dev/vulnerability/GHSA-x57h-xx53-v53w"}],"summary":"stellar-xdr's StringM::from_str bypasses max length validation"}