{"action":"Upgrade capnp to 0.13.7 (0.13.x), 0.14.11 (0.14.x) or 0.15.2 (0.15.x) or later.","affected":[{"fixed":"0.13.7","introduced":"0.0.0-0"},{"fixed":"0.14.11","introduced":"0.14.0-0"},{"fixed":"0.15.2","introduced":"0.15.0-0"}],"component":"capnp","cve_ids":["CVE-2022-46149"],"ecosystem":"crates.io","epss":0.00951,"exploited":false,"fixed_versions":["0.13.7","0.14.11","0.15.2"],"ghsa_id":"GHSA-qqff-4vw4-f6hx","id":"tcs_01M5KF81FB0K6XTFVD31P3PJ21","modified_at":"2026-11-09T11:00:02.621955324Z","published_at":"2022-11-30T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0068","https://crates.io/crates/capnp","https://rustsec.org/advisories/RUSTSEC-2022-0068.html","https://github.com/capnproto/capnproto/tree/master/security-advisories/2022-11-30-0-pointer-list-bounds.md","https://dwrensha.github.io/capnproto-rust/2022/11/30/out_of_bounds_memory_access_bug.html","https://github.com/capnproto/capnproto/security/advisories/GHSA-qqff-4vw4-f6hx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0068","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0068"}],"summary":"out-of-bounds read possible when setting list-of-pointers"}