{"action":"Upgrade slice-deque to 0.1.16 or later.","affected":[{"fixed":"0.1.16","introduced":"0.0.0-0"}],"component":"slice-deque","cve_ids":["CVE-2018-20995"],"ecosystem":"crates.io","epss":0.01611,"exploited":false,"fixed_versions":["0.1.16"],"ghsa_id":"GHSA-hr3c-6mmp-6m39","id":"tcs_01M5KF55R8MR0W1AA883FSWYKY","modified_at":"2026-02-04T02:55:26.607597Z","published_at":"2018-12-05T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2018-0008","https://crates.io/crates/slice-deque","https://rustsec.org/advisories/RUSTSEC-2018-0008.html","https://github.com/gnzlbg/slice_deque/issues/57"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2018-0008","url":"https://osv.dev/vulnerability/RUSTSEC-2018-0008"}],"summary":"Bug in SliceDeque::move_head_unchecked allows read of corrupted memory"}