{"action":"Upgrade static-alloc to 0.2.6 or later.","affected":[{"fixed":"0.2.6","introduced":"0.2.2"}],"component":"static-alloc","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.2.6"],"ghsa_id":"GHSA-xrrq-rrgq-h89w","id":"tcs_01M5KF4Y8TJR0HT6TV433TXKH8","modified_at":"2025-10-28T06:29:27.107480Z","published_at":"2025-07-11T19:57:06Z","references":["https://osv.dev/vulnerability/GHSA-xrrq-rrgq-h89w","https://github.com/197g/static-alloc/issues/81","https://github.com/197g/static-alloc/pull/82/commits/d8d6a7d096d3aaafd963b356a8f1bbd8d26fd967","https://github.com/197g/static-alloc","https://rustsec.org/advisories/RUSTSEC-2025-0042.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-xrrq-rrgq-h89w","url":"https://osv.dev/vulnerability/GHSA-xrrq-rrgq-h89w"}],"summary":"static-alloc vulnerability leads to uninitialized read after allocating MemBump"}