{"action":"Upgrade stable-vec to 0.4.3 or later.","affected":[{"fixed":"0.4.3","introduced":"0.0.0-0"}],"component":"stable-vec","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.3"],"ghsa_id":"GHSA-mr2v-63pc-gmr4","id":"tcs_01M5KFC41MEVKC09D9QNZB0JGG","modified_at":"2026-08-25T02:45:03.396225962Z","published_at":"2026-08-24T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0267","https://crates.io/crates/stable-vec","https://rustsec.org/advisories/RUSTSEC-2026-0267.html","https://github.com/LukasKalbertodt/stable-vec/pull/51"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0267","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0267"}],"summary":"Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free)"}