{"action":"Upgrade tokio to 1.54.1 or later.","affected":[{"fixed":"1.54.1","introduced":"1.54.0"}],"component":"tokio","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.54.1"],"ghsa_id":"GHSA-5wjr-9356-4wc8","id":"tcs_01M5NATCPMD3PMSSA09P3DDNQA","modified_at":"2026-10-23T21:00:04.324221983Z","published_at":"2026-10-23T20:54:00Z","references":["https://osv.dev/vulnerability/GHSA-5wjr-9356-4wc8","https://github.com/tokio-rs/tokio/security/advisories/GHSA-5wjr-9356-4wc8","https://nvd.nist.gov/vuln/detail/CVE-2026-115567","https://github.com/tokio-rs/tokio/pull/8458","https://github.com/tokio-rs/tokio/pull/8692","https://github.com/tokio-rs/tokio/commit/2b4eba7833864c04ecd2f3e5f4a97ff4f6fa28d0","https://github.com/tokio-rs/tokio/commit/5ed619bbaba87357ee5103d71b75e7c84cad99c9","https://github.com/tokio-rs/tokio","https://github.com/tokio-rs/tokio/releases/tag/tokio-1.54.1","https://rustsec.org/advisories/RUSTSEC-2026-0384.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5wjr-9356-4wc8","url":"https://osv.dev/vulnerability/GHSA-5wjr-9356-4wc8"}],"summary":"Tokio: Race condition in `tokio::time::Interval`"}