{"action":"Upgrade crossbeam-epoch to 0.9.20 or later.","affected":[{"fixed":"0.9.20","introduced":"0.9.0"}],"component":"crossbeam-epoch","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.9.20"],"id":"tcs_01M5KFBSY1C3FTZX5JXGWJY4KF","modified_at":"2026-07-06T22:30:04.159269138Z","published_at":"2026-07-06T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0204","https://crates.io/crates/crossbeam-epoch","https://rustsec.org/advisories/RUSTSEC-2026-0204.html","https://github.com/crossbeam-rs/crossbeam/pull/1276"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0204","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204"}],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid"}