{"action":"Upgrade orx-split-vec to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0.0.0-0"}],"component":"orx-split-vec","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["4.0.0"],"id":"tcs_01M5KFC20CRKHM1FCN38CJH6C3","modified_at":"2026-08-11T10:45:03.244815765Z","published_at":"2026-08-11T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0252","https://crates.io/crates/orx-split-vec","https://rustsec.org/advisories/RUSTSEC-2026-0252.html","https://github.com/orxfun/orx-split-vec/issues/95"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0252","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0252"}],"summary":"Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read)"}