{"action":"Upgrade xcb to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0.0.0-0"}],"component":"xcb","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-655h-hg88-5qmf","id":"tcs_01M5KFA1680DRPEYY8B628WCDE","modified_at":"2025-10-28T06:29:23.247912Z","published_at":"2025-08-05T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0051","https://crates.io/crates/xcb","https://rustsec.org/advisories/RUSTSEC-2025-0051.html","https://github.com/rust-x-bindings/rust-xcb/issues/282","https://github.com/rust-x-bindings/rust-xcb/issues/167","https://github.com/rust-x-bindings/rust-xcb/pull/283"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0051","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0051"}],"summary":"`xcb::Connection::connect_to_fd*` functions violate I/O safety"}