{"action":"Upgrade lz4-sys to 1.9.4 or later.","affected":[{"fixed":"1.9.4","introduced":"0.0.0-0"}],"component":"lz4-sys","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.9.4"],"ghsa_id":"GHSA-9q5j-jm53-v7vr","id":"tcs_01M5KF7Y7R7G8Y6CF0ADY4CN6W","modified_at":"2026-02-04T03:20:40.494417Z","published_at":"2022-08-25T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0051","https://crates.io/crates/lz4-sys","https://rustsec.org/advisories/RUSTSEC-2022-0051.html","https://github.com/lz4/lz4/pull/972"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0051","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0051"}],"summary":"Memory corruption in liblz4"}