{"action":"Upgrade static-alloc to 0.2.6 or later.","affected":[{"fixed":"0.2.6","introduced":"0.2.2-0"}],"component":"static-alloc","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.2.6"],"ghsa_id":"GHSA-xrrq-rrgq-h89w","id":"tcs_01M5KF9ZHPXTQ31JW7K3S3FZQV","modified_at":"2025-10-28T06:29:27.107480Z","published_at":"2025-07-11T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0042","https://crates.io/crates/static-alloc","https://rustsec.org/advisories/RUSTSEC-2025-0042.html","https://github.com/197g/static-alloc/issues/81"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0042","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0042"}],"summary":"Uninitialized read after allocating MemBump"}