{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.0.1"}],"component":"ncurses","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-x77x-7mmh-cxv3","id":"tcs_01M5KF4MG4PDYY1V48P7HYJ0KE","modified_at":"2025-10-28T06:29:26.788646Z","published_at":"2025-10-22T17:08:50Z","references":["https://osv.dev/vulnerability/GHSA-x77x-7mmh-cxv3","https://github.com/RustSec/advisory-db/pull/2427","https://github.com/jeaye/ncurses-rs","https://rustsec.org/advisories/RUSTSEC-2025-0108.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-x77x-7mmh-cxv3","url":"https://osv.dev/vulnerability/GHSA-x77x-7mmh-cxv3"}],"summary":"ncurses exposes uninitialized memory in string reading functions"}