{"action":"Upgrade noyalib to 0.0.53 or later.","affected":[{"fixed":"0.0.53","introduced":"0.0.0-0"}],"component":"noyalib","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.0.53"],"ghsa_id":"GHSA-4xcc-23fx-w2wj","id":"tcs_01M5KFCE37ARDZ8TEA5N35YE3H","modified_at":"2026-10-08T15:00:03.204356893Z","published_at":"2026-10-06T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0333","https://crates.io/crates/noyalib","https://rustsec.org/advisories/RUSTSEC-2026-0333.html","https://github.com/sebastienrousseau/noyalib/pull/470"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0333","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0333"}],"summary":"Resource budgets not enforced on the typed deserialization path"}